Unable to obtain Anubis 4.1.1+Gmail SMTP

[Nick0la]

Hello,

I am trying unsuccessfully to have Anubis 4.1.1 dispatch emails to gmail
smtp server without using sendmail/postfix but I got
an exception from Thunderbird MUA after a successful TLS user
authentication. Any help appreciated, all details below.

Is there anything that I am assuming in my setup that is fundamentally
wrong ?

Many greetings
Nicola
   
---

Setup: Anubis 4.1.1, Ubuntu 2.6.18-92.1.22.el5, OpenSSL 0.9.8j, MUA:
Thuderbird 2.0.0.19
Anubis uses MySql for user Authentication.

Compilation details:
Use Guile...................... yes
Use GPGme...................... yes
Use GNU SASL................... yes
Use GDBM....................... yes
Use SQL........................ yes
Use MySQL...................... yes
Use PostgreSQL................. no
Use GNU TLS.................... yes
Support for SOCKS v4/5......... no
Perl-style regular expressions. yes
Enable PAM Support............. no
Use TCP wrapper library........ no
Unprivileged user name......... nobody

UserA is associated with a valid user anubis.unprivileged


LogFile:

anubis --altrc /etc/anubis/anubisrc --mode=transparent
--relax-perm-check  -f -D -v
> Reading system configuration file /etc/anubis/anubisrc...
> UID:0 (root), GID:0, EUID:0, EGID:0
> GNU Anubis bound to 0.0.0.0:24
> [15719] GNU Anubis is running...
> [15719] Connection from 192.168.222.12:31686
CLIENT <<< 220 XXX Wellcome(35)
CLIENT >>> EHLO [192.168.222.12](23)
CLIENT <<< 250-Anubis is pleased to meet you.(36)
CLIENT <<< 250-STARTTLS(14)
CLIENT <<< 250-AUTH CRAM-MD5 (20)
CLIENT <<< 250 HELP(10)
CLIENT >>> STARTTLS(10)
CLIENT <<< 220 Ready to start TLS(24)
> [15721] Initializing the TLS/SSL connection with MUA...
- Key Exchange: DHE-RSA
- Ephemeral DH using prime of 776 bits.
- Protocol: TLS1.0
- Certificate Type: X.509
- Compression: NULL
- Cipher: AES-256-CBC
- MAC: SHA1
CLIENT >>> EHLO [192.168.222.12](23)
CLIENT <<< 250-Anubis is pleased to meet you.(36)
CLIENT <<< 250-AUTH CRAM-MD5 (20)
CLIENT <<< 250 HELP(10)
CLIENT >>> AUTH CRAM-MD5(15)
SASL mech=CRAM-MD5, inp=NULL
CLIENT <<< 334 PDI2MTM4ODEwNDUyMjIwMzQzNTQ1LjBAbG9jYWxob3N0Pg==(54)
CLIENT >>> dXRlbnRlMSAyNmRhNWIxNjdiOGQxZjBhOThlOTVkZGE4M2U5ZTI1Zg==(58)
> [15721] Found record for `userA'.
> [15721] Authentication passed. User name userA, Local user
anubis.unprivileged. Welcome!
CLIENT <<< 235 Authentication successful.(32)
> [15721] UID:505 (anubis.unprivileged), GID:506, EUID:505, EGID:506
> [15721] Reading user configuration file /etc/anubis/anubisrc.userA...

[at this stage thunderbird spits out an error SMTP unavailable]


file /etc/anubis/anubisrc [gmail user account details - tested and
working fine - have been altered below with gmailusername/gmailpassword]
---BEGIN CONTROL---
mode auth
user-notprivileged "anubis.unprivileged"
loglevel all
logfile /etc/anubis/anubis.log
remote-mta smtp.gmail.com:587
esmtp-auth-id   gmailusername@...
esmtp-password  gmailpassword
termlevel debug
tracefile yes
ssl yes
ssl-cert /etc/anubis/anubis.pem
ssl-key /etc/anubis/anubis.pem
---END---

---BEGIN AUTH---
sasl-password-db mysql://mail:pass@localhost/ANUBIS_USERS;table=anubis_test
sasl-allowed-mech NTLM GSSAPIDIGEST-MD5 CRAM-MD5
---END---

---BEGIN TRANSLATION---
---END---
---BEGIN GUILE---
---END---
---BEGIN RULE---
add [X-Comment] "Processed"
---END---

<EOF>


file /etc/anubis/anubisrc.userA:
---BEGIN RULE---
#
---END---



_______________________________________________
Bug-anubis mailing list
Bug-anubis@...
http://lists.gnu.org/mailman/listinfo/bug-anubis

[Wojciech Polak-2]

On Fri, 2009-02-06 at 14:27 +0000, Nicola Nicola wrote:

> I am trying unsuccessfully to have Anubis 4.1.1 dispatch emails to gmail
> smtp server without using sendmail/postfix but I got
> an exception from Thunderbird MUA after a successful TLS user
> authentication. Any help appreciated, all details below.

