The auth don't work in my system ¿?
anyone can send me mail by using my server.
I have the following packages:
(debian 3.1 OS)
linux-image-2.6.15-1-686
sendmail-8.13.6-1
libauthen-sasl-cyrus-perl 0.12-server-4
libauthen-sasl-perl 2.09-1
libsasl2 2.1.19-1.9
libsasl2-dev 2.1.19-1.9
libsasl2-modules 2.1.19-1.9
sasl2-bin 2.1.19-1.9
_____________________
my sendmail.mc file:
_____________________
divert(-1)dnl
#-----------------------------------------------------------------------------
# $Sendmail: debproto.mc,v 8.13.5 2005-10-10 23:59:04 cowboy Exp $
#
# Copyright (c) 1998-2005 Richard Nelson. All Rights Reserved.
#
# cf/debian/sendmail.mc. Generated from sendmail.mc.in by configure.
#
# sendmail.mc prototype config file for building Sendmail 8.13.5
#
# Note: the .in file supports 8.7.6 - 9.0.0, but the generated
# file is customized to the version noted above.
#
# This file is used to configure Sendmail for use with Debian systems.
#
# If you modify this file, you will have to regenerate /etc/mail/sendmail.cf
# by running this file through the m4 preprocessor via one of the following:
# * `sendmailconfig`
# * `make`
# * `m4 /etc/mail/sendmail.mc > /etc/mail/sendmail.cf`
# The first two options are preferred as they will also update other files
# that depend upon the contents of this file.
#
# The best documentation for this .mc file is:
# /usr/share/doc/sendmail-doc/cf.README.gz
#
#-----------------------------------------------------------------------------
divert(0)dnl
#
# Copyright (c) 1998-2005 Richard Nelson. All Rights Reserved.
#
# This file is used to configure Sendmail for use with Debian systems.
#
define(`_USE_ETC_MAIL_')dnl
include(`/usr/share/sendmail/cf/m4/cf.m4')dnl
include(`/etc/mail/tls/starttls.m4')dnl
include(`/etc/mail/sasl/sasl.m4')dnl
VERSIONID(`$Id: sendmail.mc, v 8.13.5-3 2005-10-10 23:59:04 cowboy Exp $')
OSTYPE(`debian')dnl
DOMAIN(`debian-mta')dnl
dnl # Items controlled by /etc/mail/sendmail.conf - DO NOT TOUCH HERE
undefine(`confHOST_STATUS_DIRECTORY')dnl #DAEMON_HOSTSTATS=
dnl # Items controlled by /etc/mail/sendmail.conf - DO NOT TOUCH HERE
dnl #
dnl # General defines
dnl #
dnl # SAFE_FILE_ENV: [undefined] If set, sendmail will do a chroot()
dnl # into this directory before writing files.
dnl # If *all* your user accounts are under /home then use that
dnl # instead - it will prevent any writes outside of /home !
dnl # define(`confSAFE_FILE_ENV', `')dnl
dnl #
dnl # Daemon options - restrict to servicing LOCALHOST ONLY !!!
dnl # Remove `, Addr=' clauses to receive from any interface
dnl # If you want to support IPv6, switch the commented/uncommentd lines
FEATURE(`no_default_msa')dnl
dnl DAEMON_OPTIONS(`Family=inet6, Name=MTA-v6, Port=smtp, Addr=::1')dnl
DAEMON_OPTIONS(`Family=inet, Name=MTA-v4, Port=smtp, Addr=0.0.0.0')dnl
dnl DAEMON_OPTIONS(`Family=inet6, Name=MSP-v6, Port=submission, Addr=::1')dnl
DAEMON_OPTIONS(`Family=inet, Name=MSP-v4, Port=submission, Addr=127.0.0.1')dnl
dnl #
dnl # Be somewhat anal in what we allow
define(`confPRIVACY_FLAGS',dnl
`needmailhelo,needexpnhelo,needvrfyhelo,restrictqrun,restrictexpand,nobodyreturn,authwarnings')dnl
dnl #
dnl # Define connection throttling and window length
define(`confCONNECTION_RATE_THROTTLE', `15')dnl
define(`confCONNECTION_RATE_WINDOW_SIZE',`10m')dnl
dnl #
dnl # Features
dnl #
dnl # The access db is the basis for most of sendmail's checking
dnl # FEATURE(`access_db', , `skip')dnl
FEATURE(`access_db',`hash -T<TMPF> -o /etc/mail/access.db')dnl
dnl #
dnl # The greet_pause feature stops some automail bots - but check the
dnl # provided access db for details on excluding localhosts...
