SMTP Authentication

Clark_LIU_Xinyu

http://www.howau.org/smtpauthentication.txt






SMTP Authentication
1. Introduction
SMTP Authentication is advertised by the SMTP Authentication server, requires a client to authenticate, while finally both parties have to mutually accept and support the chosen authentication procedure. Originally invented as a Host-to-Host protocol, with SMTP Authentication, a User has to identify itself and after successful authentication, reception/transmission of his/her emails is granted.
2. Request For Comments
3. Authentication Framework
* Server Announcement
* AUTH mechanisms
Login
Plain
CRAM-MD5
* AUTHLOGIN
* AUTHPLAIN
* AUTHCRAM-MD5
4. Implementation
Internal: The Cyrus SASL library
External: Pluggable Authentication Module (PAM)
* Checkpassword Interface
* qmail-smtpd
* qmail-remote
* User Database
* Conclusion
Therefore, SMTP Authentication is an additional approach based on a User identification/authentication and is particularly well suited to support roaming Users.
5. Patches & Programs
* qmail-smtpd-auth-0.4.2
* cmd5checkpw-0.30
* vchkpw.c.diff
* Base64-1.3
* SPAMCONTROL
Addendum