I just checked the combination of Anubis+GMail+Evolution+TLS
successfully.

> Anubis uses MySql for user Authentication.

As long as you use mode=auth, not mode=transparent.

> anubis --altrc /etc/anubis/anubisrc --mode=transparent
> --relax-perm-check  -f -D -v

You can just use -D without -v.

> > Reading system configuration file /etc/anubis/anubisrc...
> > UID:0 (root), GID:0, EUID:0, EGID:0
> > GNU Anubis bound to 0.0.0.0:24
...
> CLIENT <<< 235 Authentication successful.(32)
> > [15721] UID:505 (anubis.unprivileged), GID:506, EUID:505, EGID:506
> > [15721] Reading user configuration file /etc/anubis/anubisrc.userA...
>
> [at this stage thunderbird spits out an error SMTP unavailable]

Can you provide more information about this error?

Based on the logs you provided, it seems that it doesn't connect
to smtp.gmail.com. Here's my session log:

$ anubis -f -D
> Reading system configuration file /etc/anubisrc...
> UID:0 (root), GID:0, EUID:0, EGID:0
> GNU Anubis bound to 127.0.0.1:24
> [11267] GNU Anubis is running...
> [11267] Connection from 127.0.0.1:51328
CLIENT <<< 220 GNU Anubis ESMTP; Identify yourself(56)
CLIENT >>> EHLO [127.0.0.1](18)
CLIENT <<< 250-Anubis is pleased to meet you.(36)
CLIENT <<< 250-STARTTLS(14)
CLIENT <<< 250-AUTH CRAM-MD5 (20)
CLIENT <<< 250 HELP(10)
CLIENT >>> STARTTLS(10)
CLIENT <<< 220 Ready to start TLS(24)
...[snipped]
CLIENT >>> EHLO [127.0.0.1](18)
CLIENT <<< 250-Anubis is pleased to meet you.(36)
CLIENT <<< 250-AUTH CRAM-MD5 (20)
CLIENT <<< 250 HELP(10)
CLIENT >>> AUTH CRAM-MD5(15)
...[snipped]
> [11312] Found record for `polak'.
> [11312] Authentication passed. User name polak, Local user polak.
Welcome!
CLIENT <<< 235 Authentication successful.(32)
> [11312] UID:500 (polak), GID:500, EUID:500, EGID:500
> [11312] Reading user configuration file /home/polak/.anubisrc...
> [11312] Getting remote host information...
> [11312] Connected to smtp.gmail.com:587
> [11312] Starting SMTP session...
SERVER >>> 220 mx.google.com ESMTP t10sm205265muh.58(43)
SERVER <<< EHLO [127.0.0.1](18)
SERVER >>> 250-mx.google.com at your service, [MY-IP]
SERVER >>> 250-SIZE 35651584(19)
SERVER >>> 250-8BITMIME(14)
SERVER >>> 250-STARTTLS(14)
SERVER >>> 250-ENHANCEDSTATUSCODES(25)
SERVER >>> 250 PIPELINING(16)
> [11312] Using TLS/SSL encryption between Anubis and remote MTA only...
SERVER <<< STARTTLS(10)
SERVER >>> 220 2.0.0 Ready to start TLS(30)
> [11312] Initializing the TLS/SSL connection with MTA...
...[snipped]
SERVER <<< EHLO [127.0.0.1](18)
SERVER >>> 250-mx.google.com at your service, [MY-IP]
SERVER >>> 250-SIZE 35651584(19)
SERVER >>> 250-8BITMIME(14)
SERVER >>> 250-AUTH LOGIN PLAIN(22)
SERVER >>> 250-ENHANCEDSTATUSCODES(25)
SERVER >>> 250 PIPELINING(16)
> [11312] Selected authentication mechanism LOGIN
...[snipped]
SERVER >>> 235 2.7.0 Accepted(20)
> [11312] Authentication successful.
> [11312] Transferring messages...
...[snipped]
> [11312] Connection closed successfully.

Regards,
Wojciech





_______________________________________________
Bug-anubis mailing list
Bug-anubis@...
http://lists.gnu.org/mailman/listinfo/bug-anubis