Topic: SMTP Authentication

[Mark Worley]

Hi,
Up til now I've used SME 5.1.2 with the excellent pop-before-smtp addition to allow remote users to send mail using the SMTP server. I've recently upgraded to 5.6 and cannot find a way to get the same functionality. I would like remote users to be able to send mail via our SMTP server.
Any help much appreciated...
Mark Worley

[Ron Moxham]

Have a look at this.........
http://www.pagefault.org/code/e-smith.shtml#securemail

[Nathan Fowler]

Mark, glad you liked pop-before-smtp, and the link above pasted by Ron provides CVM-SASL, it's a bit different than pop-before-smtp.  Pop-before-smtp doesnt require a client-level configuration, the server senses the connection and grants the user relay rights for a given amount of time.  Using SASL, the user must login to the SMTP server using their pop3 username/password.  It's not very difficult to configure, in most clients it's nothing more than a checkbox.

If you use CVM-SASL, I strongly recommend you configure your clients to use SSL since they are transmitting a system password in plain-text (the same holds true for pop3).

As FYI, there is a link to Damien's CVM-SASL on my page, http://www.stickit.nu/pop-before-smtp

Thanks,
Nathan

[Mark Worley]

Thanks for the reply Nathan. Just a few quick questions. I am currently using SME 5.6 Developer release. As far as I can tell this is the latest release (?).
I seem to get error messages related to the e-smith packet filter.

"The release version of sme 5.6 includes an older version of e-smith packet filter than the final beta so you can safely use --nodeps with rpm to overcome this."

I have sourced the cvm-0.11-1.i386.rpm, and the appropriate smtp, pop3 and imap packages for 5.6. Am I correct in assuming that I simply install them starting with the cvm package (using rpm -ivh ***), followed by the smtp, pop3 and imap packages for 5.6? When I tried this a new panel ( Secure Email) appeared in SME's web interface. Do I then just enable the featured I need? I really only want standard smtp rather than ssmtp.
Once again thanks for your help...
Mark Worley

[Upaboveit]

> I have sourced the cvm-0.11-1.i386.rpm, and the appropriate
> smtp, pop3 and imap packages for 5.6. Am I correct in
> assuming that I simply install them starting with the cvm
> package (using rpm -ivh ***), followed by the smtp, pop3 and
> imap packages for 5.6? When I tried this a new panel ( Secure
> Email) appeared in SME's web interface. Do I then just enable
> the featured I need? I really only want standard smtp rather
> than ssmtp.


I just installed them all in the order that you specify (although I used the latest version of cvm (cvm-0.17-1.i386.rpm). --nodeps was needed for the 5.6 packages. However, even after finding an apparently functioning new panel in the manager I still couldn't get remote smtp going. I rebooted the server and it starting working just fine. I don't know why the server reboot was required.

[Nathan Fowler]

Upaboveit, did you restart qmail/xinetd after you applied the CVM rpms?  It could be that xinetd and qmail need to be restarted, which was done during the reboot.

Thanks,
Nathan

[Mark Worley]

Thanks very much for your help. It works a dream! Thanks to Damien for his contribs...
Mark Worley

[Upaboveit]

> did you restart qmail/xinetd after you applied the
> CVM rpms?  It could be that xinetd and qmail need to be
> restarted, which was done during the reboot.

No, but I did do /sbin/e-smith/signal-event post-upgrade after it was all installed (as per instructions on pagefault.org).