NGiNX does not pass SMTP AUTH command to server?

[Andree Leidenfrost]

Hi Maxim,

Thank you for your turbo-swift reply and your explanations!

NGiNX authenticates fine for IMAP and POP3. Is it not somewhat
inconsistent that it does not authenticate for SMTP? Especially as it
seems to work the second time??? If the SMTP server can take care of
authentication in the first place, would it not be a good thing to
utilise this rather than relying on an additional authentication
mechanism?

Has the patch you mention actually been put in front of the Postfix
people? I have no idea what RFCs may exist for this xclient stuff (and I
have not really been able to find anything definitive on this on the
internet), but changing the code of an MTA is something that would not
happen on a whim, I guess?

Thanks again & best regards,
Andree


On Sun, 2010-02-28 at 12:49 +0300, Maxim Dounin wrote:
> Hello!
> 
> On Sun, Feb 28, 2010 at 08:02:19PM +1100, Andree Leidenfrost wrote:
> 
> [...]
> 
> > According to wireshark, rather than sending the AUTH command the first
> > time, nginx just sends a HELO command. The second time the AUTH command
> 
> Yes, nginx doesn't pass AUTH command to backend for SMTP.  You 
> should configure backend to accept mail from nginx without 
> authentication.
> 
> [...]
> 
> > I few notes on the config:
> > - I am using a trivial authentication server.
> > - I have turned ssl off for test purposes.
> > - I have turned xclient off because Postfix does not accept the xclient 
> >   login attribute. (I don't believe it is required?)
> 
> You need postfix patched to work with nginx's xclient on.
> Patch is here:
> 
> http://citrin.ru/nginx:xclient-login-patch
> 
> Maxim Dounin
> 
> _______________________________________________
> nginx mailing list
> nginx at nginx.org
> http://nginx.org/mailman/listinfo/nginx


-- 
Andree Leidenfrost
Sydney - Australia
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: This is a digitally signed message part
URL: <http://nginx.org/pipermail/nginx/attachments/20100228/90bb989d/attachment.pgp>