FEATURE(`greet_pause', `1000')dnl 1 seconds
dnl #
dnl # Delay_checks allows sender<->recipient checking
FEATURE(`delay_checks', `friend', `n')dnl
dnl #
dnl # If we get too many bad recipients, slow things down...
define(`confBAD_RCPT_THROTTLE',`3')dnl
dnl #
dnl # Stop connections that overflow our concurrent and time connection rates
FEATURE(`conncontrol', `nodelay', `terminate')dnl
FEATURE(`ratecontrol', `nodelay', `terminate')dnl
dnl #
dnl # If you're on a dialup link, you should enable this - so sendmail
dnl # will not bring up the link (it will queue mail for later)
dnl define(`confCON_EXPENSIVE',`True')dnl
dnl #
dnl # Default Mailer setup
LOCAL_CONFIG
define(`SMART_HOST', mail.fisica.uh.cu)dnl
define(`confDEF_USER_ID',``1:1'')dnl
dnl # define(`confRUN_AS_USER',`smmta:smmsp')dnl
define(`confTRUSTED_USER', `smmta')dnl
define(`confTO_CONNECT', `1m')dnl
define(`confTRY_NULL_MX_LIST',true)dnl
define(`confDONT_PROBE_INTERFACES',true)dnl
define(`PROCMAIL_MAILER_PATH',`/usr/bin/procmail')dnl
define(`ALIAS_FILE', `/etc/mail/aliases')dnl
define(`STATUS_FILE', `/etc/mail/statistics')dnl
dnl # define(`confUSERDB_SPEC', `/etc/mail/userdb.db')dnl
define(`confAUTH_OPTIONS', `A p y')dnl
define(`confTO_IDENT', `0')dnl
MASQUERADE_AS(`fises.fisica.uh.cu')dnl
FEATURE(`masquerade_envelope')dnl
FEATURE(`allmasquerade')dnl
FEATURE(`always_add_domain')dnl
LOCAL_CONFIG
Cwfises.fisica.uh.cu
FEATURE(`authinfo',`hash -o /etc/mail/authinfo.db')dnl
dnl # FEATURE(`use_cw_file')dnl
dnl # FEATURE(`use_ct_file')dnl
dnl # FEATURE(`redirect')dnl
FEATURE(`nouucp', `reject')dnl
FEATURE(`bestmx_is_local')dnl
FEATURE(`mailertable',`hash -o /etc/mail/mailertable.db')dnl
FEATURE(`local_procmail',`',`procmail -t -Y -a $h -d $u')dnl
define(`confREJECT_MSG', `550 Access denied')dnl
define(`confCR_FILE', `-o /etc/mail/relay-domains')dnl <<- $=R
FEATURE(relay_hosts_only)dnl
dnl # FEATURE(relay_entire_domain)dnl <<- relays any host in the $=m class
FEATURE(relay_based_on_MX)dnl <<- relaying for boxes MX'd to you
FEATURE(blacklist_recipients)dnl
dnl # TRUST_AUTH_MECH(`DIGEST-MD5 CRAM-MD5 LOGIN PLAIN')dnl
dnl # define(`confAUTH_MECHANISMS', `DIGEST-MD5 CRAM-MD5 LOGIN PLAIN')dnl
EXPOSED_USER(`root')dnl
FEATURE(`smrsh')dnl
dnl #
dnl # Dialup/LAN connection overrides
dnl #
include(`/etc/mail/m4/dialup.m4')dnl
include(`/etc/mail/m4/provider.m4')dnl
dnl #
MAILER_DEFINITIONS
MAILER(`local')dnl
MAILER(`smtp')dnl
MAILER(`procmail')dnl
LOCAL_CONFIG
## Custom configurations below (will be preserved)
__________________
my sasl.m4 file:
