Re: Sendmail auth mechanisms missing after upgrade to Fedora 37
On Fri, 18 Nov 2022 08:58:02 +0100 (CET)
Scott van Looy via users <users(a)lists.fedoraproject.org> wrote:
Hi,
Having upgraded to the new Fedora 37, I cannot now send mail via
sendmail remotely using auth.
Looking at /var/log/maillog, when I try and connect to send an email
I get:
"AUTH warning: no mechanisms”
Looking at the application log I can see:
250-<serverdomain> Hello <localdomain>, pleased to meet you
250-ENHANCEDSTATUSCODES
250-PIPELINING
250-8BITMIME
250-SIZE
250-DSN
250-DELIVERBY
250 HELP
So it does indeed look like there are no auth mechanisms present
I haven’t changed my config, it was working before the upgrade and
the only thing I’ve been able to find online that vaguely looks like
it might be the same issue is this:
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=263287
sendmail.mc has:
define(`confAUTH_OPTIONS', `A p y’)dnl
TRUST_AUTH_MECH(`LOGIN PLAIN')dnl
define(`confAUTH_MECHANISMS', `LOGIN PLAIN’)dnl
Which all looks correct to me. I’m at a bit of a loss. Does anyone
have any suggestions as to what might be the issue/what I might be
able to do?
I recall that some of the system allowed security algorithms were
removed as defaults. You could try
update-crypto-policies --set LEGACY
to see if that helps. If it doesn't, you can use
update-crypto-policies --set DEFAULT
to return to the more secure policies.
More information here, about how to selectively enable only the legacy
policies you need, if that is the issue
https://www.redhat.com/en/blog/legacy-cryptography-fedora-36-and-red-hat-...