Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 29 Oct 2010 16:36:10 +0100
From:      Vincent Hoffman <vince@unsane.co.uk>
To:        Christopher Illies <Christopher.Illies@ki.se>
Cc:        "freebsd-questions@freebsd.org" <freebsd-questions@freebsd.org>
Subject:   Re: Sendmail as client via smarthost and ssl
Message-ID:  <4CCAE9EA.9000508@unsane.co.uk>
In-Reply-To: <F3AFB0E3A0FF1F44833C16C79ED54F724BE42A5C74@KIMSXCLU01.user.ki.se>
References:  <F3AFB0E3A0FF1F44833C16C79ED54F724BE42A5C70@KIMSXCLU01.user.ki.se> <4CC98291.8000609@bah.homeip.net> <F3AFB0E3A0FF1F44833C16C79ED54F724BE42A5C71@KIMSXCLU01.user.ki.se> <4CC9E9A9.2090105@unsane.co.uk> <F3AFB0E3A0FF1F44833C16C79ED54F724BE42A5C73@KIMSXCLU01.user.ki.se>, <4CCABB82.9080504@unsane.co.uk> <F3AFB0E3A0FF1F44833C16C79ED54F724BE42A5C74@KIMSXCLU01.user.ki.se>

next in thread | previous in thread | raw e-mail | index | archive | help
On 29/10/2010 14:49, Christopher Illies wrote:
> Thanks for your explanations, Vince. It got me one step further (I think).
>
> <...>
> Ok, when I use telnet, this happens:
>> telnet send.ki.se 587
> Trying 130.xxx.xxx.26...
> Connected to send.ki.se.
> Escape character is '^]'.
> 220 KIMSX09.user.ki.se Microsoft ESMTP MAIL Service ready at Fri, 29 Oct 2010 14:55:51 +0200
> EHLO
> 250-KIMSX09.user.ki.se Hello [136.xxx.xxx.214]
> 250-SIZE 10485760
> 250-PIPELINING
> 250-DSN
> 250-ENHANCEDSTATUSCODES
> 250-STARTTLS
> 250-AUTH GSSAPI NTLM      <<<<<<<
> 250-8BITMIME
> 250-BINARYMIME
> 250 CHUNKING
>
>
> Although I have no idea what GSSAPI and NTLM are, I remembered that I have
> seen these abbreviations before: NTLM is an OPTION for cyrus-sasl2, and yes,
> it is compiled in (WITH_NTLM=true). And GSSAPI appeared first in the mc file:
>
> define(`confAUTH_MECHANISMS', `EXTERNAL GSSAPI DIGEST-MD5 CRAM-MD5 LOGIN PLAIN')dnl
>
> So I changed the authinfo/client-info file to:
>
> AuthInfo:[send.ki.se] "U:smmsp" "I:XXX" "P:YYY" "M:GSSAPI"
>
> Still, it does not work:
>
> <<< 530 5.7.1 Client was not authenticated
I'd guess from here that the microsoft mail server (i'd say exchange but
its part of IIS these days i think) is being awkward. GSSAPI is kerberos
related i believe, NTLM is a windows method from what i remember. I'm
not familiar with either i'm afraid.

Vince
 
> Christopher
>




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4CCAE9EA.9000508>