cURL

curl's project page on SourceForge.net

Sponsors:
Haxx

cURL > Mailing List > Monthly Index > Single Mail

curl-tracker Archives

[curl:bugs] #1367 SMTP authentification option

From: Steve Holme <captain-caveman_at_users.sf.net>
Date: Wed, 07 May 2014 16:05:41 +0000

Hi,

Thank you for your bug report.

However, this is intended behaviour as the behaviour of >= 7.31 && < 7.34.0 that you mention broke backwards compatability with older versions of curl where a semi-colon could be a valid character in passwords.

As such we added a new --login-options command line option in 7.34 so please try the following in versions >= 7.34.0:

~~~~~~
> curl smtp://smtp.univ-paris8.fr:587 --verbose --insecure --ssl --mail-from "xxxxxxx_at_univ-paris8.fr" --mail-rcpt "xxxxxx_at_gmail.com" --user "xxxx:xxxxx" --login-options "auth=PLAIN" -T "mail_test.txt"
~~~~~~

You can also specify the user, password and login options in the URL so the following should work >= 7.31.0:

~~~~~~

> curl smtp://user:password;auth=PLAIN_at_smtp.univ-paris8.fr:587 --verbose --insecure --ssl --mail-from "xxxxxxx_at_univ-paris8.fr" --mail-rcpt "xxxxxx_at_gmail.com" -T "mail_test.txt"
~~~~~~

Note: I would expect this to be consistent in other platforms (as you mentioned) as well as with POP3 and IMAP.

Kind Regards

Steve

---
** [bugs:#1367] SMTP authentification option**
**Status:** open
**Created:** Wed May 07, 2014 02:24 PM UTC by Clair
**Last Updated:** Wed May 07, 2014 02:24 PM UTC
**Owner:** nobody
**BugReport :**
On commandline, there seems to be a bug on the ";auth=..." option of the "--user" flag. When trying to connect to a SMTP or SMTPS server, from the 7.34 version to the 7.36 included, the option is simply not taken into account.
**Platform :**
Windows 7 with MinGW (but also consistent with the (less accurate) tests I have done on linux (Ubuntu) & mac. that I won't report here...)
**Versions :**
I've tried many different binaries of curl in many different versions (almost all I could find !)
The source are curlforwindows, Knauf, Khntak, LoPinto...
The versions are :
7.30.0 ; 7.31.0 ; 7.32.0 ; 7.33.0 ; 7.34.0 ; 7.35.0 ; 7.36.0
For example :
The "7.33" :
> curl 7.33.0 (x86_64-pc-win32) libcurl/7.33.0 OpenSSL/0.9.8y zlib/1.2.8 libssh2/1.4.3 Protocols: dict file ftp ftps gopher http https imap imaps pop3 pop3s rtsp scp sftp smtp smtps telnet tftp Features: AsynchDNS GSS-Negotiate Largefile NTLM SSL SSPI libz
The "7.36" :
> curl 7.36.0 (x86_64-pc-win32) libcurl/7.36.0 WinSSL
Protocols: dict file ftp ftps gopher http https imap imaps ldap pop3 pop3s rtsp smtp smtps telnet tftp
Features: AsynchDNS GSS-Negotiate Largefile NTLM SSL SSPI
**Details :**
>From curl *7.31 to 7.33*, with both gmail and my university server, the option to change the mode of authentification WORKS fine.
For exemple, with the following commandlines :
~~~~~~
> curl smtp://smtp.univ-paris8.fr:587 --verbose --insecure --ssl --mail-from "xxxxxxx_at_univ-paris8.fr" --mail-rcpt "xxxxxx_at_gmail.com" --user "xxxx:xxxxx;auth=PLAIN" -T "mail_test.txt"
~~~~~~
~~~~~~
> curl smtps://smtp.gmail.com:465 --verbose --insecure --ssl --mail-from "xxxxxxxx_at_gmail.com" --mail-rcpt "xxxxxxxxx_at_hotmail.com" --user "xxxxx.xxxxx:xxxxxxx;auth=LOGIN" -T "content.txt"
~~~~~~
the mail is sent and the output shows that the authentification option was taken into account :
> EHLO mail_test.txt
< 250-azel.univ-paris8.fr
< 250-PIPELINING
< 250-SIZE 26214400
< 250-VRFY
< 250-ETRN
< 250-AUTH CRAM-MD5 LOGIN NTLM PLAIN DIGEST-MD5
< 250-AUTH=CRAM-MD5 LOGIN NTLM PLAIN DIGEST-MD5
< 250-ENHANCEDSTATUSCODES
< 250-8BITMIME
< 250 DSN
> AUTH PLAIN # or "> AUTH DIGEST-MD" if I put auth=DIGEST-MD5...
But *with the SAME commandlines*, from 7.34 to 7.36, the mail is not sent and there is a
"curl: (67) Authentication failed: 535" error message.
Moreover, it shows that my choice was not taken into account :
> EHLO mail_test.txt
< 250-azel.univ-paris8.fr
< 250-PIPELINING
< 250-SIZE 26214400
< 250-VRFY
< 250-ETRN
< 250-AUTH CRAM-MD5 LOGIN NTLM PLAIN DIGEST-MD5
< 250-AUTH=CRAM-MD5 LOGIN NTLM PLAIN DIGEST-MD5
< 250-ENHANCEDSTATUSCODES  #or "> AUTH=LOGIN" for gmail whatever I choose
< 250-8BITMIME
< 250 DSN
**Further remarks**
As I said I also tried that on Linux and Mac (with source) and it seems to be the same (after 7.34 it doesn't work...) but my tests were maybe not accurate enough on those platforms...
---
Sent from sourceforge.net because curl-tracker@cool.haxx.se is subscribed to https://sourceforge.net/p/curl/bugs/
To unsubscribe from further messages, a project admin can change settings at https://sourceforge.net/p/curl/admin/bugs/options.  Or, if this is a mailing list, you can unsubscribe from the mailing list.
Received on 2014-05-07

These mail archives are generated by hypermail.

donate! Page updated March 21, 2014.
web site info

File upload with ASP.NET