[php-maint] Bug#336548: php4-pear SMTP authentication failure

[Nick Hoffman]

Package: php4-pear
Version: 4.3.10-16

uname -a: Linux tortoise 2.6.8+vserver #1 SMP Sun Sep 4 17:37:41 EST 2005 
i686 GNU/Linux
libc6 Version: 2.3.2.ds1-22

Installed PHP package versions:
php-auth       1.2.3-2
php-date       1.4.3-1
php-file       1.0.3-1
php4           4.3.10-16
php4-cli       4.3.10-16
php4-common    4.3.10-16
php4-domxml    4.3.10-16
php4-imap      4.3.10-16
php4-mysql     4.3.10-16
php4-pear      4.3.10-16
php4-pear-log  1.6.0-1.1


php4-pear fails to send an email via SMTP when using either of the 
following SMTP authentication methods:
	CRAM-MD5
	DIGEST-MD5
SMTP authentication via PLAIN and LOGIN work.

When using CRAM-MD5 or DIGEST-MD5, after php4-pear sends "EHLO 
MAIL.SERVER.COM" to the SMTP server and receives the appropriate 
responses, php4-pear does not send an "AUTH DIGEST-MD5" or "AUTH CRAM-MD5" 
message.

Two methods were used to determine this:

1) A tcpdump of three sessions were examined: the first using LOGIN (which 
succeeds), and the second and third using CRAM-MD5 and DIGEST-MD5 (which 
fail due to no "AUTH *-MD5" message being sent).

2) $_debug was set to "true" in /usr/share/php/Net/SMTP.php, and the 
following output was generated when trying to connect to an SMTP server 
using CRAM-MD5 for the SMTP authentication method. Note that php4-pear did 
not send any messages back to the server after receiving the extended 
information:

DEBUG: Recv: 220 mail.server.com ESMTP Postfix (Debian/GNU)
DEBUG: Send: EHLO server.com
DEBUG: Recv: 250-mail.server.com
DEBUG: Recv: 250-PIPELINING
DEBUG: Recv: 250-SIZE 10240000
DEBUG: Recv: 250-VRFY
DEBUG: Recv: 250-ETRN
DEBUG: Recv: 250-STARTTLS
DEBUG: Recv: 250-AUTH LOGIN PLAIN DIGEST-MD5 CRAM-MD5
DEBUG: Recv: 250-AUTH=LOGIN PLAIN DIGEST-MD5 CRAM-MD5
DEBUG: Recv: 250 8BITMIME


Cheers,
Nick Hoffman
nick.hoffman at altcall.com