Sendmail issues “530 Authentication required” error message when authinfo is supplied











up vote
1
down vote

favorite












sender_email - email address that does not exist, but must be used as FROM address, because receiver host rejects emails from other emails.



receiver_email - email that is supposed to receive the sent message



local_smtp - SMTP server that is installed on another computer in the local network and forwards all received messages to external_smtp



external_smtp - SMTP server that is installed on a computer in another network and rejects all emails that do not come from sender_email



I have configured sendmail to send emails from sender_email and authenticate with user/password to local_smtp that is supposed to send the email message further to external_smtp that only accepts emails sent from a specific email, which is sender_email in this case. However, judging from the log files sendmail authenticates with external_smtp instead of local_smtp. I do not want to authenticate with external_smtp, because that is up to local_smtp.



logfile:



10745 <<< Subject: Terminal Email Send
10745 <<<
10745 <<< Email Content line 1
10745 <<< Email Content line 2
10745 <<< [EOF]
10759 === CONNECT local_smtp.
10759 <<< 220 **********************************************************************^M
10759 >>> EHLO mgmt-snmp
10759 <<< 250-local_smtp says hello^M
10759 <<< 250-AUTH LOGIN PLAIN^M
10759 <<< 250-VRFY^M
10759 <<< 250 8BITMIME^M
10759 >>> MAIL From:<sender_email> AUTH=sender_email
10759 <<< 530 authentication required^M
10759 >>> This is a MIME-encapsulated message
10759 >>>
10759 >>> --t8IEdmbX010759.1442587188/mgmt-snmp
10759 >>>
10759 >>> The original message was received at Fri, 18 Sep 2015 16:39:48 +0200
10759 >>> from root@localhost
10759 >>>
10759 >>> ----- The following addresses had permanent fatal errors -----
10759 >>> receiver_email
10759 >>> (reason: 530 authentication required)
10759 >>>


I guess it has something to do with AUTH=sender_email, but I do not know how to change it.



sendmail.mc:



divert(-1)dnl
#-----------------------------------------------------------------------------
# $Sendmail: debproto.mc,v 8.14.4 2014-02-11 13:02:08 cowboy Exp $
#
# Copyright (c) 1998-2010 Richard Nelson. All Rights Reserved.
#
# cf/debian/sendmail.mc. Generated from sendmail.mc.in by configure.
#
# sendmail.mc prototype config file for building Sendmail 8.14.4
#
# Note: the .in file supports 8.7.6 - 9.0.0, but the generated
# file is customized to the version noted above.
#
# This file is used to configure Sendmail for use with Debian systems.
#
# If you modify this file, you will have to regenerate /etc/mail/sendmail.cf
# by running this file through the m4 preprocessor via one of the following:
# * make (or make -C /etc/mail)
# * sendmailconfig
# * m4 /etc/mail/sendmail.mc > /etc/mail/sendmail.cf
# The first two options are preferred as they will also update other files
# that depend upon the contents of this file.
#
# The best documentation for this .mc file is:
# /usr/share/doc/sendmail-doc/cf.README.gz
#
#-----------------------------------------------------------------------------
divert(0)dnl
#
# Copyright (c) 1998-2005 Richard Nelson. All Rights Reserved.
#
# This file is used to configure Sendmail for use with Debian systems.
#
define(`_USE_ETC_MAIL_')dnl
include(`/usr/share/sendmail/cf/m4/cf.m4')dnl
VERSIONID(`$Id: sendmail.mc, v 8.14.4-4.1ubuntu1 2014-02-11 13:02:08 cowboy Exp $')
OSTYPE(`debian')dnl
DOMAIN(`debian-mta')dnl
dnl # Items controlled by /etc/mail/sendmail.conf - DO NOT TOUCH HERE
undefine(`confHOST_STATUS_DIRECTORY')dnl #DAEMON_HOSTSTATS=
dnl # Items controlled by /etc/mail/sendmail.conf - DO NOT TOUCH HERE
dnl #
dnl # General defines
dnl #
dnl # SAFE_FILE_ENV: [undefined] If set, sendmail will do a chroot()
dnl # into this directory before writing files.
dnl # If *all* your user accounts are under /home then use that
dnl # instead - it will prevent any writes outside of /home !
dnl # define(`confSAFE_FILE_ENV', `')dnl
dnl #
dnl # Daemon options - restrict to servicing LOCALHOST ONLY !!!
dnl # Remove `, Addr=' clauses to receive from any interface
dnl # If you want to support IPv6, switch the commented/uncommentd lines
dnl #
FEATURE(`no_default_msa')dnl
dnl DAEMON_OPTIONS(`Family=inet6, Name=MTA-v6, Port=smtp, Addr=::1')dnl
DAEMON_OPTIONS(`Family=inet, Name=MTA-v4, Port=smtp')dnl
dnl DAEMON_OPTIONS(`Family=inet6, Name=MSP-v6, Port=submission, M=Ea, Addr=::1')dnl
DAEMON_OPTIONS(`Family=inet, Name=MSP-v4, Port=submission, M=Ea, Addr=127.0.0.1')dnl
dnl #
dnl # Be somewhat anal in what we allow
define(`confPRIVACY_FLAGS',dnl
`needmailhelo,needexpnhelo,needvrfyhelo,restrictqrun,restrictexpand,nobodyreturn,authwarnings')dnl
dnl #
dnl # Define connection throttling and window length
define(`confCONNECTION_RATE_THROTTLE', `15')dnl
define(`confCONNECTION_RATE_WINDOW_SIZE',`10m')dnl
dnl #
dnl # Features
dnl #
dnl # use /etc/mail/local-host-names
FEATURE(`use_cw_file')dnl
dnl #
dnl # The access db is the basis for most of sendmail's checking
FEATURE(`access_db', , `skip')dnl
dnl #
dnl # The greet_pause feature stops some automail bots - but check the
dnl # provided access db for details on excluding localhosts...
FEATURE(`greet_pause', `1000')dnl 1 seconds
dnl #
dnl # Delay_checks allows sender<->recipient checking
FEATURE(`delay_checks', `friend', `n')dnl
dnl #
dnl # If we get too many bad recipients, slow things down...
define(`confBAD_RCPT_THROTTLE',`3')dnl
dnl #
dnl # Stop connections that overflow our concurrent and time connection rates
FEATURE(`conncontrol', `nodelay', `terminate')dnl
FEATURE(`ratecontrol', `nodelay', `terminate')dnl
dnl #
dnl # If you're on a dialup link, you should enable this - so sendmail
dnl # will not bring up the link (it will queue mail for later)
dnl define(`confCON_EXPENSIVE',`True')dnl
dnl #
dnl # Dialup/LAN connection overrides
dnl #
include(`/etc/mail/m4/dialup.m4')dnl
include(`/etc/mail/m4/provider.m4')dnl

