bug in NSS ?

[Дейтер Александр Валерьевич]

> > > my /usr/local/lib/sasl2/Sendmail.conf:
> > > pwcheck_method: auxprop
> > > auxprop_plugin: sasldb
> > Is the Sendmail.conf file the same as the FreeBSD file on the Solaris 8
> > system?

yes of course. On Solaris8 box and FreeBSD box i have a identical
configuration.

> Does  sasldblistusers2 on the Solaris 8 system list the test user in the
> sasldb file?  If it does, is their a test user in the FreeBSD sasldb file?

yes.

# sasldblistusers2
smmsp at server.komi.mts.ru: userPassword
test at server.komi.mts.ru: userPassword

on FreeBSD and Solaris  i can successfully authenticate any user from sasldb
via SMTP with sendmail:

# perl -e 'use MIME::Base64; print encode_base64("test\0test\0test");'
dGVzdAB0ZXN0AHRlc3Q=

$ telnet localhost 25
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
220 server.komi.mts.ru ESMTP Sendmail 8.12.10/8.12.10; Tue, 21 Oct 2003
13:29:41 +0400 (MSD)
ehlo test
250-server.komi.mts.ru Hello localhost [127.0.0.1], pleased to meet you
250-ENHANCEDSTATUSCODES
250-PIPELINING
250-8BITMIME
250-SIZE
250-DSN
250-ETRN
250-AUTH CRAM-MD5 DIGEST-MD5 NTLM LOGIN PLAIN
250-DELIVERBY
250 HELP
AUTH PLAIN dGVzdAB0ZXN0AHRlc3Q=
235 2.0.0 OK Authenticated
quit
221 2.0.0 server.komi.mts.ru closing connection
Connection closed by foreign host.

But, user test (from ldap) on FreeBSD cannot send mail from command line via
/usr/bin/mail or /usr/sbin/sendmail (if MSP use AUTH):

%id
uid=1000(test) gid=1000(test) groups=1000(test)

%date | /usr/sbin/sendmail -v root
root... Connecting to [127.0.0.1] via relay...
220 server.komi.mts.ru ESMTP Sendmail 8.12.10/8.12.10; Tue, 21 Oct 2003
13:44:57 +0400 (MSD)
>>> EHLO server.komi.mts.ru
250-server.komi.mts.ru Hello localhost [127.0.0.1], pleased to meet you
250-ENHANCEDSTATUSCODES
250-PIPELINING
250-8BITMIME
250-SIZE
250-DSN
250-ETRN
250-AUTH CRAM-MD5 DIGEST-MD5 NTLM LOGIN PLAIN
250-DELIVERBY
250 HELP
>>> QUIT
221 2.0.0 server.komi.mts.ru closing connection
root... Deferred: Temporary AUTH failure
Closing connection to [127.0.0.1]

On Solaris this work fine.

And any user from /etc/passwd can successfully send mail from command line
via /usr/bin/mail or /usr/sbin/sendmail (if MSP use AUTH) on Solaris and
FreeBSD:

$ id
uid=70(pgsql) gid=70(pgsql) groups=70(pgsql)

$ date|/usr/sbin/sendmail -v root
root... Connecting to [127.0.0.1] via relay...
220 server.komi.mts.ru ESMTP Sendmail 8.12.10/8.12.10; Tue, 21 Oct 2003
13:51:05 +0400 (MSD)
>>> EHLO server.komi.mts.ru
250-server.komi.mts.ru Hello localhost [127.0.0.1], pleased to meet you
250-ENHANCEDSTATUSCODES
250-PIPELINING
250-8BITMIME
250-SIZE
250-DSN
250-ETRN
250-AUTH CRAM-MD5 DIGEST-MD5 NTLM LOGIN PLAIN
250-DELIVERBY
250 HELP
>>> AUTH PLAIN c21tc3AAc21tc3AAc21tc3A=
235 2.0.0 OK Authenticated
>>> MAIL From:<pgsql at server.komi.mts.ru> SIZE=29
AUTH=pgsql at server.komi.mts.ru
250 2.1.0 <pgsql at server.komi.mts.ru>... Sender ok
>>> RCPT To:<root at server.komi.mts.ru>
>>> DATA
250 2.1.5 <root at server.komi.mts.ru>... Recipient ok
354 Enter mail, end with "." on a line by itself
>>> .
250 2.0.0 h9L9p5XM000790 Message accepted for delivery
root... Sent (h9L9p5XM000790 Message accepted for delivery)
Closing connection to [127.0.0.1]
>>> QUIT
221 2.0.0 server.komi.mts.ru closing connection

AUTH PLAIN c21tc3AAc21tc3AAc21tc3A= - is authinfo for user smmsp
(smmsp\0smmsp\0smmsp):

# perl -e 'use MIME::Base64;print decode_base64("c21tc3AAc21tc3AAc21tc3A=")
, "\n";'
smmspsmmspsmmsp

Why auth work for local users and don't work for nss_ldap users ?

Thanks!