SYSTEM WARNING: 'date_default_timezone_get(): It is not safe to rely on the system's timezone settings. You are *required* to use the date.timezone setting or the date_default_timezone_set() function. In case you used any of those methods and you are still getting this warning, you most likely misspelled the timezone identifier. We selected the timezone 'UTC' for now, but please set date.timezone to select your timezone.' in '/usr/share/mantis/www/core.php' line 264

0004292: smtp proxy imap authentication removes the @domain.name - MantisBT

Endian Issue Tracker

Please see now our new Bugtracker system: JIRA

View Issue Details [ Jump to Notes ]

[ Issue History ] [ Print ]

Project

Category

View Status

Date Submitted

Last Update

0004292

Endian Firewall

Proxy SMTP

public

2012-03-06 14:15

Reporter

luca-endian

Assigned To

Priority

normal

Severity

minor

Reproducibility

always

Status

confirmed

Resolution

open

Platform

OS Version

Product Version

2.4.1

Target Version

Fixed in Version

Summary

0004292: smtp proxy imap authentication removes the @domain.name

Description

If the client uses user: name@domain.name and password: xxx

imap command between endian and mail server is:
saslauthd LOGIN "name" "xxx"

BUT some servers (especially if they host multiple domains) require the @domain.name as username and this is why authentication fails.

SOLUTION

edit the file /etc/sysconfig/saslauthd.tmpl adding the "-r" option at the line:

FLAGS=' -O $IMAP_AUTH_SERVER#if $IMAP_AUTH_PORT != "" then "/%s" % $IMAP_AUTH_PORT else ""# #slurp

it should be:

FLAGS=' -r -O $IMAP_AUTH_SERVER#if $IMAP_AUTH_PORT != "" then "/%s" % $IMAP_AUTH_PORT else ""# #slurp

then restartsmtpscan.py -fd and make sure the the saslauth file has the -r option:

root@gw01:/etc/sysconfig # cat saslauthd
SOCKETDIR=/var/spool/postfix/var/run/saslauthd
MECH='rimap'
FLAGS=' -r -O 192.168.1.1/143 -n 5'

  -r Combine the realm with the login before passing to authentication mechanism
                 Ex. login: "foo" realm: "bar" will get passed as login: "foo@bar"
                 The realm name is passed untouched.

I tested also without @domain.name and the username is not altered anymore by endian.

Issue History
Date Modified	Username	Field	Change
2012-03-06 14:15	luca-endian	New Issue
2012-03-06 14:15	luca-endian	Status	new => confirmed
2012-03-06 14:15	luca-endian	Tag Attached: purple

Relationships

Notes
There are no notes attached to this issue.