dnl LOCAL_CONFIG
dnl EXPOSED_USER(root uucp)dnl # users exempt from masquerading
dnl LOCAL_USER(root)dnl
dnl MASQUERADE_AS(`external_smtp')dnl
dnl FEATURE(`allmasquerade')dnl
dnl FEATURE(`masquerade_envelope')dnl
dnl FEATURE(`nullclient', local_smtp)dnl

LOCAL_CONFIG
## Custom configurations below (will be preserved)
define(`SMART_HOST', `local_smtp')dnl
define(`confAUTH_MECHANISMS', `EXTERNAL GSSAPI DIGEST-MD5 CRAM-MD5 LOGIN PLAIN')dnl
FEATURE(`authinfo', `hash /etc/mail/authinfo')dnl
define(`RELAY_MAILER_ARGS', `TCP $h 25')dnl
dnl #
dnl # Default Mailer setup
MAILER_DEFINITIONS
MAILER(`local')dnl
MAILER(`smtp')dnl


authinfo:



AuthInfo:local_smtp "U:root" "I:my_username" "P:my_password"









share|improve this question














bumped to the homepage by Community 2 days ago


This question has answers that may be good or bad; the system has marked it active so that they can be reviewed.















  • Looks like whatever is connecting to local_smtp is not authenticating, as it did not issue an AUTH verb, and instead issued a MAIL FROM, which local_smtp then shot down. Is the MTA on whatever is connecting to local_smtp properly configured to authenticate as a client?
    – thrig
    Sep 18 '15 at 15:49










  • I use sendmail for authentication and it is configured in sendmail.mc file: FEATURE(``authinfo', ``hash /etc/mail/authinfo')dnl
    – Jonas Hoffmann
    Sep 18 '15 at 16:24












  • But it did use AUTH for local_smtp: 10759 <<< 250-AUTH LOGIN PLAIN^M. Or is this not it?
    – Jonas Hoffmann
    Sep 21 '15 at 7:43










  • That's the banner from the server. Had the client authenticated, I would expect to see a response >>> AUTH .... Instead, there is a >>> MAIL ... line.
    – thrig
    Sep 21 '15 at 14:27















up vote
1
down vote

favorite












sender_email - email address that does not exist, but must be used as FROM address, because receiver host rejects emails from other emails.



receiver_email - email that is supposed to receive the sent message



local_smtp - SMTP server that is installed on another computer in the local network and forwards all received messages to external_smtp



external_smtp - SMTP server that is installed on a computer in another network and rejects all emails that do not come from sender_email



I have configured sendmail to send emails from sender_email and authenticate with user/password to local_smtp that is supposed to send the email message further to external_smtp that only accepts emails sent from a specific email, which is sender_email in this case. However, judging from the log files sendmail authenticates with external_smtp instead of local_smtp. I do not want to authenticate with external_smtp, because that is up to local_smtp.



logfile:



10745 <<< Subject: Terminal Email Send
10745 <<<
10745 <<< Email Content line 1
10745 <<< Email Content line 2
10745 <<< [EOF]
10759 === CONNECT local_smtp.
10759 <<< 220 **********************************************************************^M
10759 >>> EHLO mgmt-snmp
10759 <<< 250-local_smtp says hello^M
10759 <<< 250-AUTH LOGIN PLAIN^M
10759 <<< 250-VRFY^M
10759 <<< 250 8BITMIME^M
10759 >>> MAIL From:<sender_email> AUTH=sender_email
10759 <<< 530 authentication required^M
10759 >>> This is a MIME-encapsulated message
10759 >>>
10759 >>> --t8IEdmbX010759.1442587188/mgmt-snmp
10759 >>>
10759 >>> The original message was received at Fri, 18 Sep 2015 16:39:48 +0200
10759 >>> from root@localhost
10759 >>>
10759 >>> ----- The following addresses had permanent fatal errors -----
10759 >>> receiver_email
10759 >>> (reason: 530 authentication required)
10759 >>>


