SMTP auth and mobile devices

[Alexander Schröter]

On Wednesday 22 July 2009 11:15:17 pm Chris Hastie wrote:
> I'm having difficulty configuring a Symbian base mobile to send mail
> through kolab. I've tried with both Nokia's messaging service and with
> ProfiMail and seem to hit similar issues. Basic configuration the
> clients fail to authenticate and I get a '554 5.7.1 Relay access
> denied'. Neither client appears to have tried to authenticate. This may
> be because kolab isn't advertising authentication:
>
> ehlo ash.blahblah
> 250-kolab.blahblah
> 250-PIPELINING
> 250-SIZE 20971520
> 250-VRFY
> 250-ETRN
> 250-STARTTLS
> 250-ENHANCEDSTATUSCODES
> 250-8BITMIME
> 250 DSN
>
> Neither client appears to be attempting to use STARTTLS, despite this
> option being explicitly enabled in profimail's options.
>
> I have no problem from Thunderbird, which starts a TLS session and then
> authenticates. If I tell TB not to use TLS however, it doesn't
> authenticate and relaying is denied.
>
> I've tried forcing both clients to use SSL instead, but get this:
>
> Jul 22 21:48:18 rowan <info> postfix/smtpd[6975]: connect from
> gw1.vie.hosting.nokia.com[213.185.186.4]
> Jul 22 21:48:18 rowan <info> postfix/smtpd[6975]: setting up TLS
> connection from gw1.vie.hosting.nokia.com[213.185.186.4]
> Jul 22 21:48:18 rowan <info> postfix/smtpd[6975]: SSL_accept error from
> gw1.vie.hosting.nokia.com[213.185.186.4]: 0
> Jul 22 21:48:18 rowan <warning> postfix/smtpd[6975]: warning: TLS
> library problem: 6975:error:14094416:SSL routines:SSL3_READ_BYTES:sslv3
> alert certificate unknown:s3_pkt.c:1053:SSL alert number 46:
> Jul 22 21:48:18 rowan <info> postfix/smtpd[6975]: lost connection after
> CONNECT from gw1.vie.hosting.nokia.com[213.185.186.4]
> Jul 22 21:48:18 rowan <info> postfix/smtpd[6975]: disconnect from
> gw1.vie.hosting.nokia.com[213.185.186.4]
>
> Both clients work fine with another postfix installation, but this
> supports CRAM-MD5 and advertises this without the need to starttls. I
> realise that this appears to be at least partly a ropey client issue,
> but it would help if I could persuade the kolab server to advertise
> supporting smtp auth without having to use TLS/SSL. Alternatively, if I
> could sort out the SSL problem. Has anyone any clues on either of these?

Did you import the certificate to your phone. At least at one point the error 
message suggest that it gets a certificate but doesn't know or trust it.

> Kolab is 2.2.1
>
>
> _______________________________________________
> Kolab-users mailing list
> Kolab-users at kolab.org
> https://kolab.org/mailman/listinfo/kolab-users