__________________
divert(-1)dnl
####################################################################
##### This file is automagically generated -- edit at your own risk
#####
##### Copyright (c) 2002-2005 Richard Nelson. All Rights Reserved.
#####
##### file: /etc/mail/sasl/sasl.m4
##### AUTH Configuration for Debian Sendmail
##### generated via: (/usr/bin/perl 588)
##### /usr/share/sendmail/update_authm4
##### version: 8.13.6 2006-03-23 19:07:27 cowboy
##### by:
fises@fises.fisica.uh.cu
##### on: Sat Apr 8 18:46:10 2006
##### in: /etc/mail
##### input files: /etc/mail/databases
#####
##### Usage:
##### 1) To get *ANY* AUTH support for sendmail you
##### A) *MUST* Add this line to /etc/mail/sendmail.mc
##### `include(`/etc/mail/sasl/sasl.m4')dnl'
##### B) *MAY* Add the same line to /etc/mail/submit.mc
##### to get MSP<->MTA authentication/encryption
##### 2) You may modify the marked portions of this file.
##### If you need finer control of AUTH options, use the access
##### database.
#####
####################################################################
divert(0)dnl
VERSIONID(`$Id: sasl.m4,v 8.13.6-1 2006-03-23 19:07:27 cowboy Exp $')
dnl #
dnl #---------------------------------------------------------------------
dnl # Bring in Autoconf results
dnl #---------------------------------------------------------------------
ifdef(`sm_version', `dnl',
`include(`/usr/share/sendmail/cf/debian/autoconf.m4')dnl')
dnl #
dnl #---------------------------------------------------------------------
dnl # SMTP AUTH (SASL) support (sendmail 8.10.0 +)
dnl # PLAIN/LOGIN needed to support SASL auth via PAM ;(
dnl # if this bothers you, you allow them only in conjunction w/STARTTLS !
dnl #---------------------------------------------------------------------
ifelse(eval(sm_version_math >= 526848), `1', `dnl
ifelse(sm_enable_auth, `yes', `dnl
dnl #
dnl # ...Do not touch anything above this line...
dnl #
dnl # Set a more reasonable timeout on negotiation
dnl #
define(`confTO_AUTH', `2m')dnl # <= EDIT
dnl #
dnl # Define the REALM passed to sasl (8.13.0+)
ifelse(eval(sm_version_math >= 527616), `1', `dnl
define(`confAUTH_REALM', `')dnl # <= EDIT
')dnl
dnl #
dnl # Available Authentication methods
dnl #
define(`confAUTH_MECHANISMS',dnl
`DIGEST-MD5 CRAM-MD5 LOGIN PLAIN')dnl # <= EDIT
dnl #
dnl # These, we will trust for relaying
dnl #
TRUST_AUTH_MECH(`DIGEST-MD5 CRAM-MD5 LOGIN PLAIN')dnl # <= EDIT
dnl #
dnl # ...Do not touch anything below this line...
dnl #
dnl #
dnl # for 8.12.0+, add EXTERNAL as an available & trusted mech (w/STARTTLS)
dnl # and allow sharing of /etc/sasldb(2) file, allow group read/write
dnl #
ifelse(eval(sm_version_math >= 527360), `1', `dnl
define(`confAUTH_MECHANISMS',dnl
`EXTERNAL 'defn(`confAUTH_MECHANISMS'))dnl
TRUST_AUTH_MECH(`EXTERNAL')
dnl #
dnl # To support some SASL use, we need the DB to be group readable
dnl #
define(`confDONT_BLAME_SENDMAIL',dnl
defn(`confDONT_BLAME_SENDMAIL')`,GroupReadableSASLDBFile,GroupWritableSASLDBFile')dnl
')dnl
dnl #
dnl # To support SMTP AUTH in `sendmail -bs' :
dnl # Sigh: SASLV1 MSP AUTH does not work in -bs mode (/etc/sasldb !o+r)
dnl # so, we have the MSP not use Auth (or ETRN)
dnl # SASLV2 (w/saslauth) chose to prohibit user authentication - it can
dnl # be made to work by:
dnl # 1) changing /etc/sasldb2 {root,sasl,smmta}:smmsp 0660
dnl # 2) dpkg-statoverride --remove /var/run/saslauthd
dnl # 3) dpkg-statoverride --add root sasl 711 /var/run/saslauthd
dnl #
ifelse(eval(sm_auth_lib < 2), `1', `dnl
ifdef(`DEBIAN_MSP', `dnl
ifelse(defn(`_DPO_'), `', `dnl
DAEMON_OPTIONS(`Name=NoMTA, Addr=0.0.0.0, M=EA')dnl
')')')dnl
dnl #
')')dnl
____________________
my starttls.m4 file:
