Re: Logging plaintext logins? (SSLTYPE=unix - nopwd transition)

2003-01-09 Thread Rich Graves
On Thu, 9 Jan 2003, Mark Crispin wrote: If the syslog() says Authenticated then the user used SASL. It is a simple hack to the syslog() in imapd.c (search for Authenticated user) to include the SASL mechanism name (which should still be pointed to by variable s). SASL mechanisms LOGIN and

Re: Logging plaintext logins? (SSLTYPE=unix - nopwd transition)

2003-01-09 Thread Mark Crispin
On Thu, 9 Jan 2003, Rich Graves wrote: How would I know if a client on 143/110 has negotiated STARTTLS, though? There shouldn't be many of these because up until very recently we were running under a inetd/tcpd setup that breaks STARTTLS (as mentioned in the FAQ), but it'd be nice to know.

Logging plaintext logins? (SSLTYPE=unix - nopwd transition)

2003-01-09 Thread Rich Graves
We are finally going to do the right thing and change from SSLTYPE=unix to SSLTYPE=nopwd (allow cleartext logins only in encrypted sessions). We would very much like to identify all users who have ignored our instructions and will be affected by this change. It's not clear to me how to do this.