Subject: bug#44553: closed (Re: bug#44553: Exim has no authenticators)

From: [email-masked] (GNU bug Tracking System)
Date: Thu, 10 Dec 2020 14:40:02 +0000

Your bug report

#44553: Exim has no authenticators

which was filed against the guix package, has been closed.

The explanation is attached below, along with your original report.
If you require more details, please reply to [email-masked].

-- 
44553: http://debbugs.gnu.org/cgi/bugreport.cgi?bug=44553
GNU Bug Tracking System
Contact [email-masked] with problems

Subject: Re: bug#44553: Exim has no authenticators
From: Arun Isaac <[email-masked]>
To: divoplade <[email-masked]>, [email-masked]
Date: Thu, 10 Dec 2020 20:09:21 +0530
List-Id: <debbugs-submit.debbugs.gnu.org>

Hi,

Thanks for your patch. I pushed to master with the following minor
changes.

- added copyright header for you
- made minor style change in code
- modified the commit message

Cheers!

Subject: Exim has no authenticators
From: divoplade <[email-masked]>
To: [email-masked]
Date: Tue, 10 Nov 2020 14:45:37 +0100
List-Id: <debbugs-submit.debbugs.gnu.org>

Dear guix,

Exim has no authenticator drivers. By default, they don't get included
in the binary, but in my case, I want to set up an internet site with
authenticated SMTP 
https://www.exim.org/exim-html-current/doc/html/spec_html/ch-smtp_authentication.htm
. Authentication is necessary, otherwise the system is vulnerable to
spam abuse.

The fix would be to un-comment the following lines in the src/EDITME
(copied as Local/Makefile):

# AUTH_CRAM_MD5=yes
# AUTH_CYRUS_SASL=yes
# AUTH_DOVECOT=yes
# AUTH_EXTERNAL=yes
# AUTH_GSASL=yes
# AUTH_HEIMDAL_GSSAPI=yes
# AUTH_PLAINTEXT=yes
# AUTH_SPA=yes
# AUTH_TLS=yes

Unfortunately, CYRUS_SASL requires cyrus-sasl as a native input and
GSASL, gsasl. HEIMDAL_GSSAPI does not seem to build.

However, it is vital to have plaintext (it is the only one used in the
default exim configuration, 
https://www.exim.org/exim-html-current/doc/html/spec_html/ch-the_default_configuration_file.html
) and it would be nice to have the other as authenticators. What do you
think?

Best regards,

divoplade 
From 5f1e0ea844a26a6e024443f3898969b8ab1048bb Mon Sep 17 00:00:00 2001
From: divoplade <[email-masked]>
Date: Tue, 10 Nov 2020 14:21:17 +0100
Subject: [PATCH] gnu: exim: enable some authenticators

---
 gnu/packages/mail.scm | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/gnu/packages/mail.scm b/gnu/packages/mail.scm
index 488e714976..4eda49e72d 100644
--- a/gnu/packages/mail.scm
+++ b/gnu/packages/mail.scm
@@ -1503,7 +1503,13 @@ delivery.")
                  (("(ZCAT_COMMAND=).*" all var)
                   (string-append var gzip "/bin/zcat\n"))
                  (("# (USE_GNUTLS(|_PC)=.*)" all line)
-                  (string-append line "\n")))
+                  (string-append line "\n"))
+                 (("# AUTH_CRAM_MD5=yes") "AUTH_CRAM_MD5=yes\n")
+                 (("# AUTH_DOVECOT=yes") "AUTH_DOVECOT=yes\n")
+                 (("# AUTH_EXTERNAL=yes") "AUTH_EXTERNAL=yes\n")
+                 (("# AUTH_PLAINTEXT=yes") "AUTH_PLAINTEXT=yes\n")
+                 (("# AUTH_SPA=yes") "AUTH_SPA=yes\n")
+                 (("# AUTH_TLS=yes") "AUTH_TLS=yes\n"))
                ;; This file has hard-coded relative file names for tools despite
                ;; the zcat configuration above.
                (substitute* '("src/exigrep.src")
-- 
2.29.2