____________________
divert(-1)dnl
####################################################################
##### This file is automagically generated -- edit at your own risk
#####
##### Copyright (c) 2002-2005 Richard Nelson. All Rights Reserved.
#####
##### file: /etc/mail/tls/starttls.m4
##### STARTTLS Configuration for Debian Sendmail
##### generated via: (/usr/bin/perl 588)
##### /usr/share/sendmail/update_tlsm4
##### version: 8.13.6 2006-03-23 19:07:27 cowboy
##### by:
fises@fises.fisica.uh.cu
##### on: Sat Apr 8 18:46:10 2006
##### in: /etc/mail
##### input files: /etc/mail/databases
#####
##### Usage:
##### 1) To get *ANY* STARTTLS support for sendmail you
##### A) *MUST* Add this line to /etc/mail/sendmail.mc
##### `include(`/etc/mail/tls/starttls.m4')dnl'
##### B) *MAY* Add the same line to /etc/mail/submit.mc
##### to get MSP<->MTA authentication/encryption
##### 2) You may modify the marked portions of this file, those
##### deal with the cert/key filenames and TLS options.
##### If you need finer control of TLS options, use the access
##### database.
#####
####################################################################
divert(0)dnl
VERSIONID(`$Id: starttls.m4,v 8.13.6-1 2006-03-23 19:07:27 cowboy Exp $')
dnl #
dnl #---------------------------------------------------------------------
dnl # Bring in Autoconf results
dnl #---------------------------------------------------------------------
ifdef(`sm_version', `dnl',
`include(`/usr/share/sendmail/cf/debian/autoconf.m4')dnl')
dnl #
dnl # Check to see if inclusion is valid (version >= 8.11.0, tls enabled)
ifelse(eval(sm_version_math >= 527104), `1', `dnl
ifelse(sm_enable_tls, `yes', `dnl
dnl #
dnl # To support shared keyfiles, we need them to be group readable
dnl #
define(`confDONT_BLAME_SENDMAIL',dnl
defn(`confDONT_BLAME_SENDMAIL')`,GroupReadableKeyFile')dnl
dnl #
dnl # ...Do not touch anything above this line...
dnl #
dnl # Set a more reasonable timeout on negotiation
dnl #
define(`confTO_STARTTLS', `2m')dnl # <= EDIT
dnl #
dnl # CA directory - CA certs should be herein
define(`confCACERT_PATH', `/etc/mail/certs')dnl # <= EDIT
dnl #
dnl # CA file (may be the same as client/server certificate)
define(`confCACERT', `/etc/mail/certs/cacert.pem')dnl # <= EDIT
dnl #
dnl # Certificate Revocation List
define(`confCRL', `')dnl # <= EDIT
dnl # CRL not found... do not issue warnings on it!
undefine(`confCRL')dnl
dnl #
dnl # Server certificate/key (can be in the same file, and shared w/client)
dnl # NOTE: The key must *NOT* be encrypted !!!
define(`confSERVER_CERT', `/etc/mail/certs/sendmail.pem')dnl # <= EDIT
define(`confSERVER_KEY', `/etc/mail/certs/sendmail.pem')dnl # <= EDIT
dnl #
dnl # Client certificate/key (can be in the same file, and shared w/server)
dnl # NOTE: The key must *NOT* be encrypted !!!
define(`confCLIENT_CERT', `/etc/mail/certs/sendmail.pem')dnl # <= EDIT
define(`confCLIENT_KEY', `/etc/mail/certs/sendmail.pem')dnl # <= EDIT
dnl #
dnl # Optional settings
define(`confTLS_SRV_OPTIONS', `V')dnl # <= EDIT
dnl #
')')dnl
_________________
my authinfo file:
_________________
AuthInfo:fises.fisica.uh.cu "U:julioarr@fisica.uh.cu" "P:$1$Q5FB3CaZ$EyCC2LhWv.2mC6SJ.aWRG1" "M

IGEST-MD5"
AuthInfo: "U:julioarr@fisica.uh.cu" "P:$1$Q5FB3CaZ$EyCC2LhWv.2mC6SJ.aWRG1" "M

IGEST-MD5"
______________________
my Sendmail.conf file:
______________________
#Currently configurable parameters:
#- srvtab (for KERBEROS_V4): [/etc/srvtab] path
# where to find the srvtab
#
#- pwcheck_method: [PAM] one of {PAM, kerberos_v4, passwd, shadow, sasldb}
# how to check plaintext passwords.
#
#- auto_transition: [false]
# if true, automatically add secrets to the secret database when
# PLAIN or check_password is used, so in the future the user can
# use the more secure mechanisms.
#
#*** For a more detailed guide on configuring SASL, please look at
#doc/sysadmin.html.
#
# auto_transition: true
pwcheck_method: saslauthd
# pwcheck_method: auxprop saslauthd
# auxprop_plugin: sasldb
# allowanonymouslogin: 0
# allowplaintext: 1
mech_list: EXTERNAL DIGEST-MD5 CRAM-MD5 LOGIN PLAIN
___________________
my saslauthd file:
___________________
# This needs to be uncommented before saslauthd will be run automatically
START=yes
# You must specify the authentication mechanisms you wish to use.
# This defaults to "pam" for PAM support, but may also include
# "shadow" or "sasldb", like this:
# MECHANISMS="pam shadow"
MECHANISMS="shadow sasldb pam"