Hello all.

Im try to make a SMTP Auth using Docecot SASL. Im use swaks for tests.

Im store users in LDAP. As im understand for CRAM & DIGEST MD5 we need to store pass in a clear text?... Ok.

mail: admin3@domain.off userPassword: 123 <- Clear text

What im do

%swaks -a CRAM-MD5 -au admin3@domain.off -ap 123 To: admin3@domain.off === Trying mx.domain.off:25... === Connected to mx.domain.off. <- 220 mx.domain.off ESMTP Exim 4.69 Tue, 08 Jul 2008 19:14:24 +0000 -> EHLO mx.domain.off <- 250-mx.domain.off Hello mx.domain.off [172.16.1.19] <- 250-SIZE 13631488 <- 250-PIPELINING <- 250-AUTH PLAIN LOGIN CRAM-MD5 DIGEST-MD5 <- 250-STARTTLS <- 250 HELP -> AUTH CRAM-MD5 <- 334 PDM4ODYwNTQ1MjEzMTA3NDEuMTIxNTU0NDQ2NEBteC5kb21haW4ub2ZmPg== -> YWRtaW4zQGRvbWFpbi5vZmYgMGJlYzIzOTA5Zjg4OTc3MDdkYTJmZmNmOTEzMDBhMmM= <** 535 Incorrect authentication data *** No authentication type succeeded -> QUIT <- 221 mx.domain.off closing connection === Connection closed with remote host.

Exim says:

SMTP<< AUTH CRAM-MD5 9657 dovecot authentication 9657 AUTH 12 CRAM-MD5 service=smtp secured rip=172.16.1.19 lip=172.16.1.19 resp= 9657 received: CONT 12 PDM0MTMzMjg1NTUyOTE0MjMuMTIxNTU0NDcwMUBteC5kb21haW4ub2ZmPg== 9657 SMTP>> 334 PDM0MTMzMjg1NTUyOTE0MjMuMTIxNTU0NDcwMUBteC5kb21haW4ub2ZmPg== 9657 received: FAIL 12 user=admin3@domain.off 9657 SMTP>> 535 Incorrect authentication data 9657 auth_cram_md5 authenticator failed for mx.domain.off [172.16.1.19] I=[172.16.1.19]:26: 535 Incorrect authentication data (set_id=admin3@domain.off) 9657 SMTP<< QUIT

Dovecot logs:

Info: auth(default): new auth connection: pid=9713 Info: auth(default): client in: AUTH 11 CRAM-MD5 service=smtp secured rip=172.16.1.19 lip=172.16.1.19 resp=<hidden> Info: auth(default): client out: CONT 11 PDU5MjUzNjc0Mjg1NDAyNjUuMTIxNTU0NDkyN0BteC5kb21haW4ub2ZmPg== Info: auth(default): client in: CONT<hidden> Info: auth(default): ldap(admin3@domain.off,172.16.1.19): pass search: base=dc=Virtual-Domains,dc=DOMAIN scope=subtree filter=(&(objectClass=mailUser)(mail=admin3@domain.off)) fields=mail,userPassword Info: auth(default): ldap(admin3@domain.off,172.16.1.19): result: mail(user)=admin3@domain.off userPassword(password)=<hidden> Error: auth(default): password(admin3@domain.off,172.16.1.19): Invalid password format for scheme CRAM-MD5 Info: auth(default): client out: FAIL 11 user=admin3@domain.off

password(admin3@domain.off,172.16.1.19): Invalid password format for scheme CRAM-MD5

Hm... as im see - something wrong in my dovecot-ldap.conf ? Main idea of it is mail = user, userPassword = password.

dovecot-ldap.conf:

hosts = 127.0.0.1 dn = uid=Dovecot,ou=System-Users,dc=DOMAIN dnpass = 123 debug_level = 0 ldap_version = 3 base = dc=Virtual-Domains,dc=DOMAIN deref = never scope = subtree user_attrs = user_filter = (&(objectClass=mailUser)(mail=%u)) pass_attrs = mail=user,userPassword=password pass_filter = (&(objectClass=mailUser)(mail=%u)) default_pass_scheme = CRAM-MD5

Dovecot logs with debug_level=1 in attachment.

