Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #270670

Re: sendmail and starttls failing

Show all headers | View raw

On Sun, 30 Jun 2024, Michael Grant wrote:

>> Jun 30 11:43:00 bottom sm-mta[18852]: AUTH: available mech=DIGEST-MD5 CRAM-MD5 LOGIN PLAIN, allowed mech=EXTERNAL
>
> Update here, it's not apparently an STARTTLS error, it's an AUTH
> error.  Something in the update last night altered my list of
> available AUTH mechanisms.
>
> I manually updated sendmail.cf and updated this line:
>
> O AuthMechanisms=EXTERNAL DIGEST-MD5 CRAM-MD5 NTLM LOGIN PLAIN
>
> by adding "DIGEST-MD5 CRAM-MD5 NTLM LOGIN PLAIN" and now it accepts
> mail from my desktop.
>
> I don't see where this is configured.  /etc/sasl2/Sendmail.conf which
> is a link to /etc/mail/sasl/Sendmail.conf.2, but this file looks good,
> I don't know where it's getting the AuthMechanisms from (yet).
>

I think this is configured in sasl.m4

and I suspect it's something to do with the "sm_version_math" stuff but
exactly what has changed to break this for you I don't know

ifelse(eval(sm_version_math >= 526848), `1', `dnl
ifelse(sm_enable_auth, `yes', `dnl
dnl #
dnl # Set a more reasonable timeout on negotiation
dnl #
define(`confTO_AUTH',      `2m')dnl      #           , def=10m
dnl #
dnl # Do not touch anything above this line...
dnl #
dnl # Available Authentication methods
dnl #
define(`confAUTH_MECHANISMS',dnl
`DIGEST-MD5 CRAM-MD5 PLAIN LOGIN')dnl
dnl #
dnl # These, we will trust for relaying
dnl #
TRUST_AUTH_MECH(`DIGEST-MD5 CRAM-MD5 PLAIN LOGIN')
dnl #
dnl # for 8.12.0+, add EXTERNAL as an available & trusted mech (w/STARTTLS)
dnl # and allow sharing of /etc/sasldb(2) file, allow group read/write
dnl #
ifelse(eval(sm_version_math >= 527360), `1', `dnl
define(`confAUTH_MECHANISMS',dnl
`EXTERNAL 'defn(`confAUTH_MECHANISMS'))dnl
TRUST_AUTH_MECH(`EXTERNAL')
define(`confDONT_BLAME_SENDMAIL',dnl
defn(`confDONT_BLAME_SENDMAIL')`,GroupReadableSASLDBFile,GroupWritableSASLDBFile')dnl
')dnl

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

sendmail and starttls failing Michael Grant <mgrant@grant.org> - 2024-06-30 18:00 +0200
  Re: sendmail and starttls failing Michael Grant <mgrant@grant.org> - 2024-06-30 18:40 +0200
    Re: sendmail and starttls failing Tim Woodall <debianuser@woodall.me.uk> - 2024-06-30 20:40 +0200
  Re: sendmail and starttls failing Tim Woodall <debianuser@woodall.me.uk> - 2024-06-30 23:30 +0200
    Re: sendmail and starttls failing Michael Grant <mgrant@grant.org> - 2024-06-30 23:40 +0200
      Re: sendmail and starttls failing Tim Woodall <debianuser@woodall.me.uk> - 2024-07-01 00:40 +0200
        Re: sendmail and starttls failing Tim Woodall <debianuser@woodall.me.uk> - 2024-07-01 11:30 +0200
          Re: sendmail and starttls failing Tim Woodall <debianuser@woodall.me.uk> - 2024-07-01 18:40 +0200
    Re: sendmail and starttls failing Tim Woodall <debianuser@woodall.me.uk> - 2024-07-01 00:10 +0200
      Re: sendmail and starttls failing Greg Wooledge <greg@wooledge.org> - 2024-07-01 00:20 +0200
        Re: sendmail and starttls failing Tim Woodall <debianuser@woodall.me.uk> - 2024-07-01 00:30 +0200
          Re: sendmail and starttls failing Mark Fletcher <mark27q1@gmail.com> - 2024-07-01 10:50 +0200
            Re: sendmail and starttls failing Tim Woodall <debianuser@woodall.me.uk> - 2024-07-01 11:20 +0200
            Re: sendmail and starttls failing Greg Wooledge <greg@wooledge.org> - 2024-07-01 13:30 +0200
        Re: sendmail and starttls failing Jeffrey Walton <noloader@gmail.com> - 2024-07-01 00:50 +0200
      Re: sendmail and starttls failing Jeffrey Walton <noloader@gmail.com> - 2024-07-01 00:50 +0200

csiph-web