




已閱讀5頁,還剩11頁未讀, 繼續(xù)免費閱讀
版權(quán)說明:本文檔由用戶提供并上傳,收益歸屬內(nèi)容提供方,若內(nèi)容存在侵權(quán),請進行舉報或認領(lǐng)
文檔簡介
外文文獻原文SMTPServiceExtensionforAuthenticationThisdocumentspecifiesanInternetstandardstrackprotocolfortheInternetcommunity,andrequestsdiscussionandsuggestionsforimprovements.PleaserefertothecurrenteditionoftheInternetOfficialProtocolStandards(STD1)forthestandardizationstateandstatusofthisprotocol.Distributionofthismemoisunlimited.CopyrightNoticeCopyright(C)TheInternetSociety(1999).AllRightsReserved.1.IntroductionThisdocumentdefinesanSMTPserviceextensionESMTPwherebyanSMTPclientmayindicateanauthenticationmechanismtotheserver,performanauthenticationprotocolexchange,andoptionallynegotiateasecuritylayerforsubsequentprotocolinteractions.ThisextensionisaprofileoftheSimpleAuthenticationandSecurityLayerSASL.2.ConventionsUsedinthisDocumentInexamples,C:andS:indicatelinessentbytheclientandserverrespectively.ThekeywordsMUST,MUSTNOT,SHOULD,SHOULDNOT,andMAYinthisdocumentaretobeinterpretedasdefinedinKeywordsforuseinRFCstoIndicateRequirementLevelsKEYWORDS.3.TheAuthenticationserviceextension(1)thenameoftheSMTPserviceextensionisAuthentication(2)theEHLOkeywordvalueassociatedwiththisextensionisAUTH(3)TheAUTHEHLOkeywordcontainsasaparameteraspaceseparatedlistofthenamesofsupportedSASLmechanisms.(4)anewSMTPverbAUTHisdefined(5)anoptionalparameterusingthekeywordAUTHisaddedtotheMAILFROMcommand,andextendsthemaximumlinelengthoftheMAILFROMcommandby500characters.(6)thisextensionisappropriateforthesubmissionprotocolSUBMIT.4.TheAUTHcommandAUTHmechanisminitial-responseArguments:astringidentifyingaSASLauthenticationmechanism.anoptionalbase64-encodedresponseRestrictions:AfteranAUTHcommandhassuccessfullycompleted,nomoreAUTHcommandsmaybeissuedinthesamesession.AfterasuccessfulAUTHcommandcompletes,aserverMUSTrejectanyfurtherAUTHcommandswitha503reply.TheAUTHcommandisnotpermittedduringamailtransaction.Discussion:TheAUTHcommandindicatesanauthenticationmechanismtotheserver.Iftheserversupportstherequestedauthenticationmechanism,itperformsanauthenticationprotocolexchangetoauthenticateandidentifytheuser.Optionally,italsonegotiatesasecuritylayerforsubsequentprotocolinteractions.Iftherequestedauthenticationmechanismisnotsupported,theserverrejectstheAUTHcommandwitha504reply.Theauthenticationprotocolexchangeconsistsofaseriesofserverchallengesandclientanswersthatarespecifictotheauthenticationmechanism.Aserverchallenge,otherwiseknownasareadyresponse,isa334replywiththetextpartcontainingaBASE64encodedstring.TheclientanswerconsistsofalinecontainingaBASE64encodedstring.Iftheclientwishestocancelanauthenticationexchange,itissuesalinewithasingle*.Iftheserverreceivessuchananswer,itMUSTrejecttheAUTHcommandbysendinga501reply.Theoptionalinitial-responseargumenttotheAUTHcommandisusedtosavearoundtripwhenusingauthenticationmechanismsthataredefinedtosendnodataintheinitialchallenge.Whentheinitial-responseargumentisusedwithsuchamechanism,theinitialemptychallengeisnotsenttotheclientandtheserverusesthedataintheinitial-responseargumentasifitweresentinresponsetotheemptychallenge.Unlikeazero-lengthclientanswertoa334reply,azero-lengthinitialresponseissentasasingleequalssign(=).Iftheclientusesaninitial-responseargumenttotheAUTHcommandwithamechanismthatsendsdataintheinitialchallenge,theserverrejectstheAUTHcommandwitha535reply.IftheservercannotBASE64decodetheargument,itrejectstheAUTHcommandwitha501reply.Iftheserverrejectstheauthenticationdata,itSHOULDrejecttheAUTHcommandwitha535replyunlessamorespecificerrorcode,suchasonelistedinsection6,isappropriate.Shouldtheclientsuccessfullycompletetheauthenticationexchange,theSMTPserverissuesa235reply.TheservicenamespecifiedbythisprotocolsprofileofSASLissmtp.IfasecuritylayerisnegotiatedthroughtheSASLauthenticationexchange,ittakeseffectimmediatelyfollowingtheCRLFthatconcludestheauthenticationexchangefortheclient,andtheCRLFofthesuccessreplyfortheserver.Uponasecuritylayerstakingeffect,theSMTPprotocolisresettotheinitialstate(thestateinSMTPafteraserverissuesa220servicereadygreeting).TheserverMUSTdiscardanyknowledgeobtainedfromtheclient,suchastheargumenttotheEHLOcommand,whichwasnotobtainedfromtheSASLnegotiationitself.TheclientMUSTdiscardanyknowledgeobtainedfromtheserver,suchasthelistofSMTPserviceextensions,whichwasnotobtainedfromtheSASLnegotiationitself(withtheexceptionthataclientMAYcomparethelistofadvertisedSASLmechanismsbeforeandafterauthenticationinordertodetectanactivedown-negotiationattack).TheclientSHOULDsendanEHLOcommandasthefirstcommandafterasuccessfulSASLnegotiationwhichresultsintheenablingofasecuritylayer.Theserverisnotrequiredtosupportanyparticularauthenticationmechanism,norareauthenticationmechanismsrequiredtosupportanysecuritylayers.IfanAUTHcommandfails,theclientmaytryanotherauthenticationmechanismbyissuinganotherAUTHcommand.IfanAUTHcommandfails,theserverMUSTbehavethesameasiftheclienthadnotissuedtheAUTHcommand.TheBASE64stringmayingeneralbearbitrarilylong.ClientsandserversMUSTbeabletosupportchallengesandresponsesthatareaslongasaregeneratedbytheauthenticationmechanismstheysupport,independentofanylinelengthlimitationstheclientorservermayhaveinotherpartsofitsprotocolimplementation.Examples:S:220ESMTPserverreadyC:EHLOS:250-S:250AUTHCRAM-MD5DIGEST-MD5C:AUTHFOOBARS:504Unrecognizedauthenticationtype.C:AUTHCRAM-MD5S:334PENCeUxFREJoU0NnbmhNWitOMjNGNndAZWx3b29kLmlubm9zb2Z0LmNvbT4=C:ZnJlZCA5ZTk1YWVlMDljNDBhZjJiODRhMGMyYjNiYmFlNzg2ZQ=S:235Authenticationsuccessful.5.TheAUTHparametertotheMAILFROMcommandAUTH=addr-specArguments:Anaddr-speccontainingtheidentitywhichsubmittedthe
溫馨提示
- 1. 本站所有資源如無特殊說明,都需要本地電腦安裝OFFICE2007和PDF閱讀器。圖紙軟件為CAD,CAXA,PROE,UG,SolidWorks等.壓縮文件請下載最新的WinRAR軟件解壓。
- 2. 本站的文檔不包含任何第三方提供的附件圖紙等,如果需要附件,請聯(lián)系上傳者。文件的所有權(quán)益歸上傳用戶所有。
- 3. 本站RAR壓縮包中若帶圖紙,網(wǎng)頁內(nèi)容里面會有圖紙預覽,若沒有圖紙預覽就沒有圖紙。
- 4. 未經(jīng)權(quán)益所有人同意不得將文件中的內(nèi)容挪作商業(yè)或盈利用途。
- 5. 人人文庫網(wǎng)僅提供信息存儲空間,僅對用戶上傳內(nèi)容的表現(xiàn)方式做保護處理,對用戶上傳分享的文檔內(nèi)容本身不做任何修改或編輯,并不能對任何下載內(nèi)容負責。
- 6. 下載文件中如有侵權(quán)或不適當內(nèi)容,請與我們聯(lián)系,我們立即糾正。
- 7. 本站不保證下載資源的準確性、安全性和完整性, 同時也不承擔用戶因使用這些下載資源對自己和他人造成任何形式的傷害或損失。
最新文檔
- 股東公司投資退出補充協(xié)議范本
- 文化產(chǎn)業(yè)股權(quán)質(zhì)押擔保協(xié)議書
- 高端家庭保姆服務合同模板
- 股權(quán)贈與協(xié)議書-跨境投資股權(quán)贈與與稅務籌劃合同
- 祠堂公園改造方案
- 專題11 反比例函數(shù)-中考一輪復習收官測試卷(含答案)
- 林地承包分期方案
- 外出防水補漏方案
- 活動費用預算方案模板
- 水利細部結(jié)構(gòu)結(jié)算方案
- 地鐵安檢培訓課件
- 摸魚活動策劃方案
- 化療所致血小板減少癥CIT
- 湖北省八校聯(lián)考2024-2025學年高一下學期6月期末物理試卷(含答案)
- 管理學基礎期末考試試題及答案
- 2025至2030中國覆銅板行業(yè)項目調(diào)研及市場前景預測評估報告
- 北京市海淀區(qū)第二十中學2025屆英語七下期末教學質(zhì)量檢測試題含答案
- 全國二卷2025年高考數(shù)學真題含解析
- 護理靜脈留置針課件
- 2025年事業(yè)單位醫(yī)療衛(wèi)生類招聘考試《綜合應用能力(E類)醫(yī)學技術(shù)》試卷真題及詳細解析
- 護理急診急救培訓課件
評論
0/150
提交評論