I guess it has something to do with AUTH=sender_email, but I do not know how to change it.



sendmail.mc:



divert(-1)dnl
#-----------------------------------------------------------------------------
# $Sendmail: debproto.mc,v 8.14.4 2014-02-11 13:02:08 cowboy Exp $
#
# Copyright (c) 1998-2010 Richard Nelson. All Rights Reserved.
#
# cf/debian/sendmail.mc. Generated from sendmail.mc.in by configure.
#
# sendmail.mc prototype config file for building Sendmail 8.14.4
#
# Note: the .in file supports 8.7.6 - 9.0.0, but the generated
# file is customized to the version noted above.
#
# This file is used to configure Sendmail for use with Debian systems.
#
# If you modify this file, you will have to regenerate /etc/mail/sendmail.cf
# by running this file through the m4 preprocessor via one of the following:
# * make (or make -C /etc/mail)
# * sendmailconfig
# * m4 /etc/mail/sendmail.mc > /etc/mail/sendmail.cf
# The first two options are preferred as they will also update other files
# that depend upon the contents of this file.
#
# The best documentation for this .mc file is:
# /usr/share/doc/sendmail-doc/cf.README.gz
#
#-----------------------------------------------------------------------------
divert(0)dnl
#
# Copyright (c) 1998-2005 Richard Nelson. All Rights Reserved.
#
# This file is used to configure Sendmail for use with Debian systems.
#
define(`_USE_ETC_MAIL_')dnl
include(`/usr/share/sendmail/cf/m4/cf.m4')dnl
VERSIONID(`$Id: sendmail.mc, v 8.14.4-4.1ubuntu1 2014-02-11 13:02:08 cowboy Exp $')
OSTYPE(`debian')dnl
DOMAIN(`debian-mta')dnl
dnl # Items controlled by /etc/mail/sendmail.conf - DO NOT TOUCH HERE
undefine(`confHOST_STATUS_DIRECTORY')dnl #DAEMON_HOSTSTATS=
dnl # Items controlled by /etc/mail/sendmail.conf - DO NOT TOUCH HERE
dnl #
dnl # General defines
dnl #
dnl # SAFE_FILE_ENV: [undefined] If set, sendmail will do a chroot()
dnl # into this directory before writing files.
dnl # If *all* your user accounts are under /home then use that
dnl # instead - it will prevent any writes outside of /home !
dnl # define(`confSAFE_FILE_ENV', `')dnl
dnl #
dnl # Daemon options - restrict to servicing LOCALHOST ONLY !!!
dnl # Remove `, Addr=' clauses to receive from any interface
dnl # If you want to support IPv6, switch the commented/uncommentd lines
dnl #
FEATURE(`no_default_msa')dnl
dnl DAEMON_OPTIONS(`Family=inet6, Name=MTA-v6, Port=smtp, Addr=::1')dnl
DAEMON_OPTIONS(`Family=inet, Name=MTA-v4, Port=smtp')dnl
dnl DAEMON_OPTIONS(`Family=inet6, Name=MSP-v6, Port=submission, M=Ea, Addr=::1')dnl
DAEMON_OPTIONS(`Family=inet, Name=MSP-v4, Port=submission, M=Ea, Addr=127.0.0.1')dnl
dnl #
dnl # Be somewhat anal in what we allow
define(`confPRIVACY_FLAGS',dnl
`needmailhelo,needexpnhelo,needvrfyhelo,restrictqrun,restrictexpand,nobodyreturn,authwarnings')dnl
dnl #
dnl # Define connection throttling and window length
define(`confCONNECTION_RATE_THROTTLE', `15')dnl
define(`confCONNECTION_RATE_WINDOW_SIZE',`10m')dnl
dnl #
dnl # Features
dnl #
dnl # use /etc/mail/local-host-names
FEATURE(`use_cw_file')dnl
dnl #
dnl # The access db is the basis for most of sendmail's checking
FEATURE(`access_db', , `skip')dnl
dnl #
dnl # The greet_pause feature stops some automail bots - but check the
dnl # provided access db for details on excluding localhosts...
FEATURE(`greet_pause', `1000')dnl 1 seconds
dnl #
dnl # Delay_checks allows sender<->recipient checking
FEATURE(`delay_checks', `friend', `n')dnl
dnl #
dnl # If we get too many bad recipients, slow things down...
define(`confBAD_RCPT_THROTTLE',`3')dnl
dnl #
dnl # Stop connections that overflow our concurrent and time connection rates
FEATURE(`conncontrol', `nodelay', `terminate')dnl
FEATURE(`ratecontrol', `nodelay', `terminate')dnl
dnl #
dnl # If you're on a dialup link, you should enable this - so sendmail
dnl # will not bring up the link (it will queue mail for later)
dnl define(`confCON_EXPENSIVE',`True')dnl
dnl #
dnl # Dialup/LAN connection overrides
dnl #
include(`/etc/mail/m4/dialup.m4')dnl
include(`/etc/mail/m4/provider.m4')dnl

dnl LOCAL_CONFIG
dnl EXPOSED_USER(root uucp)dnl # users exempt from masquerading
dnl LOCAL_USER(root)dnl
dnl MASQUERADE_AS(`external_smtp')dnl
dnl FEATURE(`allmasquerade')dnl
dnl FEATURE(`masquerade_envelope')dnl
dnl FEATURE(`nullclient', local_smtp)dnl

