transport >> Exchange 2000 SMTP authentication failed

by Jan Wurl » Tue, 14 Oct 2003 19:03:37 GMT

I use Mercur Mailserver to relay the mails coming from our Exchange Server.
The Mercur requires SMTP-Authentification. But Exchange 2000 (the IIS
SMTP-Service too!) sends the authentification information in a way, Mercur
does not recognize (it sends auth login command and the username in one
line, and after the username command it sends the password):

14.10.2003 12:01:35 53 0 RECEIVE ehlo
alpha-sql.mariendorf.alpha-baustoffvertrieb.de
14.10.2003 12:01:35 0 52 SEND 250-mail1.prosales-europe.com Hello
217.232.22.163
14.10.2003 12:01:35 0 10 SEND 250-EXPN
14.10.2003 12:01:35 0 10 SEND 250-SIZE
14.10.2003 12:01:35 0 10 SEND 250-ETRN
14.10.2003 12:01:35 0 36 SEND 250-AUTH CRAM-MD5 NTLM LOGIN PLAIN
14.10.2003 12:01:35 0 10 SEND 250 HELP
14.10.2003 12:01:35 61 0 RECEIVE auth login
c2ftbwvscg9zdebhbhboys1iyxvzdg9mznzlcnryawvilmrl
14.10.2003 12:01:35 0 18 SEND 334 VXNlcm5hbWU6
14.10.2003 12:01:35 14 0 RECEIVE a29obgu5nw==
14.10.2003 12:01:35 0 18 SEND 334 UGFzc3dvcmQ6
14.10.2003 12:01:35 14 0 RECEIVE a29obgu5nw==
14.10.2003 12:01:35 0 27 SEND 504 Authentication failed


with Outlook Express, it works perfect (it first sends auth login, waits for
the username command, send the username...)

14.10.2003 12:03:18 18 0 RECEIVE helo wsprosales4
14.10.2003 12:03:18 0 51 SEND 250 mail1.prosales-europe.com Hello
217.231.68.50
14.10.2003 12:03:18 12 0 RECEIVE auth login
14.10.2003 12:03:18 0 18 SEND 334 VXNlcm5hbWU6
14.10.2003 12:03:18 50 0 RECEIVE
c2ftbwvscg9zdebhbhboys1iyxvzdg9mznzlcnryawvilmrl
14.10.2003 12:03:18 0 18 SEND 334 UGFzc3dvcmQ6
14.10.2003 12:03:18 14 0 RECEIVE a29obgu5nw==
14.10.2003 12:03:18 0 31 SEND 235 Authentication successful
14.10.2003 12:03:18 45 0 RECEIVE mail from:
< XXXX@XXXXX.COM >
14.10.2003 12:03:18 0 49 SEND 250 < XXXX@XXXXX.COM >,
sender ok
14.10.2003 12:03:19 25 0 RECEIVE rcpt to: < XXXX@XXXXX.COM >
14.10.2003 12:03:19 0 52 SEND 250 User not local; will forward to
< XXXX@XXXXX.COM >
14.10.2003 12:03:19 6 0 RECEIVE data
14.10.2003 12:03:19 0 54 SEND 354 Start mail input, terminate with
<CRLF>.<CRLF>
14.10.2003 12:03:19 1228 0 TRANSFER Transfer of 1228 bytes completed
14.10.2003 12:03:19 0 73 SEND 250 1228 bytes received in 0,453
seconds; Message accepted for delivery
14.10.2003 12:03:20 6 0 RECEIVE quit
14.10.2003 12:03:20 0 38 SEND 221 217.231.68.50 closing connection


can I change the SMTP Connector to do this in the same way?

Thanx

Jan Wurl



transport >> Exchange 2000 SMTP authentication failed

by TomDiMat [MSFT] » Wed, 15 Oct 2003 19:09:11 GMT


It sounds like you want the smtp connector to send helo as opposed to ehlo
first? You can do this on the properties of the smtp connector\advanced tab
and check the box send HELO instead of EHLO.
Hope this helps,

--
Tom DiMatteo
Microsoft PSS
This posting is provided "AS IS" with no warranties, and confers no rights.
Please do not reply directly to this e-mail address


Server.
for

transport >> Exchange 2000 SMTP authentication failed

by Jan Wurl » Thu, 16 Oct 2003 01:11:43 GMT

ut then I cannot specify Username and Password, and so the authentication
will fail!
Jan

"TomDiMat [MSFT]" < XXXX@XXXXX.COM > schrieb im Newsbeitrag
news: XXXX@XXXXX.COM ...
tab
rights.
Mercur
< XXXX@XXXXX.COM >,
completed



Similar Threads

1. Exchange 2000 SMTP authentication failed

I use Mercur Mailserver to relay the mails coming from our Exchange Server.
The Mercur requires SMTP-Authentification. But Exchange 2000 (the IIS
SMTP-Service too!) sends the authentification information in a way, Mercur
does not recognize (it sends auth login command and the username in one
line, and after the username command it sends the password):

