Bug#403583: exim4: client TLS authentication is broken

[Celejar]

On Fri, 5 Jan 2007 10:10:36 +0100
Marc Haber <mh+debian-packages at zugschlus.de> wrote:

> On Fri, Jan 05, 2007 at 01:19:39AM -0500, celejar wrote:
> > On 1/3/07, Marc Haber <mh+debian-packages at zugschlus.de> wrote:
> > >* is a catchall, I have verified this in a test setup with a smarthost
> > >that had its reverse DNS deliberatelybroken.
> > >
> > >You only need to put the IP address in passwd.client if you have
> > >specified a host name with broken reverse DNS there as the hostname
> > >will only be compared to the reverse DNS.
> > 
> > Perhaps I'm missing something, but as I mentioned in my original
> > report, my passwd.client does have an '*' line and exim still often
> > fails to authenticate.
> 
> That is not supposed to happen. The "*" line should work.
> 
> Can I see debugging output of a failed delivery attempt? If the
> debugging output you recently sent was already made with a "*" in
> passwd.client, please
>
> (a)
> verify that your passwd.client line is formatted like:
> *:username:clear-text-password
> 

The debugging output I sent was made with the passwd.client file I gave
in my original report, which I believe has the '*' line correctly
formatted.

> (b)
> show me the output of:
> exim4 -bP transport remote_smtp_smarthost | grep hosts_try_auth

hosts_try_auth = ${if exists {/etc/exim4/passwd.client}{smtp.gmail.com}
{}}


> and (long line!)
> exim4 -be "$(exim4 -bP transport remote_smtp_smarthost | grep hosts_try_auth | awk '{print $2}' FS="=")"

smtp.gmail.com

> 
> (both lines need to be executed as root).
> 
> Greetings
> Marc

Thanks,
Celejar

-- 
ssuds.sourceforge.net - Home of Ssuds and Ssudg, a Simple Sudoku Solver 
and Generator