LOCAL_CONFIG
## Custom configurations below (will be preserved)
define(`SMART_HOST', `local_smtp')dnl
define(`confAUTH_MECHANISMS', `EXTERNAL GSSAPI DIGEST-MD5 CRAM-MD5 LOGIN PLAIN')dnl
FEATURE(`authinfo', `hash /etc/mail/authinfo')dnl
define(`RELAY_MAILER_ARGS', `TCP $h 25')dnl
dnl #
dnl # Default Mailer setup
MAILER_DEFINITIONS
MAILER(`local')dnl
MAILER(`smtp')dnl


authinfo:



AuthInfo:local_smtp "U:root" "I:my_username" "P:my_password"









share|improve this question














bumped to the homepage by Community 2 days ago


This question has answers that may be good or bad; the system has marked it active so that they can be reviewed.















  • Looks like whatever is connecting to local_smtp is not authenticating, as it did not issue an AUTH verb, and instead issued a MAIL FROM, which local_smtp then shot down. Is the MTA on whatever is connecting to local_smtp properly configured to authenticate as a client?
    – thrig
    Sep 18 '15 at 15:49










  • I use sendmail for authentication and it is configured in sendmail.mc file: FEATURE(``authinfo', ``hash /etc/mail/authinfo')dnl
    – Jonas Hoffmann
    Sep 18 '15 at 16:24












  • But it did use AUTH for local_smtp: 10759 <<< 250-AUTH LOGIN PLAIN^M. Or is this not it?
    – Jonas Hoffmann
    Sep 21 '15 at 7:43










  • That's the banner from the server. Had the client authenticated, I would expect to see a response >>> AUTH .... Instead, there is a >>> MAIL ... line.
    – thrig
    Sep 21 '15 at 14:27













up vote
1
down vote

favorite









up vote
1
down vote

favorite











sender_email - email address that does not exist, but must be used as FROM address, because receiver host rejects emails from other emails.



receiver_email - email that is supposed to receive the sent message



local_smtp - SMTP server that is installed on another computer in the local network and forwards all received messages to external_smtp



external_smtp - SMTP server that is installed on a computer in another network and rejects all emails that do not come from sender_email



I have configured sendmail to send emails from sender_email and authenticate with user/password to local_smtp that is supposed to send the email message further to external_smtp that only accepts emails sent from a specific email, which is sender_email in this case. However, judging from the log files sendmail authenticates with external_smtp instead of local_smtp. I do not want to authenticate with external_smtp, because that is up to local_smtp.



logfile:



10745 <<< Subject: Terminal Email Send
10745 <<<
10745 <<< Email Content line 1
10745 <<< Email Content line 2
10745 <<< [EOF]
10759 === CONNECT local_smtp.
10759 <<< 220 **********************************************************************^M
10759 >>> EHLO mgmt-snmp
10759 <<< 250-local_smtp says hello^M
10759 <<< 250-AUTH LOGIN PLAIN^M
10759 <<< 250-VRFY^M
10759 <<< 250 8BITMIME^M
10759 >>> MAIL From:<sender_email> AUTH=sender_email
10759 <<< 530 authentication required^M
10759 >>> This is a MIME-encapsulated message
10759 >>>
10759 >>> --t8IEdmbX010759.1442587188/mgmt-snmp
10759 >>>
10759 >>> The original message was received at Fri, 18 Sep 2015 16:39:48 +0200
10759 >>> from root@localhost
10759 >>>
10759 >>> ----- The following addresses had permanent fatal errors -----
10759 >>> receiver_email
10759 >>> (reason: 530 authentication required)
10759 >>>


I guess it has something to do with AUTH=sender_email, but I do not know how to change it.



sendmail.mc:



