[Alpine-info] Can't disable PLAIN for my SMTP server

[Benjamin R. Haskell]

On Sun, 27 Jan 2008, Mark Crispin wrote:


> On Sun, 27 Jan 2008, Benjamin R. Haskell wrote:

>> If I don't include PLAIN in the list of disabled authentication schemes, I 

>> can't connect to my SMTP server (smtp.andrew.cmu.edu).

>

> The log that you report fairly clearly identified a bug in the 

> smtp.andrew.cmu.edu SMTP server:

>

>> 220-smtp.andrew.cmu.edu ESMTP Sendmail 8.13.8/8.13.8

>> 220-Mis-identifing the sender of mail is an abuse of computing facilites.

>> 220 ESMTP spoken here

>> EHLO transport

>> 250-smtp.andrew.cmu.edu Hello my.host.name [my.ip.add.ress], pleased to 

>> meet you

>> [snip]

>> 250-AUTH GSSAPI PLAIN LOGIN

>> 250 HELP

>> AUTH PLAIN

>> QUIT

>> call_mailer ERROR: Error sending

>

> Specifically, this seems to indicate that this server does not support the 

> form of the SMTP AUTH command that does not have an initial client response.

>


Okay. Thanks. Not sure I can do anything about it, but at least I know 
what's going wrong.



>> AUTH GSSAPI

>> 334

>> *

>> 501 5.0.0 AUTH aborted

>> mm_log warning: Kerberos error: No credentials cache found (try running 

>> kinit) for SMTP.andrew.cmu.edu

>> mm_log babble: Retrying using PLAIN authentication after 501 5.0.0 AUTH 

>> aborted

>> AUTH PLAIN

>> end_signals(1)

>

> I think that this may be fixed in the imap-2007a development snapshot:

> 	ftp://ftp.cac.washington.edu/mail/imap-2007a.DEV.tar.Z

>

> Replace the alpine/imap directory with the bits from imap-2007a and rebuild 

> Alpine.  There is a bug that I fixed in the SMTP client code between 

> imap-2007 (which Alpine uses) and imap-2007a which could cause crashes if the 

> SMTP server closes the connection during the SMTP authentication procedure.


Sorry. It still happens in Alpine SVN r918 with the imap dir replaced by 
imap-2007a.DEV.SNAP-0801171748. Anything else I could provide to aid 
debugging?

Best,
Ben