[opendmarc-users] DKIM align question

[Murray S. Kucherawy]

On Mon, 8 Apr 2013, Todd Lyons wrote:
> I'm attempting to verify that my implementation of statistics logging in 
> Exim is compatible for import/management by opendmarc tools. Everything 
> imports with no problems, but I did find one oddity.
>
> In much the same manner as the SPF align question last week, I have a
> snippet of XML that seems to indicate the pass/faill swapping issue in
> DKIM too:
>
> <record>
>  <row>
>   <source_ip>199.101.162.40</source_ip>
>   <count>1</count>
>   <policy_evaluated>
>    <disposition>none</disposition>
>    <dkim>fail</dkim>
>    <spf>pass</spf>
>   </policy_evaluated>
>  </row>
>  <identities>
>   <header_from>linkedin.com</header_from>
>  </identities>
>  <auth_results>
>   <spf>
>    <domain>bounce.linkedin.com</domain>
>    <result>unknown</result>
>   </spf>
>   <dkim>
>    <domain>linkedin.com</domain>
>    <result>pass</result>
>   </dkim>
>  </auth_results>
> </record>
>
> Is this the same error in the DKIM segment of the report generation?

It looks like a bug in the way alignment is being determined or recorded. 
The report shows a DKIM result of "pass" but failed alignment even though 
the from_domain matches the DKIM domain.

I'll see if I can reproduce this.

-MSK