divert(-1)dnl
#-----------------------------------------------------------------------------
# $Sendmail: debproto.mc,v 8.14.4 2014-02-11 13:02:08 cowboy Exp $
#
# Copyright (c) 1998-2010 Richard Nelson. All Rights Reserved.
#
# cf/debian/sendmail.mc. Generated from sendmail.mc.in by configure.
#
# sendmail.mc prototype config file for building Sendmail 8.14.4
#
# Note: the .in file supports 8.7.6 - 9.0.0, but the generated
# file is customized to the version noted above.
#
# This file is used to configure Sendmail for use with Debian systems.
#
# If you modify this file, you will have to regenerate /etc/mail/sendmail.cf
# by running this file through the m4 preprocessor via one of the following:
# * make (or make -C /etc/mail)
# * sendmailconfig
# * m4 /etc/mail/sendmail.mc > /etc/mail/sendmail.cf
# The first two options are preferred as they will also update other files
# that depend upon the contents of this file.
#
# The best documentation for this .mc file is:
# /usr/share/doc/sendmail-doc/cf.README.gz
#
#-----------------------------------------------------------------------------
divert(0)dnl
#
# Copyright (c) 1998-2005 Richard Nelson. All Rights Reserved.
#
# This file is used to configure Sendmail for use with Debian systems.
#
define(`_USE_ETC_MAIL_')dnl
include(`/usr/share/sendmail/cf/m4/cf.m4')dnl
VERSIONID(`$Id: sendmail.mc, v 8.14.4-4.1ubuntu1 2014-02-11 13:02:08 cowboy Exp $')
OSTYPE(`debian')dnl
DOMAIN(`debian-mta')dnl
dnl # Items controlled by /etc/mail/sendmail.conf - DO NOT TOUCH HERE
undefine(`confHOST_STATUS_DIRECTORY')dnl #DAEMON_HOSTSTATS=
dnl # Items controlled by /etc/mail/sendmail.conf - DO NOT TOUCH HERE
dnl #
dnl # General defines
dnl #
dnl # SAFE_FILE_ENV: [undefined] If set, sendmail will do a chroot()
dnl # into this directory before writing files.
dnl # If *all* your user accounts are under /home then use that
dnl # instead - it will prevent any writes outside of /home !
dnl # define(`confSAFE_FILE_ENV', `')dnl
dnl #
dnl # Daemon options - restrict to servicing LOCALHOST ONLY !!!
dnl # Remove `, Addr=' clauses to receive from any interface
dnl # If you want to support IPv6, switch the commented/uncommentd lines
dnl #
FEATURE(`no_default_msa')dnl
dnl DAEMON_OPTIONS(`Family=inet6, Name=MTA-v6, Port=smtp, Addr=::1')dnl
DAEMON_OPTIONS(`Family=inet, Name=MTA-v4, Port=smtp')dnl
dnl DAEMON_OPTIONS(`Family=inet6, Name=MSP-v6, Port=submission, M=Ea, Addr=::1')dnl
DAEMON_OPTIONS(`Family=inet, Name=MSP-v4, Port=submission, M=Ea, Addr=127.0.0.1')dnl
dnl #
dnl # Be somewhat anal in what we allow
define(`confPRIVACY_FLAGS',dnl
`needmailhelo,needexpnhelo,needvrfyhelo,restrictqrun,restrictexpand,nobodyreturn,authwarnings')dnl
dnl #
dnl # Define connection throttling and window length
define(`confCONNECTION_RATE_THROTTLE', `15')dnl
define(`confCONNECTION_RATE_WINDOW_SIZE',`10m')dnl
dnl #
dnl # Features
dnl #
dnl # use /etc/mail/local-host-names
FEATURE(`use_cw_file')dnl
dnl #
dnl # The access db is the basis for most of sendmail's checking
FEATURE(`access_db', , `skip')dnl
dnl #
dnl # The greet_pause feature stops some automail bots - but check the
dnl # provided access db for details on excluding localhosts...
FEATURE(`greet_pause', `1000')dnl 1 seconds
dnl #
dnl # Delay_checks allows sender<->recipient checking
FEATURE(`delay_checks', `friend', `n')dnl
dnl #
dnl # If we get too many bad recipients, slow things down...
define(`confBAD_RCPT_THROTTLE',`3')dnl
dnl #
dnl # Stop connections that overflow our concurrent and time connection rates
FEATURE(`conncontrol', `nodelay', `terminate')dnl
FEATURE(`ratecontrol', `nodelay', `terminate')dnl
dnl #
dnl # If you're on a dialup link, you should enable this - so sendmail
dnl # will not bring up the link (it will queue mail for later)
dnl define(`confCON_EXPENSIVE',`True')dnl
dnl #
dnl # Dialup/LAN connection overrides
dnl #
include(`/etc/mail/m4/dialup.m4')dnl
include(`/etc/mail/m4/provider.m4')dnl

dnl LOCAL_CONFIG
dnl EXPOSED_USER(root uucp)dnl # users exempt from masquerading
dnl LOCAL_USER(root)dnl
dnl MASQUERADE_AS(`external_smtp')dnl
dnl FEATURE(`allmasquerade')dnl
dnl FEATURE(`masquerade_envelope')dnl
dnl FEATURE(`nullclient', local_smtp)dnl

LOCAL_CONFIG
## Custom configurations below (will be preserved)
define(`SMART_HOST', `local_smtp')dnl
define(`confAUTH_MECHANISMS', `EXTERNAL GSSAPI DIGEST-MD5 CRAM-MD5 LOGIN PLAIN')dnl
FEATURE(`authinfo', `hash /etc/mail/authinfo')dnl
define(`RELAY_MAILER_ARGS', `TCP $h 25')dnl
dnl #
dnl # Default Mailer setup
MAILER_DEFINITIONS
MAILER(`local')dnl
MAILER(`smtp')dnl


authinfo:



AuthInfo:local_smtp "U:root" "I:my_username" "P:my_password"









share|improve this question













sender_email - email address that does not exist, but must be used as FROM address, because receiver host rejects emails from other emails.



receiver_email - email that is supposed to receive the sent message



local_smtp - SMTP server that is installed on another computer in the local network and forwards all received messages to external_smtp



external_smtp - SMTP server that is installed on a computer in another network and rejects all emails that do not come from sender_email



I have configured sendmail to send emails from sender_email and authenticate with user/password to local_smtp that is supposed to send the email message further to external_smtp that only accepts emails sent from a specific email, which is sender_email in this case. However, judging from the log files sendmail authenticates with external_smtp instead of local_smtp. I do not want to authenticate with external_smtp, because that is up to local_smtp.



logfile:



