本地主机上带有 hMailServer 的 PHP sendmail：535 身份验证失败

Posted 2023-02-25

【中文标题】本地主机上带有 hMailServer 的 PHP sendmail：535 身份验证失败

【英文标题】：PHP sendmail with hMailServer on localhost : 535 Authentication failed

【发布时间】：2015-10-15 03:23:16

【问题描述】：

我在 xampp 上运行 Apache，我想使用 sendmail.exe 通过 php 发送电子邮件。

我尝试使用 Mercury/32 设置电子邮件服务器，我让它工作了一段时间，但现在 Mercury 的 SMTP 无法启动（端口 25 和 110 不会在 xampp 控制面板中启动），我可以不要再使用它了。

之后我切换到 hMailServer。 SMTP、POP3 和 IMAP4 处于活动状态且配置正确。此外，Autoban 功能被禁用，互联网从 IP 范围中删除，因此发送和接收邮件可以与 Thunderbird 完美配合。

但是当我尝试使用 PHP 脚本发送电子邮件时，我总是会收到这样的信息：

"TCPIP" 10228   "2015-07-24 12:53:44.262"   "TCP - 127.0.0.1 connected to 127.0.0.1:25."
"DEBUG" 10228   "2015-07-24 12:53:44.262"   "TCP connection started for session 158"
"SMTPD" 10228   158 "2015-07-24 12:53:44.262"   "127.0.0.1" "SENT: 220 localhost ESMTP"
"SMTPD" 10780   158 "2015-07-24 12:53:44.627"   "127.0.0.1" "RECEIVED: EHLO localhost"
"SMTPD" 10780   158 "2015-07-24 12:53:44.627"   "127.0.0.1" "SENT: 250-localhost[nl]250-SIZE 20480000[nl]250-AUTH LOGIN[nl]250 HELP"
"SMTPD" 10228   158 "2015-07-24 12:53:44.627"   "127.0.0.1" "RECEIVED: AUTH LOGIN"
"SMTPD" 10228   158 "2015-07-24 12:53:44.627"   "127.0.0.1" "SENT: 334 VXNlcm5hbWU6"
"SMTPD" 11188   158 "2015-07-24 12:53:44.627"   "127.0.0.1" "RECEIVED: YWRtaW4="
"SMTPD" 11188   158 "2015-07-24 12:53:44.627"   "127.0.0.1" "SENT: 334 UGFzc3dvcmQ6"
"SMTPD" 11188   158 "2015-07-24 12:53:44.627"   "127.0.0.1" "RECEIVED: ***"
"SMTPD" 11188   158 "2015-07-24 12:53:44.632"   "127.0.0.1" "SENT: 535 Authentication failed. Restarting authentication process."
"DEBUG" 10780   "2015-07-24 12:53:44.632"   "The read operation failed. Bytes transferred: 0 Remote IP: 127.0.0.1, Session: 158, Code: 2, Message: End of file"
"DEBUG" 10780   "2015-07-24 12:53:44.632"   "Ending session 158"

这是我的php.inimail_function 部分：

[mail function]
; XAMPP: Comment out this if you want to work with an SMTP Server like Mercury
SMTP = localhost
smtp_port = 25

; For Win32 only.
; http://php.net/sendmail-from
sendmail_from = [e-mail]

; XAMPP IMPORTANT NOTE (1): If XAMPP is installed in a base directory with spaces (e.g. c:\program filesC:\xampp) fakemail and mailtodisk do not work correctly.
; XAMPP IMPORTANT NOTE (2): In this case please copy the sendmail or mailtodisk folder in your root folder (e.g. C:\sendmail) and use this for sendmail_path.  
; XAMPP: Comment out this if you want to work with fakemail for forwarding to your mailbox (sendmail.exe in the sendmail folder)
sendmail_path = "\"C:\xampp\sendmail\sendmail.exe\" -t"

; XAMPP: Comment out this if you want to work with mailToDisk, It writes all mails in the C:\xampp\mailoutput folder
;sendmail_path="C:\xampp\mailtodisk\mailtodisk.exe"

