summaryrefslogtreecommitdiff
path: root/test
diff options
context:
space:
mode:
authorJeremy Harris <jgh146exb@wizmail.org>2019-12-24 15:43:00 +0000
committerJeremy Harris <jgh146exb@wizmail.org>2019-12-24 15:49:46 +0000
commit98eb95929140ee1e2b2b367b12abb45762d155e9 (patch)
tree4a6eec4591b03adddef2c145634a102cd6535765 /test
parentc71c454d483e6bfbecea437978beda69044e5498 (diff)
Fix the variables set by gsasl authenticator
Diffstat (limited to 'test')
-rw-r--r--test/confs/382047
-rw-r--r--test/scripts/3820-Gnu-SASL/382026
-rw-r--r--test/scripts/3820-Gnu-SASL/REQUIRES1
3 files changed, 74 insertions, 0 deletions
diff --git a/test/confs/3820 b/test/confs/3820
new file mode 100644
index 000000000..a0206f3a0
--- /dev/null
+++ b/test/confs/3820
@@ -0,0 +1,47 @@
+# Exim test configuration 3820
+
+SERVER=
+
+.include DIR/aux-var/std_conf_prefix
+
+primary_hostname = myhost.test.ex
+
+# ----- Main settings -----
+
+
+# ----- Authentication -----
+
+begin authenticators
+
+sasl1:
+ driver = gsasl
+ public_name = ANONYMOUS
+ server_set_id = $auth1
+ server_condition = true
+
+sasl2:
+ driver = gsasl
+ public_name = PLAIN
+ server_set_id = $auth1
+ server_condition = false
+
+sasl3:
+ driver = gsasl
+ public_name = SCRAM-SHA-1
+
+ # will need to give library salt, stored-key, server-key, itercount
+ #
+ # sigh
+ # gsasl takes props: GSASL_SCRAM_ITER, GSASL_SCRAM_SALT. It _might_ take
+ # a GSASL_SCRAM_SALTED_PASSWORD - but that is only documented for client mode.
+
+ server_scram_iter = 4096
+ # unclear if the salt is given in binary or base64 to the library
+ server_scram_salt = QSXCR+Q6sek8bf92
+ server_password = pencil
+
+ server_condition = true
+ server_set_id = $auth1
+
+
+# End
diff --git a/test/scripts/3820-Gnu-SASL/3820 b/test/scripts/3820-Gnu-SASL/3820
new file mode 100644
index 000000000..d9fb80b55
--- /dev/null
+++ b/test/scripts/3820-Gnu-SASL/3820
@@ -0,0 +1,26 @@
+# GSASL authentication (server only)
+#
+# An ANONYMOUS ath seems to want the username b64'd. Which is consistent with
+# other SASL stuff, but inconsistent vs. cyrus-sasl. It also wants the username
+# on the AUTH line, otherwise it GSASL_MECHANISM_PARSE_ERROR, and 435.
+#
+exim -d+all -DSERVER=server -bd -oX PORT_D
+****
+client 127.0.0.1 PORT_D
+??? 220
+EHLO xxxx
+??? 250-
+??? 250-
+??? 250-
+??? 250-
+??? 250-
+??? 250
+AUTH PLAIN AHBoMTAAc2VjcmV0
+??? 535
+AUTH ANONYMOUS cGgxMA==
+??? 235
+QUIT
+??? 221
+****
+killdaemon
+no_msglog_check
diff --git a/test/scripts/3820-Gnu-SASL/REQUIRES b/test/scripts/3820-Gnu-SASL/REQUIRES
new file mode 100644
index 000000000..46144894c
--- /dev/null
+++ b/test/scripts/3820-Gnu-SASL/REQUIRES
@@ -0,0 +1 @@
+authenticator gsasl