10745 <<< Subject: Terminal Email Send
10745 <<<
10745 <<< Email Content line 1
10745 <<< Email Content line 2
10745 <<< [EOF]
10759 === CONNECT local_smtp.
10759 <<< 220 **********************************************************************^M
10759 >>> EHLO mgmt-snmp
10759 <<< 250-local_smtp says hello^M
10759 <<< 250-AUTH LOGIN PLAIN^M
10759 <<< 250-VRFY^M
10759 <<< 250 8BITMIME^M
10759 >>> MAIL From:<sender_email> AUTH=sender_email
10759 <<< 530 authentication required^M
10759 >>> This is a MIME-encapsulated message
10759 >>>
10759 >>> --t8IEdmbX010759.1442587188/mgmt-snmp
10759 >>>
10759 >>> The original message was received at Fri, 18 Sep 2015 16:39:48 +0200
10759 >>> from root@localhost
10759 >>>
10759 >>> ----- The following addresses had permanent fatal errors -----
10759 >>> receiver_email
10759 >>> (reason: 530 authentication required)
10759 >>>


I guess it has something to do with AUTH=sender_email, but I do not know how to change it.



sendmail.mc:



divert(-1)dnl
#-----------------------------------------------------------------------------
# $Sendmail: debproto.mc,v 8.14.4 2014-02-11 13:02:08 cowboy Exp $
#
# Copyright (c) 1998-2010 Richard Nelson. All Rights Reserved.
#
# cf/debian/sendmail.mc. Generated from sendmail.mc.in by configure.
#
# sendmail.mc prototype config file for building Sendmail 8.14.4
#
# Note: the .in file supports 8.7.6 - 9.0.0, but the generated
# file is customized to the version noted above.
#
# This file is used to configure Sendmail for use with Debian systems.
#
# If you modify this file, you will have to regenerate /etc/mail/sendmail.cf
# by running this file through the m4 preprocessor via one of the following:
# * make (or make -C /etc/mail)
# * sendmailconfig
# * m4 /etc/mail/sendmail.mc > /etc/mail/sendmail.cf
# The first two options are preferred as they will also update other files
# that depend upon the contents of this file.
#
# The best documentation for this .mc file is:
# /usr/share/doc/sendmail-doc/cf.README.gz
#
#-----------------------------------------------------------------------------
divert(0)dnl
#
# Copyright (c) 1998-2005 Richard Nelson. All Rights Reserved.
#
# This file is used to configure Sendmail for use with Debian systems.
#
define(`_USE_ETC_MAIL_')dnl
include(`/usr/share/sendmail/cf/m4/cf.m4')dnl
VERSIONID(`$Id: sendmail.mc, v 8.14.4-4.1ubuntu1 2014-02-11 13:02:08 cowboy Exp $')
OSTYPE(`debian')dnl
DOMAIN(`debian-mta')dnl
dnl # Items controlled by /etc/mail/sendmail.conf - DO NOT TOUCH HERE
undefine(`confHOST_STATUS_DIRECTORY')dnl #DAEMON_HOSTSTATS=
dnl # Items controlled by /etc/mail/sendmail.conf - DO NOT TOUCH HERE
dnl #
dnl # General defines
dnl #
dnl # SAFE_FILE_ENV: [undefined] If set, sendmail will do a chroot()
dnl # into this directory before writing files.
dnl # If *all* your user accounts are under /home then use that
dnl # instead - it will prevent any writes outside of /home !
dnl # define(`confSAFE_FILE_ENV', `')dnl
dnl #
dnl # Daemon options - restrict to servicing LOCALHOST ONLY !!!
dnl # Remove `, Addr=' clauses to receive from any interface
dnl # If you want to support IPv6, switch the commented/uncommentd lines
dnl #
FEATURE(`no_default_msa')dnl
dnl DAEMON_OPTIONS(`Family=inet6, Name=MTA-v6, Port=smtp, Addr=::1')dnl
DAEMON_OPTIONS(`Family=inet, Name=MTA-v4, Port=smtp')dnl
dnl DAEMON_OPTIONS(`Family=inet6, Name=MSP-v6, Port=submission, M=Ea, Addr=::1')dnl
DAEMON_OPTIONS(`Family=inet, Name=MSP-v4, Port=submission, M=Ea, Addr=127.0.0.1')dnl
dnl #
dnl # Be somewhat anal in what we allow
define(`confPRIVACY_FLAGS',dnl
`needmailhelo,needexpnhelo,needvrfyhelo,restrictqrun,restrictexpand,nobodyreturn,authwarnings')dnl
dnl #
dnl # Define connection throttling and window length
define(`confCONNECTION_RATE_THROTTLE', `15')dnl
define(`confCONNECTION_RATE_WINDOW_SIZE',`10m')dnl
dnl #
dnl # Features
dnl #
dnl # use /etc/mail/local-host-names
FEATURE(`use_cw_file')dnl
dnl #
dnl # The access db is the basis for most of sendmail's checking
FEATURE(`access_db', , `skip')dnl
dnl #
dnl # The greet_pause feature stops some automail bots - but check the
dnl # provided access db for details on excluding localhosts...
FEATURE(`greet_pause', `1000')dnl 1 seconds
dnl #
dnl # Delay_checks allows sender<->recipient checking
FEATURE(`delay_checks', `friend', `n')dnl
dnl #
dnl # If we get too many bad recipients, slow things down...
define(`confBAD_RCPT_THROTTLE',`3')dnl
dnl #
dnl # Stop connections that overflow our concurrent and time connection rates
FEATURE(`conncontrol', `nodelay', `terminate')dnl
FEATURE(`ratecontrol', `nodelay', `terminate')dnl
dnl #
dnl # If you're on a dialup link, you should enable this - so sendmail
dnl # will not bring up the link (it will queue mail for later)
dnl define(`confCON_EXPENSIVE',`True')dnl
dnl #
dnl # Dialup/LAN connection overrides
dnl #
include(`/etc/mail/m4/dialup.m4')dnl
include(`/etc/mail/m4/provider.m4')dnl

dnl LOCAL_CONFIG
dnl EXPOSED_USER(root uucp)dnl # users exempt from masquerading
dnl LOCAL_USER(root)dnl
dnl MASQUERADE_AS(`external_smtp')dnl
dnl FEATURE(`allmasquerade')dnl
dnl FEATURE(`masquerade_envelope')dnl
dnl FEATURE(`nullclient', local_smtp)dnl