; Force the addition of the specified parameters to be passed as extra parameters
; to the sendmail binary. These parameters will always replace the value of
; the 5th parameter to mail(), even in safe mode.
;mail.force_extra_parameters =

; Add X-PHP-Originating-Script: that will include uid of the script followed by the filename
mail.add_x_header=Off

; Log all mail() calls including the full path of the script, line #, to address and headers
;mail.log = "C:\xampp\php\logs\php_mail.log"

还有sendmail.ini：

; configuration for fake sendmail

; if this file doesn't exist, sendmail.exe will look for the settings in
; the registry, under HKLM\Software\Sendmail

[sendmail]

; you must change mail.mydomain.com to your smtp server,
; or to IIS's "pickup" directory.  (generally C:\Inetpub\mailroot\Pickup)
; emails delivered via IIS's pickup directory cause sendmail to
; run quicker, but you won't get error messages back to the calling
; application.

smtp_server=127.0.0.1

; smtp port (normally 25)

smtp_port=25

; SMTPS (SSL) support
;   auto = use SSL for port 465, otherwise try to use TLS
;   ssl  = alway use SSL
;   tls  = always use TLS
;   none = never try to use SSL

smtp_ssl=auto

; the default domain for this server will be read from the registry
; this will be appended to email addresses when one isn't provided
; if you want to override the value in the registry, uncomment and modify

default_domain=car-services.dz

; log smtp errors to error.log (defaults to same directory as sendmail.exe)
; uncomment to enable logging

error_logfile=error.log

; create debug log as debug.log (defaults to same directory as sendmail.exe)
; uncomment to enable debugging

debug_logfile=debug.log

; if your smtp server requires authentication, modify the following two lines

auth_username=admin
auth_password=password

; if your smtp server uses pop3 before smtp authentication, modify the 
; following three lines.  do not enable unless it is required.

pop3_server=
pop3_username=
pop3_password=

; force the sender to always be the following email address
; this will only affect the "MAIL FROM" command, it won't modify 
; the "From: " header of the message content

force_sender=[e-mail]

; force the sender to always be the following email address
; this will only affect the "RCTP TO" command, it won't modify 
; the "To: " header of the message content

force_recipient=

; sendmail will use your hostname and your default_domain in the ehlo/helo
; smtp greeting.  you can manually set the ehlo/helo name if required

hostname=

Windows 主机文件：

127.0.0.1   localhost
127.0.0.1   car-services.dz

PHP 脚本：

$headers = "MIME-Version: 1.0\r\n";
$headers .= "Content-Type: text/html; charset=ISO-8859-1\r\n";
$headers .= "From: [e-mail]";
$subject = "Confirmation mail";
$message = 'This is a confirmation mail';
var_dump(mail("[e-mail]", $subject, $message, $headers));

邮件功能总是失败（返回false），这是错误日志：

15/07/24 12:53:44 : Authentication failed. Restarting authentication process.<EOL>

双方（客户端应用程序和服务器）的帐户名和密码相同。

【问题讨论】：

您的 hmailserver 中是否有用户 admin 的密码“password”？

Telnet 到您的 hmailserver 机器并直接使用 smtp 命令查看发生了什么，我认为这是 hmailserver 的配置问题。请尝试在 hmailserver 中再配置一个用户帐户并尝试在 sendmail 中使用该帐户

我已经在 hmailserver 中配置了另一个帐户 [e-mail]，Thunderbird 可以同时访问它们并从一个到另一个发送电子邮件。

在thunderbird 发送邮件和sendmail 相同时捕获tcp，比较行为并找出导致问题的原因。提示：检查 Thunderbird 和 sendmail 使用的身份验证方法

【参考方案1】：

问题出在 sendmail (sendmail.ini) 的设置中。这一行应该是这样的：

auth_username=[e-mail]

我想通了，使用RawCap捕获本地TCP和WireShark查看sendmail.exe和Thunderbird的捕获，然后比较捕获我注意到发送的USER不一样（用户名加密），所以我尝试将域名添加到用户名中，并且成功了！谢谢Akhil Thayyil