GNU bug report logs - #26307
25.1; smtpmail hard-coded auth mechanism order does not allow coping with misbehaving servers

Previous Next

To add a comment to this bug, you must first unarchive it, by sending
a message to control AT debbugs.gnu.org, with unarchive 26307 in the body.
You can then email your comments to 26307 AT debbugs.gnu.org in the normal way.

Toggle the display of automated, internal messages from the tracker.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: Marco Maggi <marco.maggi-ipsu <at> poste.it>
To: bug-gnu-emacs <at> gnu.org
Subject: 25.1;
 smtpmail hard-coded auth mechanism order does not allow coping with
 misbehaving servers
Date: Thu, 30 Mar 2017 08:54:33 +0200

In GNU  Emacs 25.1.1 (x86_64-slackware-linux-gnu, GTK+  Version 2.24.30)
the library "smtpmail.el" contains the hard-coded list of authentication
mechanisms to try in sequence:

   (defconst smtpmail-auth-supported '(cram-md5 plain login)
     "List of supported SMTP AUTH mechanisms.
   The list is in preference order.")

it would be useful  to have a public API mechanism  to change such order
in case the server misbehaves when using the cram-m5 method.

  I am  customer of  a mail  service using a  server that  advertises to
support  the cram-md5,  plain and  login  methods but  then when  trying
cram-md5 the authentication fails; the login method succeeds.

  Just changing the above code to:

   (defconst smtpmail-auth-supported '(login cram-md5 plain)

and recompiling fixes my problems.

  It is hard  to contact the service administrators and  having them fix
the problem, so a workaround is useful.

TIA
-- 
Marco Maggi

Message #8 received at 26307 <at> debbugs.gnu.org (full text, mbox):

From: Glenn Morris <rgm <at> gnu.org>
To: marco.maggi-ipsu <at> poste.it
Cc: 26307 <at> debbugs.gnu.org
Subject: Re: bug#26307: 25.1;
 smtpmail hard-coded auth mechanism order does not allow coping with
 misbehaving servers
Date: Fri, 31 Mar 2017 18:59:27 -0400

Marco Maggi wrote:

>    (defconst smtpmail-auth-supported '(cram-md5 plain login)
>      "List of supported SMTP AUTH mechanisms.
>    The list is in preference order.")
>
> it would be useful  to have a public API mechanism  to change such order
> in case the server misbehaves when using the cram-m5 method.
>
>   I am  customer of  a mail  service using a  server that  advertises to
> support  the cram-md5,  plain and  login  methods but  then when  trying
> cram-md5 the authentication fails; the login method succeeds.
>
>   Just changing the above code to:
>
>    (defconst smtpmail-auth-supported '(login cram-md5 plain)
>
> and recompiling fixes my problems.

Intead of recompiling, you can add to your .emacs:

(with-eval-after-load 'smtpmail
  (setq smtpmail-auth-supported '(login cram-md5 plain)))

Perhaps no Emacs change is needed then?

Message #11 received at 26307 <at> debbugs.gnu.org (full text, mbox):

From: Marco Maggi <marco.maggi-ipsu <at> poste.it>
To: Glenn Morris <rgm <at> gnu.org>
Cc: 26307 <at> debbugs.gnu.org
Subject: Re: bug#26307: 25.1;
 smtpmail hard-coded auth mechanism order does not allow coping with
 misbehaving servers
Date: Sat, 01 Apr 2017 13:12:08 +0200

Glenn Morris wrote:

> Marco Maggi wrote:

>>    (defconst smtpmail-auth-supported '(cram-md5 plain login)
>>      "List of supported SMTP AUTH mechanisms.
>>    The list is in preference order.")

>> it would be useful  to have a public API mechanism  to change such order
>> in case the server misbehaves when using the cram-m5 method.

> Intead of recompiling, you can add to your .emacs:

> (with-eval-after-load 'smtpmail
>   (setq smtpmail-auth-supported '(login cram-md5 plain)))

> Perhaps no Emacs change is needed then?

But the symbol is  defined as a constant, so it would  be bad style?  It
is  also  undocumented.  Ideally  one  should  be  able to  select  such
configuration on a per-server basis.
-- 
Marco Maggi

Message #14 received at 26307 <at> debbugs.gnu.org (full text, mbox):

From: Glenn Morris <rgm <at> gnu.org>
To: Marco Maggi <marco.maggi-ipsu <at> poste.it>
Cc: 26307 <at> debbugs.gnu.org
Subject: Re: bug#26307: 25.1;
 smtpmail hard-coded auth mechanism order does not allow coping with
 misbehaving servers
Date: Sun, 02 Apr 2017 11:35:40 -0400

Marco Maggi wrote:

>> (with-eval-after-load 'smtpmail
>>   (setq smtpmail-auth-supported '(login cram-md5 plain)))
>
>> Perhaps no Emacs change is needed then?
>
> But the symbol is  defined as a constant, so it would  be bad style?  It
> is  also  undocumented.  Ideally  one  should  be  able to  select  such
> configuration on a per-server basis.

It's (presumably) a constant because in normal operation there's no need
to change it, but if you have a special need to change it, it's easy to
do so.

Personally I don't see a need to add complexity to Emacs to cater to
misconfigured servers.

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.