外文翻译简单邮件传输协议服务扩展的认证机制.docx
- 文档编号:25274310
- 上传时间:2023-06-06
- 格式:DOCX
- 页数:18
- 大小:27.53KB
外文翻译简单邮件传输协议服务扩展的认证机制.docx
《外文翻译简单邮件传输协议服务扩展的认证机制.docx》由会员分享,可在线阅读,更多相关《外文翻译简单邮件传输协议服务扩展的认证机制.docx(18页珍藏版)》请在冰豆网上搜索。
外文翻译简单邮件传输协议服务扩展的认证机制
毕业设计(文献翻译)
题目:
简单邮件传输协议服务扩展的认证机制
学生姓名:
×××学号:
专业:
计算机科学与技术
院(系):
信息工程学院
完成时间:
2012年5月15日
2012年5月15日
外文文献资料
SMTPServiceExtensionforAuthentication
ThisdocumentspecifiesanInternetstandardstrackprotocolfortheInternetcommunity,andrequestsdiscussionandsuggestionsforimprovements.Pleaserefertothecurrenteditionofthe"InternetOfficialProtocolStandards"(STD1)forthestandardizationstateandstatusofthisprotocol.Distributionofthismemoisunlimited.
Thereareusuallytwooperatingmodes:
SMTPtosendandreceiveSMTP.Specificway:
tosendSMTPmailinthereceiveduserrequesttodeterminewhetherthise-maillocalmail,ifsenttotheuser'smailboxdirectinvestment,ortochecktheremotemailserverdnsMXrecord,andtheestablishmentoftheremotereceivedatwo-waybetweentheSMTPtransmissionchannel,thenbythesendingSMTPcommandissuedbythereceivingSMTPtoreceive,andanswerthecounter-sidedelivery.Oncethetransmissionchannelisestablished,SMTPMAILcommandspecifyingthesendersendsthemessagesender.IftherecipientcanreceivemailSMTPOKresponseisreturned.SMTPRCPTcommandissuedforthesendertoconfirmwhetherthemessageisreceived.IftheSMTPrecipientreceives,itreturnsOKresponse;ifyoucannotreceive,thenrefusedtoacceptresponsetoissue(butdoesnotsuspendoperationoftheentiremessage),thetwosideswillrepeatsomanytimes.Whentherecipientsreceiveallmessageswillreceiveaspecialsequence,iftherecipientofthemessagesuccessfullyprocessed,itreturnsOKresponse.
SMTPcommandsdefinethemailtransferorbyuser-definedsystemfunctions.Itscommandis
AnimportantfeatureofSMTPisitsabilitytotransmitmessagesintheRelay,TransferServiceprovidesinter-processcommunication(IPCE),andthisenvironmentmayincludeanetwork,severalnetworksoranetworksubnet.Understandthatthetransmissionsystem(orIPCE)isnotaonetooneveryimportant.ProcessandotherprocessesmaybedirectlythroughthecommunicationsofknownIPCE.Mailisanapplicationorinter-processcommunication.MailcanbeconnectedindifferentIPCEtheprocessofinter-networkmaildelivery.Morespecifically,mailcanbeahostofdifferentnetworkrelaytransmission.
KnownastheSimpleMailTransferProtocolSMTP(SimpleMailTransferProtocol),aimtoprovideefficientandreliablemessagetransfer.AnimportantfeatureofSMTPisitsabilitytotransmitmessagesintheRelay,thatthemessagecanbedifferentrelayhostsonthenetworktransmission.Workintwosituations:
First,e-mailtransmissionfromtheclienttotheserver;secondisfromoneservertoanotherserver.SMTPisarequest/responseprotocol,itlistenport25,forreceivingtheuser'sMailrequesttoestablishwiththeremoteMailserverSMTPconnection.
CopyrightNotice
Copyright(C)theInternetSociety(1999).AllRightsReserved.
1.Introduction
ThisdocumentdefinesanSMTPserviceextension[ESMTP]wherebyanSMTPclientmayindicateanauthenticationmechanismtotheserver;performanauthenticationprotocolexchange,andoptionallynegotiatesecuritylayerforsubsequentprotocolinteractions.ThisextensionisaprofileoftheSimpleAuthenticationandSecurityLayer[SASL].
2.ConventionsUsedinthisDocument
Inexamples,"C:
"and"S:
"indicatelinessentbytheclientandserverrespectively.Thekeywords"MUST","MUSTNOT","SHOULD","SHOULDNOT",and"MAY"inthisdocumentaretobeinterpretedasdefinedin"KeywordsforuseinRFCstoIndicateRequirementLevels"[KEYWORDS].
3.TheAuthenticationserviceextension
(1)ThenameoftheSMTPserviceextensionis"Authentication"
(2)TheEHLOkeywordvalueassociatedwiththisextensionis"AUTH"
(3)TheAUTHEHLOkeywordcontainsasaparameteraspaceseparatedlistofthenamesofsupportedSASLmechanisms.
(4)AnewSMTPverb"AUTH"isdefined
(5)Anoptionalparameterusingthekeyword"AUTH"isaddedtotheMAILFROMcommand,andextendsthemaximumlinelengthoftheMAILFROMcommandby500characters.
(6)Thisextensionisappropriateforthesubmissionprotocol[SUBMIT].
