diff options
author | Jeremy Harris <jgh146exb@wizmail.org> | 2019-12-24 15:43:00 +0000 |
---|---|---|
committer | Jeremy Harris <jgh146exb@wizmail.org> | 2019-12-24 15:49:46 +0000 |
commit | 98eb95929140ee1e2b2b367b12abb45762d155e9 (patch) | |
tree | 4a6eec4591b03adddef2c145634a102cd6535765 /test | |
parent | c71c454d483e6bfbecea437978beda69044e5498 (diff) |
Fix the variables set by gsasl authenticator
Diffstat (limited to 'test')
-rw-r--r-- | test/confs/3820 | 47 | ||||
-rw-r--r-- | test/scripts/3820-Gnu-SASL/3820 | 26 | ||||
-rw-r--r-- | test/scripts/3820-Gnu-SASL/REQUIRES | 1 |
3 files changed, 74 insertions, 0 deletions
diff --git a/test/confs/3820 b/test/confs/3820 new file mode 100644 index 000000000..a0206f3a0 --- /dev/null +++ b/test/confs/3820 @@ -0,0 +1,47 @@ +# Exim test configuration 3820 + +SERVER= + +.include DIR/aux-var/std_conf_prefix + +primary_hostname = myhost.test.ex + +# ----- Main settings ----- + + +# ----- Authentication ----- + +begin authenticators + +sasl1: + driver = gsasl + public_name = ANONYMOUS + server_set_id = $auth1 + server_condition = true + +sasl2: + driver = gsasl + public_name = PLAIN + server_set_id = $auth1 + server_condition = false + +sasl3: + driver = gsasl + public_name = SCRAM-SHA-1 + + # will need to give library salt, stored-key, server-key, itercount + # + # sigh + # gsasl takes props: GSASL_SCRAM_ITER, GSASL_SCRAM_SALT. It _might_ take + # a GSASL_SCRAM_SALTED_PASSWORD - but that is only documented for client mode. + + server_scram_iter = 4096 + # unclear if the salt is given in binary or base64 to the library + server_scram_salt = QSXCR+Q6sek8bf92 + server_password = pencil + + server_condition = true + server_set_id = $auth1 + + +# End diff --git a/test/scripts/3820-Gnu-SASL/3820 b/test/scripts/3820-Gnu-SASL/3820 new file mode 100644 index 000000000..d9fb80b55 --- /dev/null +++ b/test/scripts/3820-Gnu-SASL/3820 @@ -0,0 +1,26 @@ +# GSASL authentication (server only) +# +# An ANONYMOUS ath seems to want the username b64'd. Which is consistent with +# other SASL stuff, but inconsistent vs. cyrus-sasl. It also wants the username +# on the AUTH line, otherwise it GSASL_MECHANISM_PARSE_ERROR, and 435. +# +exim -d+all -DSERVER=server -bd -oX PORT_D +**** +client 127.0.0.1 PORT_D +??? 220 +EHLO xxxx +??? 250- +??? 250- +??? 250- +??? 250- +??? 250- +??? 250 +AUTH PLAIN AHBoMTAAc2VjcmV0 +??? 535 +AUTH ANONYMOUS cGgxMA== +??? 235 +QUIT +??? 221 +**** +killdaemon +no_msglog_check diff --git a/test/scripts/3820-Gnu-SASL/REQUIRES b/test/scripts/3820-Gnu-SASL/REQUIRES new file mode 100644 index 000000000..46144894c --- /dev/null +++ b/test/scripts/3820-Gnu-SASL/REQUIRES @@ -0,0 +1 @@ +authenticator gsasl |