LOCAL_CONFIG
## Custom configurations below (will be preserved)
define(`SMART_HOST', `local_smtp')dnl
define(`confAUTH_MECHANISMS', `EXTERNAL GSSAPI DIGEST-MD5 CRAM-MD5 LOGIN PLAIN')dnl
FEATURE(`authinfo', `hash /etc/mail/authinfo')dnl
define(`RELAY_MAILER_ARGS', `TCP $h 25')dnl
dnl #
dnl # Default Mailer setup
MAILER_DEFINITIONS
MAILER(`local')dnl
MAILER(`smtp')dnl


authinfo:



AuthInfo:local_smtp "U:root" "I:my_username" "P:my_password"






email authentication sendmail smtp






share|improve this question













share|improve this question











share|improve this question




share|improve this question










asked Sep 18 '15 at 15:21









Jonas Hoffmann

84




84





bumped to the homepage by Community 2 days ago


This question has answers that may be good or bad; the system has marked it active so that they can be reviewed.







bumped to the homepage by Community 2 days ago


This question has answers that may be good or bad; the system has marked it active so that they can be reviewed.














  • Looks like whatever is connecting to local_smtp is not authenticating, as it did not issue an AUTH verb, and instead issued a MAIL FROM, which local_smtp then shot down. Is the MTA on whatever is connecting to local_smtp properly configured to authenticate as a client?
    – thrig
    Sep 18 '15 at 15:49










  • I use sendmail for authentication and it is configured in sendmail.mc file: FEATURE(``authinfo', ``hash /etc/mail/authinfo')dnl
    – Jonas Hoffmann
    Sep 18 '15 at 16:24












  • But it did use AUTH for local_smtp: 10759 <<< 250-AUTH LOGIN PLAIN^M. Or is this not it?
    – Jonas Hoffmann
    Sep 21 '15 at 7:43










  • That's the banner from the server. Had the client authenticated, I would expect to see a response >>> AUTH .... Instead, there is a >>> MAIL ... line.
    – thrig
    Sep 21 '15 at 14:27


















  • Looks like whatever is connecting to local_smtp is not authenticating, as it did not issue an AUTH verb, and instead issued a MAIL FROM, which local_smtp then shot down. Is the MTA on whatever is connecting to local_smtp properly configured to authenticate as a client?
    – thrig
    Sep 18 '15 at 15:49










  • I use sendmail for authentication and it is configured in sendmail.mc file: FEATURE(``authinfo', ``hash /etc/mail/authinfo')dnl
    – Jonas Hoffmann
    Sep 18 '15 at 16:24












  • But it did use AUTH for local_smtp: 10759 <<< 250-AUTH LOGIN PLAIN^M. Or is this not it?
    – Jonas Hoffmann
    Sep 21 '15 at 7:43










  • That's the banner from the server. Had the client authenticated, I would expect to see a response >>> AUTH .... Instead, there is a >>> MAIL ... line.
    – thrig
    Sep 21 '15 at 14:27
















Looks like whatever is connecting to local_smtp is not authenticating, as it did not issue an AUTH verb, and instead issued a MAIL FROM, which local_smtp then shot down. Is the MTA on whatever is connecting to local_smtp properly configured to authenticate as a client?
– thrig
Sep 18 '15 at 15:49




Looks like whatever is connecting to local_smtp is not authenticating, as it did not issue an AUTH verb, and instead issued a MAIL FROM, which local_smtp then shot down. Is the MTA on whatever is connecting to local_smtp properly configured to authenticate as a client?
– thrig
Sep 18 '15 at 15:49












I use sendmail for authentication and it is configured in sendmail.mc file: FEATURE(``authinfo', ``hash /etc/mail/authinfo')dnl
– Jonas Hoffmann
Sep 18 '15 at 16:24






I use sendmail for authentication and it is configured in sendmail.mc file: FEATURE(``authinfo', ``hash /etc/mail/authinfo')dnl
– Jonas Hoffmann
Sep 18 '15 at 16:24














But it did use AUTH for local_smtp: 10759 <<< 250-AUTH LOGIN PLAIN^M. Or is this not it?
– Jonas Hoffmann
Sep 21 '15 at 7:43




But it did use AUTH for local_smtp: 10759 <<< 250-AUTH LOGIN PLAIN^M. Or is this not it?
– Jonas Hoffmann
Sep 21 '15 at 7:43












That's the banner from the server. Had the client authenticated, I would expect to see a response >>> AUTH .... Instead, there is a >>> MAIL ... line.
– thrig
Sep 21 '15 at 14:27




That's the banner from the server. Had the client authenticated, I would expect to see a response >>> AUTH .... Instead, there is a >>> MAIL ... line.
– thrig
Sep 21 '15 at 14:27










1 Answer
1






active

oldest

votes

















up vote
0
down vote













As root send a test message with tracking map (authinfo) lookups.



