Smtp Service Extension For Authentication (Smtp Auth) - Extended Feature - Panasonic DP-3510 Service Manual

9.16. SMTP Service Extension for Authentication (SMTP Auth)
- Extended Feature
SMTP is widely deployed and high-quality implementations have proven to be very robust. However, the
Internet community now considers some services to be important that SMTP AUTH is an SMTP service
extension (ESMTP) whereby an SMTP client may indicate an authentication mechanism to the server,
perform an authentication protocol exchange, and optionally negotiate a security layer for subsequent
protocol interactions. This extension is a profile of the Simple Authentication and Security Layer (SASL). To
use SASL, a protocol includes a command for identifying and authenticating a user to a server and for
optionally negotiating protection of subsequent protocol interactions.
The AUTH command indicates an authentication mechanism to the server. If the server supports the
requested authentication mechanism, it performs an authentication protocol exchange to authenticate and
identify the user. Optionally, it also negotiates a security layer for subsequent protocol interactions. If the
requested authentication mechanism is not supported, the server rejects the AUTH command with a 504
reply.
The authentication protocol exchange consists of a series of server challenges and client answers that are
specific to the authentication mechanism. A server challenge, otherwise known as a ready response, is a
334 reply with the text part containing a BASE64 encoded string. The client answer consists of a line
Ver. 5.2
Client
Establish TCP connection (TCP port No. 25)
220 smtp.example.com ESMTP server ready
EHLO jgm.example.com
250-smtp.example.com
250 AUTH LOGIN DIGEST-MD5 CRAM-MD5
AUTH CRAM-MD5
334
PENCeUxFREJoU0NnbmhNWitOMjNGNndA
ZWx3b29kLmlubm9zb2Z0LmNvbT4=
ZnJlZCA5ZTk1YWVlMDljNDBhZjJiODRhMGMyYjNiYmFlNzg2ZQ==
235 Authentication successful
Continue to follow the SMTP procedure
SMTP AUTH overview
Challenge Response
334 PENCeUxFREJoU0NnbmhNWitOMjNGNndAZWx3b29kLmlubm9zb2Z0LmNvbT4=
Produces a Challenge
<CByLEDBhSCgnhMZ+N23F6w@elwood.innosoft>
Genrates Digest parameter
Challenge + PASSWD with HMAC (keyed-Hashing for Message
USER
Authentication Code) roduces a 16 octet digest value of:
Fred 9e95aee09c40af2b84a0c2b3bbae786e
BASE64 encoded string
ZnJlZCA5ZTk1YWVlMDljNDBhZjJiODRhMGMyYjNiYmFlNzg2ZQ==
DP-3510/3520/3530/4510/4520/4530/6010/6020/6030
BASE64 decoded string
470
Server
JAN 2006