Jump to content

SMTP NTLM AUTH problems (fairly techy)


Recommended Posts

Guest Marzbar
Posted (edited)

OK, so I want to be able to send email through a work server since when I connect to the work LAN all other SMTP traffic is blocked. However to send email from outside the network I need to authenticate and the AUTH must be NTLM.

This never worked on my sp5 but I wasn't that bothered - I only really used it to read email anyway - but now I have my vario I'd like to be able to send too. Unfortunately it still doesn't work so I thought I'd do a bit of investigation... I set up my own sendmail server with NTLM auth, which works fine with Outlook and Thunderbird, then pointed my phone at it. It still fails, so I did a tcpdump and I find that the phone's auth mechanism appears to be broken.

What happens in an ESMTP session with thunderbird is basically

> EHLO hostname

< 250-tosh Hello hostname [MyHostIP], pleased to meet you

[ then the list of supported codes ]

> AUTH NTLM [long string]

< 334 [another long string]

> [even longer string!]

< 235 2.0.0 OK Authenticated

> MAIL FROM [email protected]

You get the picture - from then on it's a standard SMTP session.

Now what happens in the ESMTP session with the phone is:

> EHLO Inbox

< 250-tosh Hello [MyPhonesIP], pleased to meet you

[ then the list of supported codes ]

> AUTH NTLM [long string]

< 334 [another long string]

> MAIL FROM [email protected]

< 501 5.5.4 cannot decode AUTH parameter MAIL FROM:

It's fairly obvious what's wrong here - we're missing the final auth response to the server's challenge (the "[even longer string!]" bit). Is there something I'm missing here, am I being stupid?

Has anyone else managed to get NTLM working on a WM5 device, if so what did you do?

Thanks!

Geoff

[edited for clarity]

Edited by Marzbar
Guest Marzbar
Posted
Has anyone else managed to get NTLM working on a WM5 device, if so what did you do?

I guess that's a no :rolleyes:

Guest Marzbar
Posted
I guess that's a no :rolleyes:

I've sent a report to t-mobile's technical team, since I'm pretty sure MS wouldn't speak to me directly. They were remarkably helpful, for what it's worth. Will keep you posted.

Geoff

Please sign in to comment

You will be able to leave a comment after signing in



Sign In Now
×
×
  • Create New...

Important Information

By using this site, you agree to our Terms of Use.