#!/bin/sh
# -d60.5 turn on traking map lookups
/usr/sbin/sendmail -d60.5 -v -i -fsender_email -- receiver_email <<END
subject: test

test
END


Possible outcomes to define next tests:




  • no authinfo lookups

  • authinfo lookups with keys other than you expected

  • authinfo lookups returning "no match"

  • authinfo lookups returning correct values






share|improve this answer





















    Your Answer








    StackExchange.ready(function() {
    var channelOptions = {
    tags: "".split(" "),
    id: "106"
    };
    initTagRenderer("".split(" "), "".split(" "), channelOptions);

    StackExchange.using("externalEditor", function() {
    // Have to fire editor after snippets, if snippets enabled
    if (StackExchange.settings.snippets.snippetsEnabled) {
    StackExchange.using("snippets", function() {
    createEditor();
    });
    }
    else {
    createEditor();
    }
    });

    function createEditor() {
    StackExchange.prepareEditor({
    heartbeatType: 'answer',
    convertImagesToLinks: false,
    noModals: true,
    showLowRepImageUploadWarning: true,
    reputationToPostImages: null,
    bindNavPrevention: true,
    postfix: "",
    imageUploader: {
    brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
    contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
    allowUrls: true
    },
    onDemand: true,
    discardSelector: ".discard-answer"
    ,immediatelyShowMarkdownHelp:true
    });


    }
    });














    draft saved

    draft discarded


















    StackExchange.ready(
    function () {
    StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f230575%2fsendmail-issues-530-authentication-required-error-message-when-authinfo-is-sup%23new-answer', 'question_page');
    }
    );

    Post as a guest















    Required, but never shown

























    1 Answer
    1






    active

    oldest

    votes








    1 Answer
    1






    active

    oldest

    votes









    active

    oldest

    votes






    active

    oldest

    votes








    up vote
    0
    down vote













    As root send a test message with tracking map (authinfo) lookups.



    #!/bin/sh
    # -d60.5 turn on traking map lookups
    /usr/sbin/sendmail -d60.5 -v -i -fsender_email -- receiver_email <<END
    subject: test

    test
    END


    Possible outcomes to define next tests:




    • no authinfo lookups

    • authinfo lookups with keys other than you expected

    • authinfo lookups returning "no match"

    • authinfo lookups returning correct values






    share|improve this answer

























      up vote
      0
      down vote













      As root send a test message with tracking map (authinfo) lookups.



      #!/bin/sh
      # -d60.5 turn on traking map lookups
      /usr/sbin/sendmail -d60.5 -v -i -fsender_email -- receiver_email <<END
      subject: test

      test
      END


      Possible outcomes to define next tests:




      • no authinfo lookups

      • authinfo lookups with keys other than you expected

      • authinfo lookups returning "no match"

      • authinfo lookups returning correct values






      share|improve this answer























        up vote
        0
        down vote










        up vote
        0
        down vote









        As root send a test message with tracking map (authinfo) lookups.



        #!/bin/sh
        # -d60.5 turn on traking map lookups
        /usr/sbin/sendmail -d60.5 -v -i -fsender_email -- receiver_email <<END
        subject: test

        test
        END


        Possible outcomes to define next tests:




        • no authinfo lookups

        • authinfo lookups with keys other than you expected

        • authinfo lookups returning "no match"

        • authinfo lookups returning correct values






        share|improve this answer












        As root send a test message with tracking map (authinfo) lookups.



        #!/bin/sh
        # -d60.5 turn on traking map lookups
        /usr/sbin/sendmail -d60.5 -v -i -fsender_email -- receiver_email <<END
        subject: test

        test
        END


        Possible outcomes to define next tests:




        • no authinfo lookups

        • authinfo lookups with keys other than you expected

        • authinfo lookups returning "no match"

        • authinfo lookups returning correct values







        share|improve this answer












        share|improve this answer



        share|improve this answer










        answered Sep 21 '15 at 18:46









        AnFi

        1,09259




        1,09259






























            draft saved

            draft discarded




















































            Thanks for contributing an answer to Unix & Linux Stack Exchange!


            • Please be sure to answer the question. Provide details and share your research!

            But avoid



            • Asking for help, clarification, or responding to other answers.

            • Making statements based on opinion; back them up with references or personal experience.


            To learn more, see our tips on writing great answers.





            Some of your past answers have not been well-received, and you're in danger of being blocked from answering.


            Please pay close attention to the following guidance:


            • Please be sure to answer the question. Provide details and share your research!

            But avoid



            • Asking for help, clarification, or responding to other answers.

            • Making statements based on opinion; back them up with references or personal experience.


            To learn more, see our tips on writing great answers.




            draft saved


            draft discarded














            StackExchange.ready(
            function () {
            StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f230575%2fsendmail-issues-530-authentication-required-error-message-when-authinfo-is-sup%23new-answer', 'question_page');
            }
            );

            Post as a guest















            Required, but never shown





















































            Required, but never shown














            Required, but never shown












            Required, but never shown







            Required, but never shown

































            Required, but never shown














            Required, but never shown












            Required, but never shown







            Required, but never shown







            Popular posts from this blog

            サソリ

            広島県道265号伴広島線

            Setup Asymptote in Texstudio