4.TheAUTHcommandAUTHmechanism[initial-response]
Arguments:
AstringidentifiesaSASLauthenticationmechanism.Anoptionalbase64-encodedresponse
Restrictions:
AfteranAUTHcommandhassuccessfullycompleted,nomoreAUTHcommandsmaybeissuedinthesamesession.AfterasuccessfulAUTHcommandcompletes,aserverMUSTrejectanyfurtherAUTHcommandswitha503reply.TheAUTHcommandisnotpermittedduringamailtransaction.
Discussion:
TheAUTHcommandindicatesanauthenticationmechanismtotheserver.Iftheserversupportstherequestedauthenticationmechanism,itperformsanauthenticationprotocolexchangetoauthenticateandidentifytheuser.Optionally,italsonegotiatesasecuritylayerforsubsequentprotocolinteractions.Iftherequestedauthenticationmechanismisnotsupported,theserverrejectstheAUTHcommandwitha504reply.
Theauthenticationprotocolexchangeconsistsofaseriesofserverchallengesandclientanswersthatarespecifictotheauthenticationmechanism.Aserverchallenge,otherwiseknownasareadyresponse,isa334replywiththetextpartcontainingaBASE64encodedstring.TheclientanswerconsistsofalinecontainingaBASE64encodedstring.Iftheclientwishestocancelanauthenticationexchange,itissuesalinewithasingle"*".Iftheserverreceivessuchananswer,itMUSTrejecttheAUTHcommandbysendinga501reply.
Theoptionalinitial-responseargumenttotheAUTHcommandisusedtosavearoundtripwhenusingauthenticationmechanismsthataredefinedtosendnodataintheinitialchallenge.
Whentheinitial-responseargumentisusedwithsuchamechanism,theinitialemptychallengeisnotsenttotheclientandtheserverusesthedataintheinitial-responseargumentasifitweresentinresponsetotheemptychallenge.Unlikeazero-lengthclientanswertoa334reply,azero-lengthinitialresponseissentasasingleequalssign("=").Iftheclientusesaninitial-responseargumenttotheAUTHcommandwithamechanismthatsendsdataintheinitialchallenge,theserverrejectstheAUTHcommandwitha535reply.
IftheservercannotBASE64decodetheargument,itrejectstheAUTHcommandwitha501reply.Iftheserverrejectstheauthenticationdata,itSHOULDrejecttheAUTHcommandwitha535replyunlessamorespecificerrorcode,suchasonelistedinsection6,isappropriate.Shouldtheclientsuccessfullycompletetheauthenticationexchange,theSMTPserverissuesa235reply.
Theservicenamespecifiedbythisprotocol'sprofileofSASLis"SMTP".
IfasecuritylayerisnegotiatedthroughtheSASLauthenticationexchange,ittakeseffectimmediatelyfollowingtheCRLFthatconcludestheauthenticationexchangefortheclient,andtheCRLFofthesuccessreplyfortheserver.Uponasecuritylayer'stakingeffect,theSMTPprotocolisresettotheinitialstate(thestateinSMTPafteraserverissuesa220servicereadygreeting).TheserverMUSTdiscardanyknowledgeobtainedfromtheclient,suchastheargumenttotheEHLOcommand,whichwasnotobtainedfromtheSASLnegotiationitself.TheclientMUSTdiscardanyknowledgeobtainedfromtheserver,suchasthelistofSMTPserviceextensions,whichwasnotobtainedfromtheSASLnegotiationitself(withtheexceptionthataclientMAYcomparethelistofadvertisedSASLmechanismsbeforeandafterauthenticationinordertodetectanactivedown-negotiationattack).TheclientSHOULDsendanEHLOcommandasthefirstcommandafterasuccessfulSASLnegotiationwhichresultsintheenablingofasecuritylayer.
Theserverisnotrequiredtosupportanyparticularauthenticationmechanism,norareauthenticationmechanismsrequiredtosupportanysecuritylayers.IfanAUTHcommandfails,theclientmaytryanotherauthenticationmechanismbyissuinganotherAUTHcommand.
IfanAUTHcommandfails,theserverMUSTbehavethesameasiftheclienthadnotissuedtheAUTHcommand.
TheBASE64stringmayingeneralbearbitrarilylong.ClientsandserversMUSTbeabletosupportchallengesandresponsesthatareaslongasaregeneratedbytheauthenticationmechanismstheysupport,independentofanylinelengthlimitationstheclientorservermayhaveinotherpartsofitsprotocolimplementation.
Examples:
S:
220ESMTPserverready
C:
EHLO
S:
250-
S:
250-AUTHCRAM-MD5DIGEST-MD5
C:
AUTHFOOBAR
S:
504unrecognizedauthenticationtypes.
C:
AUTHCRAM-MD5
S:
235Authenticationsuccessful.
5.TheAUTHparametertotheMAILFROMcommand
AUTH=addr-spec
Arguments:
Anaddr-speccontainingtheidentitywhichsubmittedthemessagetothedeliverysystem,orthetwocharactersequence"<>",indicatingsuchanidentityisunknownorinsufficientlyauthenticated.
Di
- 配套讲稿:
如PPT文件的首页显示word图标,表示该PPT已包含配套word讲稿。双击word图标可打开word文档。
- 特殊限制:
部分文档作品中含有的国旗、国徽等图片,仅作为作品整体效果示例展示,禁止商用。设计者仅对作品中独创性部分享有著作权。
- 关 键 词:
- 外文 翻译 简单 邮件 传输 协议 服务 扩展 认证 机制
![提示](https://static.bdocx.com/images/bang_tan.gif)