Re: Logging plaintext logins? (SSLTYPE=unix - nopwd transition)

2003-01-09 Thread Rich Graves
On Thu, 9 Jan 2003, Mark Crispin wrote: If the syslog() says Authenticated then the user used SASL. It is a simple hack to the syslog() in imapd.c (search for Authenticated user) to include the SASL mechanism name (which should still be pointed to by variable s). SASL mechanisms LOGIN and

Re: Logging plaintext logins? (SSLTYPE=unix - nopwd transition)

2003-01-09 Thread Mark Crispin
On Thu, 9 Jan 2003, Rich Graves wrote: How would I know if a client on 143/110 has negotiated STARTTLS, though? There shouldn't be many of these because up until very recently we were running under a inetd/tcpd setup that breaks STARTTLS (as mentioned in the FAQ), but it'd be nice to know.

IMAP toolkit 2002b (imap-2002b) is now available

2003-01-09 Thread Mark Crispin
This note is to announce the availability of the University of Washington IMAP toolkit version 2002b. This release does not introduce major new functionality. Instead, it addresses bugs found in earlier versions. Source code for the latest IMAP toolkit release is available at:

Logging plaintext logins? (SSLTYPE=unix - nopwd transition)

2003-01-09 Thread Rich Graves
We are finally going to do the right thing and change from SSLTYPE=unix to SSLTYPE=nopwd (allow cleartext logins only in encrypted sessions). We would very much like to identify all users who have ignored our instructions and will be affected by this change. It's not clear to me how to do this.