SMTP auth and mobile devices

Chris Hastie lists at oak-wood.co.uk
Wed Jul 22 23:15:17 CEST 2009


I'm having difficulty configuring a Symbian base mobile to send mail
through kolab. I've tried with both Nokia's messaging service and with
ProfiMail and seem to hit similar issues. Basic configuration the
clients fail to authenticate and I get a '554 5.7.1 Relay access
denied'. Neither client appears to have tried to authenticate. This may
be because kolab isn't advertising authentication:

ehlo ash.blahblah
250-kolab.blahblah
250-PIPELINING
250-SIZE 20971520
250-VRFY
250-ETRN
250-STARTTLS
250-ENHANCEDSTATUSCODES
250-8BITMIME
250 DSN

Neither client appears to be attempting to use STARTTLS, despite this
option being explicitly enabled in profimail's options.

I have no problem from Thunderbird, which starts a TLS session and then
authenticates. If I tell TB not to use TLS however, it doesn't
authenticate and relaying is denied.

I've tried forcing both clients to use SSL instead, but get this:

Jul 22 21:48:18 rowan <info> postfix/smtpd[6975]: connect from
gw1.vie.hosting.nokia.com[213.185.186.4]
Jul 22 21:48:18 rowan <info> postfix/smtpd[6975]: setting up TLS
connection from gw1.vie.hosting.nokia.com[213.185.186.4]
Jul 22 21:48:18 rowan <info> postfix/smtpd[6975]: SSL_accept error from
gw1.vie.hosting.nokia.com[213.185.186.4]: 0
Jul 22 21:48:18 rowan <warning> postfix/smtpd[6975]: warning: TLS
library problem: 6975:error:14094416:SSL routines:SSL3_READ_BYTES:sslv3
alert certificate unknown:s3_pkt.c:1053:SSL alert number 46:
Jul 22 21:48:18 rowan <info> postfix/smtpd[6975]: lost connection after
CONNECT from gw1.vie.hosting.nokia.com[213.185.186.4]
Jul 22 21:48:18 rowan <info> postfix/smtpd[6975]: disconnect from
gw1.vie.hosting.nokia.com[213.185.186.4]

Both clients work fine with another postfix installation, but this
supports CRAM-MD5 and advertises this without the need to starttls. I
realise that this appears to be at least partly a ropey client issue,
but it would help if I could persuade the kolab server to advertise
supporting smtp auth without having to use TLS/SSL. Alternatively, if I
could sort out the SSL problem. Has anyone any clues on either of these?

Kolab is 2.2.1





More information about the users mailing list