Bug#403583: exim4: client TLS authentication is broken

[Marc Haber]

On Fri, Jan 05, 2007 at 09:05:09AM -0500, Celejar wrote:
> On Fri, 5 Jan 2007 10:10:36 +0100
> Marc Haber <mh+debian-packages at zugschlus.de> wrote:
> > (a)
> > verify that your passwd.client line is formatted like:
> > *:username:clear-text-password
> > 
> 
> The debugging output I sent was made with the passwd.client file I gave
> in my original report, which I believe has the '*' line correctly
> formatted.

yes, that looks good.

> > (b)
> > show me the output of:
> > exim4 -bP transport remote_smtp_smarthost | grep hosts_try_auth
> 
> hosts_try_auth = ${if exists {/etc/exim4/passwd.client}{smtp.gmail.com}
> {}}

That looks good as well. However, your exim does think that the server
you're connected to is not listed in hosts_try_auth:
|64.233.185.109 in hosts_require_auth? no (option unset)
|gethostbyname2(af=inet6) returned 3 (NO_RECOVERY)
|gethostbyname2 looked up these IP addresses:
|  name=gmail-smtp.l.google.com address=72.14.247.109
|64.233.185.109 in hosts_try_auth? no (end of list)
|  SMTP>> MAIL FROM:<> SIZE=51400

My reference system, when configured to deliver through smtp.gmail.com
via my gmail account:
66.249.93.111 in hosts_require_auth? no (option unset)
gethostbyname2(af=inet6) returned 3 (NO_RECOVERY)
gethostbyname2 looked up these IP addresses:
  name=gmail-smtp.l.google.com address=66.249.93.111
  name=gmail-smtp.l.google.com address=66.249.93.109
66.249.93.111 in hosts_try_auth? yes (matched "smtp.gmail.com")

and then proceeds to authenticate.

I am somewhat "at the end of my latin" here, since I cannot reproduce
the bug. If you are on Debian etch or Debian sid (which your original
bug report suggested), please try purging exim (you'll probably need
--force-depends for that), rm -rf /etc/exim4, and reinstalling a
current exim4 package (smarthost handling has changed in 4.63-5, and I
have been testing with a current version). You seem to have your
configuration changed in some places, and I'd like to get you "back on
track" before debugging any further.

Greetings
Marc

-- 
-----------------------------------------------------------------------------
Marc Haber         | "I don't trust Computers. They | Mailadresse im Header
Mannheim, Germany  |  lose things."    Winona Ryder | Fon: *49 621 72739834
Nordisch by Nature |  How to make an American Quilt | Fax: *49 621 72739835