Link to home
Start Free TrialLog in
Avatar of ivolach
ivolach

asked on

SMTP testing with Telnet 'auth config' unseccessful

I am testing SMTP connection with telnet session and get 'auth login unsuccessful'
here is the session output:
ehlo
250-email server
250-SIZE 10485760
250-PIPELINING
250-DSN
250-ENHANCEDSTATUSCODES
250-X-ANONYMOUSTLS
250-AUTH LOGIN
250-X-EXPS GSSAPI NTLM
250-8BITMIME
250-BINARYMIME
250-CHUNKING
250-XEXCH50
250-XRDST
250 XSHADOW
auth config
504 5.7.4 Unrecognized authentication type
auth login
334 VXNlcm5hbWU6
XXXXXXXXXXXXXXXXXXXXX
334 UGFzc3dvcmQ6
XXXXXXXXXXXXXXXXX
535 5.7.3 Authentication unsuccessful

What am I missing?
Avatar of Dr. Klahn
Dr. Klahn

Since authentication was unsuccessful, some possibilities are:

* The username following the username challenge "VXNlcm5hbWU6" is incorrect or nonexistent.

* The password following the password challenge "UGFzc3dvcmQ6" is incorrect or nonexistent.

* Either the username or the password were incorrectly coded into base64.  Reconvert the username and password from base64 back into plaintext, and see if they match the credentials entered into the server's validation database for that particular user.

Side notes:

The EHLO is missing the sending site's name.  This causes many clients to reject the session ... and perhaps not immediately.  This may also be causing the rejection.

AUTH LOGIN is not secure unless the server is using SSL/TLS session encryption, and then it's still not very secure.  The username and password may be presented in base64, but that's still effectively plaintext.
Avatar of ivolach

ASKER

base64 credentials are good, the same one are being used successfully to login to OWA
how/where do you encode the sending site's name?
ASKER CERTIFIED SOLUTION
Avatar of ivolach
ivolach

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of ivolach

ASKER

I have found the solution elswhere