nmh-workers
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Nmh-workers] nmh 1.2 failed in doing smtp authentication


From: Peter Maydell
Subject: Re: [Nmh-workers] nmh 1.2 failed in doing smtp authentication
Date: Wed, 30 Apr 2008 20:26:54 +0100

Zhang Weiwu wrote:
>After I used the patch, I hit another different problem.
>
>address@hidden:~$ send -sasl -watch -verbose
>T 10.1.77.22:51859 -> 216.170.248.235:25 [AP]
>  AUTH LOGIN..                                                               
>#
>T 216.170.248.235:25 -> 10.1.77.22:51859 [AP]
>  334 VXNlcm5hbWU6....*9                                                     
>#
>T 10.1.77.22:51859 -> 216.170.248.235:25 [AP]
>  emhhbmd3ZWl3dQ==..                                                         
>#

If you base64 decode this you'll see that the user name that nmh is
sending is "zhangweiwu". So it's not paying attention to the login
specified in the .netrc, only to the password. I just checked in a
fix for a problem which I think matches this one. Can I get you to
try building the head of CVS version of nmh to test this, please?
You can check it out with this command:
 cvs -z3 -d:pserver:address@hidden:/sources/nmh co nmh

Once you've done that you'll need to run:
 autoheader
 autoconf
 date > stamp-h.in

and then you should be able to configure and make as usual.

>First one may wonder if I have used wrong password. No, my password is
>100% correct! Tested by various means. I can even just give you my
>password so you can test (later I will change it back to my normal
>password. My .netrc is:
>
>machine mail.vfemail.net login address@hidden password .J4TUp8v

You should note that the username and password are included in the network
transcripts you've been giving. Although they're base64 encoded so it's
not immediately obvious, anybody could trivially base64-decode them. So
you should be as careful about them as you would be with the password
itself.

>Interesting information: I can no longer receive my emails!
>
>address@hidden:~$ /usr/local/nmh/bin/inc
>inc: -ERR authorization failed
>address@hidden:~$ /usr/bin/inc
>Incorporating new mail into inbox...
>
> 232+ 04/29 Zhang Weiwu        test account<<is for you. -- Real
>Softservice Hu

I'm not sure what's happening here. The output of 'inc -snoop' for
the working and non-working versions of inc might be informative.

-- PMM




reply via email to

[Prev in Thread] Current Thread [Next in Thread]