Help me please - I running out of ideas. :-(

-- Best regards, Proskurin Kirill

dovecot: Jul 08 19:20:42 Info: auth(default): new auth connection: pid=9663 dovecot: Jul 08 19:20:42 Info: auth(default): client in: AUTH 13 CRAM-MD5 service=smtp secured rip=172.16.1.19 lip=172.16.1.19 resp=<hidden> dovecot: Jul 08 19:20:42 Info: auth(default): client out: CONT 13 PDQzMTQ1ODQxMzA2NDgxODguMTIxNTU0NDg0MkBteC5kb21haW4ub2ZmPg== dovecot: Jul 08 19:20:42 Info: auth(default): client in: CONT<hidden> dovecot: Jul 08 19:20:42 Info: auth(default): ldap(admin3@domain.off,172.16.1.19): pass search: base=dc=Virtual-Domains,dc=ForexClub scope=subtree filter=(&(objectClass=mailUser)(mail=admin3@domain.off) ) fields=mail,userPassword dovecot: Jul 08 19:20:42 Error: auth(default): ldap_search dovecot: Jul 08 19:20:42 Error: auth(default): put_filter: "(&(objectClass=mailUser)(mail=admin3@domain.off))" dovecot: Jul 08 19:20:42 Error: auth(default): put_filter: AND dovecot: Jul 08 19:20:42 Error: auth(default): put_filter_list "(objectClass=mailUser)(mail=admin3@domain.off)" dovecot: Jul 08 19:20:42 Error: auth(default): put_filter: "(objectClass=mailUser)" dovecot: Jul 08 19:20:42 Error: auth(default): put_filter: simple dovecot: Jul 08 19:20:42 Error: auth(default): put_simple_filter: "objectClass=mailUser" dovecot: Jul 08 19:20:42 Error: auth(default): put_filter: "(mail=admin3@domain.off)" dovecot: Jul 08 19:20:42 Error: auth(default): put_filter: simple dovecot: Jul 08 19:20:42 Error: auth(default): put_simple_filter: "mail=admin3@domain.off" dovecot: Jul 08 19:20:42 Error: auth(default): ldap_send_initial_request dovecot: Jul 08 19:20:42 Error: auth(default): ldap_send_server_request dovecot: Jul 08 19:20:42 Error: auth(default): ldap_result ld 0x18529160 msgid -1 dovecot: Jul 08 19:20:42 Error: auth(default): ldap_chkResponseList ld 0x18529160 msgid -1 all 1 dovecot: Jul 08 19:20:42 Error: auth(default): ldap_chkResponseList returns ld 0x18529160 NULL dovecot: Jul 08 19:20:42 Error: auth(default): wait4msg ld 0x18529160 msgid -1 (timeout 0 usec) dovecot: Jul 08 19:20:42 Error: auth(default): wait4msg continue ld 0x18529160 msgid -1 all 1 dovecot: Jul 08 19:20:42 Error: auth(default): ** ld 0x18529160 Connections: dovecot: Jul 08 19:20:42 Error: auth(default): * host: 127.0.0.1 port: 389 (default) dovecot: Jul 08 19:20:42 Error: auth(default): refcnt: 2 status: Connected dovecot: Jul 08 19:20:42 Error: auth(default): last used: Tue Jul 8 19:20:42 2008 dovecot: Jul 08 19:20:42 Error: auth(default): dovecot: Jul 08 19:20:42 Error: auth(default): ** ld 0x18529160 Outstanding Requests: dovecot: Jul 08 19:20:42 Error: auth(default): * msgid 4, origid 4, status InProgress dovecot: Jul 08 19:20:42 Error: auth(default): outstanding referrals 0, parent count 0 dovecot: Jul 08 19:20:42 Error: auth(default): ** ld 0x18529160 Response Queue: dovecot: Jul 08 19:20:42 Error: auth(default): Empty dovecot: Jul 08 19:20:42 Error: auth(default): ldap_chkResponseList ld 0x18529160 msgid -1 all 1 dovecot: Jul 08 19:20:42 Error: auth(default): ldap_chkResponseList returns ld 0x18529160 NULL dovecot: Jul 08 19:20:42 Error: auth(default): ldap_int_select dovecot: Jul 08 19:20:42 Error: auth(default): read1msg: ld 0x18529160 msgid -1 all 1 dovecot: Jul 08 19:20:42 Error: auth(default): read1msg: ld 0x18529160 msgid 4 message type search-entry dovecot: Jul 08 19:20:42 Error: auth(default): ldap_result ld 0x18529160 msgid -1 dovecot: Jul 08 19:20:42 Error: auth(default): ldap_chkResponseList ld 0x18529160 msgid -1 all 1 dovecot: Jul 08 19:20:42 Error: auth(default): ldap_chkResponseList returns ld 0x18529160 NULL dovecot: Jul 08 19:20:42 Error: auth(default): wait4msg ld 0x18529160 msgid -1 (timeout 0 usec) dovecot: Jul 08 19:20:42 Error: auth(default): wait4msg continue ld 0x18529160 msgid -1 all 1 dovecot: Jul 08 19:20:42 Error: auth(default): ** ld 0x18529160 Connections: dovecot: Jul 08 19:20:42 Error: auth(default): * host: 127.0.0.1 port: 389 (default) dovecot: Jul 08 19:20:42 