Demo Discussion
Forum Config Examples Contributions Vulnerabilities
  Discussion forum about ELOG  Not logged in ELOG logo
icon5.gif   more fun with SMTP and authentication...., posted by Topher Congdon on Mon Jan 26 18:52:56 2009 
    icon2.gif   Re: more fun with SMTP and authentication...., posted by Stefan Ritt on Tue Jan 27 09:03:22 2009 Capture.png
Message ID: 66170     Entry time: Mon Jan 26 18:52:56 2009     Reply to this: 66175
Icon: Question  Author: Topher Congdon  Author Email: topher@congdongroup.com 
Category: Question  OS: Windows  ELOG Version: 2.7.5-2168 
Subject: more fun with SMTP and authentication.... 
Great software.

Okay, so I've done my reading through the forum and got a couple of nuggets along the way but I am still unable
to get the e-mail function to work.  I am using Windows IIS to make an SMTP virtual server to shimmy around the
IT firewall.  That appears to work as I can see the response from the external SMTP server while running elogd
with the -v flag.  The elogd -v details are below:  

Email from xxxxxxxxxxxx@xxxxxxxxxxxx.com to xxxxxx.XXXXXXX@XXXXX.com,XXXXX.XXXXX X@XXXXX.com, SMTP host
XXXXXXXXXXXXXX.XXXX.XXXXX.com: 
220 smtp.xxxxx.com Microsoft ESMTP MAIL Service, Version: 6.0.2600.2180 ready at   Mon, 26 Jan 2009 10:56:35 -0500 
EHLO xxxxxxxxxxxxxx.xxxx.xxxxx.com 
250-smtp.xxxxx.com Hello [xxx.xxx.xxx.xxx] 
250-AUTH=LOGIN 
250-AUTH LOGIN 
250-SIZE 2097152 
250-PIPELINING 
250-DSN 
250-ENHANCEDSTATUSCODES 
250-8bitmime 250-BINARYMIME 
250-CHUNKING 250-VRFY 
250 OK AUTH LOGIN 
Username: 
xxxxxxxxxxxx@xxxxxxxxxxxx.com 
Password: cm9jaGVsb2dib29r 
535 5.7.3 Authentication unsuccessful 
==== Return ================================  

From the SMTP server response it is not logging in, but I don't know why.  I can log in to the webmail app with
the username/password provided to ELOG, but it doesn't appear to work through ELOG. The SMTP provider includes
the following info to setup e-mail accounts via SMTP: "Please note: To send e-mail using the SMTP-Server,
activate SMTP Authentication. Please do not use the Secure Password Authentication (SPA) option. Optionally,
port 587 can also be used in addition to the default port (25) RFC 2476." 

For authentication via the Windows IIS I have "basic authentication" with no TLS encryption required - I'm not
sure if that meets the provider's "SMTP authentication" requirement.  When I was using the previous version of
ELOG (sorry, I did not note the version number) the username was encrypted along with the password.  With the
2168 build, the password is still encrypted but the usernamer is not; should the password be in "plain text" as
well?  

I can provide you with a username/password for the SMTP provider I'm using if that will help.  Please send me a
separate e-mail and I will reply with the information.  

Thank you,  

Topher Congdon
ELOG V3.1.5-fe60aaf