      14.10.2003 12:01:35 53 0 RECEIVE ehlo
alpha-sql.mariendorf.alpha-baustoffvertrieb.de
      14.10.2003 12:01:35 0 52 SEND 250-mail1.prosales-europe.com Hello
217.232.22.163
      14.10.2003 12:01:35 0 10 SEND 250-EXPN
      14.10.2003 12:01:35 0 10 SEND 250-SIZE
      14.10.2003 12:01:35 0 10 SEND 250-ETRN
      14.10.2003 12:01:35 0 36 SEND 250-AUTH CRAM-MD5 NTLM LOGIN PLAIN
      14.10.2003 12:01:35 0 10 SEND 250 HELP
      14.10.2003 12:01:35 61 0 RECEIVE auth login
c2ftbwvscg9zdebhbhboys1iyxvzdg9mznzlcnryawvilmrl
      14.10.2003 12:01:35 0 18 SEND 334 VXNlcm5hbWU6
      14.10.2003 12:01:35 14 0 RECEIVE a29obgu5nw==
      14.10.2003 12:01:35 0 18 SEND 334 UGFzc3dvcmQ6
      14.10.2003 12:01:35 14 0 RECEIVE a29obgu5nw==
      14.10.2003 12:01:35 0 27 SEND 504 Authentication failed


with Outlook Express, it works perfect (it first sends auth login, waits for
the username command, send the username...)

      14.10.2003 12:03:18 18 0 RECEIVE helo wsprosales4
      14.10.2003 12:03:18 0 51 SEND 250 mail1.prosales-europe.com Hello
217.231.68.50
      14.10.2003 12:03:18 12 0 RECEIVE auth login
      14.10.2003 12:03:18 0 18 SEND 334 VXNlcm5hbWU6
      14.10.2003 12:03:18 50 0 RECEIVE
c2ftbwvscg9zdebhbhboys1iyxvzdg9mznzlcnryawvilmrl
      14.10.2003 12:03:18 0 18 SEND 334 UGFzc3dvcmQ6
      14.10.2003 12:03:18 14 0 RECEIVE a29obgu5nw==
      14.10.2003 12:03:18 0 31 SEND 235 Authentication successful
      14.10.2003 12:03:18 45 0 RECEIVE mail from:
< XXXX@XXXXX.COM >
      14.10.2003 12:03:18 0 49 SEND 250 < XXXX@XXXXX.COM >,
sender ok
      14.10.2003 12:03:19 25 0 RECEIVE rcpt to: < XXXX@XXXXX.COM >
      14.10.2003 12:03:19 0 52 SEND 250 User not local; will forward to
< XXXX@XXXXX.COM >
      14.10.2003 12:03:19 6 0 RECEIVE data
      14.10.2003 12:03:19 0 54 SEND 354 Start mail input, terminate with
<CRLF>.<CRLF>
      14.10.2003 12:03:19 1228 0 TRANSFER Transfer of 1228 bytes completed
      14.10.2003 12:03:19 0 73 SEND 250 1228 bytes received in 0,453
seconds; Message accepted for delivery
      14.10.2003 12:03:20 6 0 RECEIVE quit
      14.10.2003 12:03:20 0 38 SEND 221 217.231.68.50 closing connection


can I change the SMTP Connector to do this in the same way?

Thanx

Jan Wurl



2. SMTP-AUTH failed authentication - reason: garbled Base64 data

3. SMTP Authentication using GSSAPI on Exchange 2000

Hi - 
I am developing an SMTP client to be used in an embedded 
device to send email using the SMTP server in Exchange 
2000. Additionally I have the requirement for the users of 
this device to use the GSSAPI (Kerberos V5) authentication 
type. 
I am having a problem with the default configuration of 
Exchange 2000 which enables Kerberos pre-authentication 
data for all users. When pre-auth is used the size of the 
Kerberos credentials understandably is larger than without 
pre-authentication data (~1500 bytes vs. ~600 bytes). I 
have traced my problem to the point during the 
authentication process when the AUTH command is sent.  The 
size of the "AUTH GSSAPI <credentials>" command string 
exceeds the maximum segment size (~1460 bytes) of the TCP 
socket connection resulting in 2 actual transfers being 
sent ( one of 1460 bytes and one of ~40 bytes). 
Subsequently, my client receives a response from the SMTP 
server of "500 5.3.3 Unrecognized command". It appears as 
if the SMTP server considers these 2 transfers as actually 
2 separate messages instead of really being one message of 
2 transfers. If I turn off pre-authentication, the command 
string is less than the maximum segment size resulting in 
one TCP transfer and message and authentication is 
successful. Is this a problem with my SMTP client or is 
there a problem with Exchange 2000 SMTP server? 
I have also tested the Exchange 2000 SMTP server using 
Ximian Evolution using GSSAPI authentication and receive 
the same results - unsuccessful authentication when pre-
authentication data is required. Is there another way to 
test the SMTP AUTH using GSSAPI auth type?