smtp-auth from exim4 client to exim4 server

[Rainer Dorsch]

Hi Marc,

apparently the mail I send yesterday (after a few hours configuring exim4) was 
hard to understand. I apologize for that.

The intention of the mail was to send feedback to the maintainers. I did not 
intend to ask for support, my system is running.

I try again and hope it is easier to understand:

I setup a server (bokomoko/exim4) accepting smtp-auth with plain and login TLS 
encrypted authentification and cram-md5 authentification. This server is 
running since some months, demonstrated by swaks and other clients like 
kmail. 

exim4 is running very robust, I never had a problem, when I was done with 
configuration.

Surprisingly for me the difficult part was to configure and exim4 client to 
connect to this exim4 server via SMTP-auth. The reason for that was that my 
server FQDN is not the primary DNS entry

rd at silverboxy:~$ nslookup bokomoko.de
Server:         192.168.1.2
Address:        192.168.1.2#53

Non-authoritative answer:
Name:   bokomoko.de
Address: 89.31.32.97

rd at silverboxy:~$ nslookup 89.31.32.97
Server:         192.168.1.2
Address:        192.168.1.2#53

Non-authoritative answer:
97.32.31.89.in-addr.arpa        name = vd032097.korypet-solutions.com.

Authoritative answers can be found from:

rd at silverboxy:~$

I found in the manpage for exim4-config_files that I have to use the reverse 
DNS, in my case vd032097.korypet-solutions.com in passwd.client. That still 
did not make it working for a long time. Much later I found out by trial and 
error that I also have to use the reverse DNS entry as smarthost

rd at silverboxy:/etc/exim4$ grep smarthost update-exim4.conf.conf
dc_eximconfig_configtype='smarthost'
dc_smarthost='vd032097.korypet-solutions.com'
rd at silverboxy:/etc/exim4$

to make SMTP-auth working. I tried for a long time with bokomoko.de there.

I invested some time to find that out, it would have helped me a lot, if there 
would have been at least a reference to a place where this is documented in 
Section "2.3. SMTP-AUTH" of
/usr/share/doc/exim4-base/README.Debian.gz

Thanks,
Rainer

Am Sonntag, 16. September 2007 12:29 schrieb Marc Haber:
> Please use pkg-exim4-users for user-level questions to take some of
> the support burden from the maintainer team.
>
> On Sun, Sep 16, 2007 at 12:32:48AM +0200, Rainer Dorsch wrote:
> > I found in the man page of exim4-config_files, that hostnames in
> > passwd.client need to have a reverse dns entry. But even with that, I do
> > not get authenticated correctly:
> >
> > From the server (exim4) log:
> > 2007-09-16 00:22:37 H=f051098206.adsl.alicedsl.de (silverboxy)
> > [78.51.98.206] F=<root at bokomoko.de> rejected RCPT <rdorsch at web.de>: relay
> > not permitted
> >
> >
> > When I use the hostname with a reverse dns entry as smarthost (I use
> > debconf to modify the smarthost value), I get it working:
>
> I do not understand the issue. Do you expect the exim4 client to
> authenticate to smarthost A with the credentials given for host B?
>
> Greetings
> Marc

-- 
Rainer Dorsch
Lärchenstr. 6
D-72135 Dettenhausen
07157-734133
email: rdorsch at web.de
jabber: rdorsch at jabber.org
GPG Fingerprint: 5966 C54C 2B3C 42CC 1F4F  8F59 E3A8 C538 7519 141E
Full GPG key: http://pgp.mit.edu/