Error: auth(default): refcnt: 2 status: Connected dovecot: Jul 08 19:20:42 Error: auth(default): last used: Tue Jul 8 19:20:42 2008 dovecot: Jul 08 19:20:42 Error: auth(default): dovecot: Jul 08 19:20:42 Error: auth(default): ** ld 0x18529160 Outstanding Requests: dovecot: Jul 08 19:20:42 Error: auth(default): * msgid 4, origid 4, status InProgress dovecot: Jul 08 19:20:42 Error: auth(default): outstanding referrals 0, parent count 0 dovecot: Jul 08 19:20:42 Error: auth(default): ** ld 0x18529160 Response Queue: dovecot: Jul 08 19:20:42 Error: auth(default): * msgid 4, type 100 dovecot: Jul 08 19:20:42 Error: auth(default): ldap_chkResponseList ld 0x18529160 msgid -1 all 1 dovecot: Jul 08 19:20:42 Error: auth(default): ldap_chkResponseList returns ld 0x18529160 NULL dovecot: Jul 08 19:20:42 Error: auth(default): ldap_int_select dovecot: Jul 08 19:20:42 Error: auth(default): read1msg: ld 0x18529160 msgid -1 all 1 dovecot: Jul 08 19:20:42 Error: auth(default): read1msg: ld 0x18529160 msgid 4 message type search-result dovecot: Jul 08 19:20:42 Error: auth(default): new result: res_errno: 0, res_error: <>, res_matched: <> dovecot: Jul 08 19:20:42 Error: auth(default): read1msg: ld 0x18529160 0 new referrals dovecot: Jul 08 19:20:42 Error: auth(default): read1msg: mark request completed, ld 0x18529160 msgid 4 dovecot: Jul 08 19:20:42 Error: auth(default): request done: ld 0x18529160 msgid 4 dovecot: Jul 08 19:20:42 Error: auth(default): res_errno: 0, res_error: <>, res_matched: <> dovecot: Jul 08 19:20:42 Error: auth(default): ldap_free_request (origid 4, msgid 4) dovecot: Jul 08 19:20:42 Error: auth(default): ldap_free_connection 0 1 dovecot: Jul 08 19:20:42 Error: auth(default): ldap_free_connection: refcnt 1 dovecot: Jul 08 19:20:42 Error: auth(default): adding response ld 0x18529160 msgid 4 type 101: dovecot: Jul 08 19:20:42 Error: auth(default): ldap_parse_result dovecot: Jul 08 19:20:42 Error: auth(default): ldap_first_attribute dovecot: Jul 08 19:20:42 Error: auth(default): ldap_get_values dovecot: Jul 08 19:20:42 Error: auth(default): ldap_next_attribute dovecot: Jul 08 19:20:42 Error: auth(default): ldap_get_values dovecot: Jul 08 19:20:42 Error: auth(default): ldap_next_attribute dovecot: Jul 08 19:20:42 Info: auth(default): ldap(admin3@domain.off,172.16.1.19): result: mail(user)=admin3@domain.off userPassword(password)=<hidden> dovecot: Jul 08 19:20:42 Error: auth(default): password(admin3@domain.off,172.16.1.19): Invalid password format for scheme CRAM-MD5 dovecot: Jul 08 19:20:42 Error: auth(default): ldap_msgfree dovecot: Jul 08 19:20:42 Error: auth(default): ldap_result ld 0x18529160 msgid -1 dovecot: Jul 08 19:20:42 Error: auth(default): ldap_chkResponseList ld 0x18529160 msgid -1 all 1 dovecot: Jul 08 19:20:42 Error: auth(default): ldap_chkResponseList returns ld 0x18529160 NULL dovecot: Jul 08 19:20:42 Error: auth(default): wait4msg ld 0x18529160 msgid -1 (timeout 0 usec) dovecot: Jul 08 19:20:42 Error: auth(default): wait4msg continue ld 0x18529160 msgid -1 all 1 dovecot: Jul 08 19:20:42 Error: auth(default): ** ld 0x18529160 Connections: dovecot: Jul 08 19:20:42 Error: auth(default): * host: 127.0.0.1 port: 389 (default) dovecot: Jul 08 19:20:42 Error: auth(default): refcnt: 1 status: Connected dovecot: Jul 08 19:20:42 Error: auth(default): last used: Tue Jul 8 19:20:42 2008 dovecot: Jul 08 19:20:42 Error: auth(default): dovecot: Jul 08 19:20:42 Error: auth(default): ** ld 0x18529160 Outstanding Requests: dovecot: Jul 08 19:20:42 Error: auth(default): Empty dovecot: Jul 08 19:20:42 Error: auth(default): ** ld 0x18529160 Response Queue: dovecot: Jul 08 19:20:42 Error: auth(default): Empty dovecot: Jul 08 19:20:42 Error: auth(default): ldap_chkResponseList ld 0x18529160 msgid -1 all 1 dovecot: Jul 08 19:20:42 Error: auth(default): ldap_chkResponseList returns ld 0x18529160 NULL dovecot: Jul 08 19:20:42 Error: auth(default): ldap_int_select dovecot: Jul 08 19:20:44 Info: auth(default): client out: FAIL 13 user=admin3@domain.off