Re: [Evolution] TLS/authenticated SMTP

[ben hall <bnh1 columbia edu>]

Here's the header from one of my previous messages, with asterisks 
around the important parts:

From evolution-admin ximian com  Thu Oct  3 14:49:42 2002
Return-Path: <evolution-admin ximian com>
Received: from trna.ximian.com (trna.ximian.com [141.154.95.22])
	by marionberry.cc.columbia.edu (8.12.3/8.12.3) with ESMTP id 
g93InaXN016741;
        Thu, 3 Oct 2002 14:49:38 -0400 (EDT)
Received: from trna.ximian.com (localhost [127.0.0.1])
        by trna.ximian.com (8.11.6/8.11.6) with ESMTP id g93Hw2o14846;
        Thu, 3 Oct 2002 13:58:02 -0400
Received: from marionberry.cc.columbia.edu (marionberry.cc.columbia.edu 
[128.59.59.100])
        by trna.ximian.com (8.11.6/8.11.6) with ESMTP id g93HvCo14777;
        Thu, 3 Oct 2002 13:57:17 -0400

*****************************************
Received: from columbia.edu (pepu.ais.columbia.edu [128.59.223.160])
        (user=bnh1 mech=PLAIN bits=0)
        by marionberry.cc.columbia.edu (8.12.3/8.12.3) with ESMTP id g93Ih1XO011345
        (version=TLSv1/SSLv3 cipher=RC4-MD5 bits=128 verify=NOT);
        Thu, 3 Oct 2002 14:43:03 -0400 (EDT)
*****************************************

Message-ID: <3D9C8FAF 60307 columbia edu>
Date: Thu, 03 Oct 2002 14:42:55 -0400
From: ben hall <bnh1 columbia edu>
Reply-To: bnh1 columbia edu
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.1) Gecko/20020827
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: Jeffrey Stedfast <fejj ximian com>
CC: evolution ximian com
Subject: Re: [Evolution] TLS/authenticated SMTP


Plain is most certainly supported, as are some others.  I think the 
probably is that the university's customized sendmail configuration 
minimizes feedback to clients.

For instance:

[ben pepu ben]$ telnet send.columbia.edu 25
Trying 128.59.59.23...
Connected to send.columbia.edu.
Escape character is '^]'.
220 dewberry.cc.columbia.edu ESMTP Sendmail 8.12.3/8.12.3/CU/JPB ready 
at Thu, 3 Oct 2002 15:31:14 -0400 (EDT)
EHLO pepu.ais.columbia.edu
250-dewberry.cc.columbia.edu Hello pepu.ais.columbia.edu 
[128.59.223.160], pleased to meet you
250-ENHANCEDSTATUSCODES
250-PIPELINING
250-EXPN
250-VERB
250-8BITMIME
250-SIZE 10000000
250-ETRN
250-STARTTLS
250-DELIVERBY
250 HELP
AUTH
503 5.3.3 AUTH not available
HELP
502 5.3.0 Sendmail 8.12.3 -- HELP not implemented


The debug information churned out 3591 lines, so I'll give you what i 
think is the most pertinent:

sending : EHLO pepu.ais.columbia.edu^M
received: 250-dewberry.cc.columbia.edu Hello pepu.ais.columbia.edu 
[128.59.223.160], pleased to meet you
received: 250-ENHANCEDSTATUSCODES
This server supports enhanced status codes
received: 250-PIPELINING
received: 250-EXPN
received: 250-VERB
received: 250-8BITMIME
This server supports 8bit MIME
received: 250-SIZE 10000000
received: 250-ETRN
received: 250-STARTTLS
This server supports STARTTLS
received: 250-DELIVERBY
received: 250 HELP
sending : STARTTLS^M
received: 220 2.0.0 Ready to start TLS
sending : MAIL FROM:<bnh1 columbia edu>^M
received: 250 2.1.0 <bnh1 columbia edu>... Sender ok
sending : RCPT TO:<ben benhall com>^M
received: 550 5.7.1 <ben benhall com>... Relaying denied. Proper 
authentication required.
sending : QUIT^M
received: 221 2.0.0 dewberry.cc.columbia.edu closing connection


It looks to me like any AUTH stuff is not available until after a 
STARTTLS has been issued.  But i'm not a sendmail guru either.  There's 
no question, however, that our servers support PLAIN authentication over 
 TLS.

Any help is appreciated, I really wish I could get back to using 
Evolution full-time.  It makes pretty much every other mail program out 
there look like slow, ugly crap.

Thanks,
Ben



Jeffrey Stedfast wrote:
> On Thu, 2002-10-03 at 14:42, ben hall wrote:
>
> > Plain authentication is definitely supported.
> > I've been (very disappointedly) using mozilla for months now because the 
> > university shifted to TLS and authenticated smtp and evolution didn't 
> > support it.  Mozilla pops up a box for a password and is definitely 
> > using TLS and Plain text.  Interestingly enough, when I try to "Check 
> > for supported types" under the authentication method section for the 
> > smtp preferences, all types are greyed out afterwards...  I'll keep 
> > digging i guess.
>
>
> this means the server doesn't support any authentication mechanisms (or
> at least none that we support - which is quite a big list).
>
> export CAMEL_VERBOSE_DEBUG=1; killev; evolution-mail
>
> a few seconds later, start evolution (when evolution-mail says it's
> ready). Try sending a mail. The evolution-mail process will spew some
> debug spew (sending/received lines will appear).
>
> Jeff