Re: authuser against a Cyrus imapd server, using PHP

2003-10-30 Thread Mark Crispin
On Thu, 30 Oct 2003, Etienne Goyer wrote:
 My problem are two fold : under either plaintext or SSL connection, I
 received the Can't do /authuser with this server error form c-client.

Can't do /authuser with this server means that c-client does not
recognize any server's SASL authenticators, and is therefore doing the
LOGIN command.  The LOGIN command can't do /authuser.

I don't know what PHP may be doing.  Perhaps it disables AUTH=PLAIN.

-- Mark --

http://staff.washington.edu/mrc
Science does not emerge from voting, party politics, or public debate.
Si vis pacem, para bellum.


Re: authuser against a Cyrus imapd server, using PHP

2003-10-30 Thread Etienne Goyer
On Thu, Oct 30, 2003 at 08:11:49AM -0800, Mark Crispin wrote:
 On Thu, 30 Oct 2003, Etienne Goyer wrote:
  My problem are two fold : under either plaintext or SSL connection, I
  received the Can't do /authuser with this server error form c-client.
 
 Can't do /authuser with this server means that c-client does not
 recognize any server's SASL authenticators, and is therefore doing the
 LOGIN command.  The LOGIN command can't do /authuser.

Yes, I guesed it.  The server advertise AUTH=PLAIN in either clear or
TLS/SSL connection.  I guess it should pick it up ...
 
 I don't know what PHP may be doing.  Perhaps it disables AUTH=PLAIN.

Since mailutil work, this is the best guess.  However, I had been
reading PHP's imap_open() carefully, and I am pretty sure it pass the
mailbox string as-is.  I will look into it further.

Thanks for your insight; any other ideas/comments greatly appreciated.

-- 
Etienne GoyerLinux Québec Technologies Inc.
http://www.LinuxQuebec.com   [EMAIL PROTECTED]


Second patch for imapd under Panther

2003-10-30 Thread Tom Brown
Hello again -

Here is a new patch that enables pam authentication by default under OS X,
and fixes the nonstandard directory problem.

I have verified that this works under OS X, if a proper pam configuration
file is created in /etc/pam.d.

Hopefully this can be included in the distribution. I recommend adding a
note to the install file indicating that OS X users should 'sudo cp
/etc/pam.d/chkpasswd /etc/pam.d/imap' in order to get it working.

Tom
diff -Nrup src/osdep/unix/Makefile /usr/local/src/imap-2002e/src/osdep/unix/Makefile
--- src/osdep/unix/Makefile Mon Jul 14 21:24:24 2003
+++ /usr/local/src/imap-2002e/src/osdep/unix/Makefile   Thu Oct 30 20:47:05 2003
@@ -525,9 +525,10 @@ os4:   # OSF/1 (Digital UNIX) 4
 
 osx:   # Mac OS X
$(BUILD) `$(CAT) SPECIALS` OS=$@ \
-CRXTYPE=nfs \
+CHECKPW=pam CRXTYPE=nfs \
 SPOOLDIR=/var/spool MAILSPOOL=/var/mail \
-BASECFLAGS=-g -O
+BASECFLAGS=-g -O -I/usr/include/pam -DPAMINCLUDED \
+EXTRALDFLAGS=-lpam -ldl
 
 ptx:   # PTX
$(BUILD) `$(CAT) SPECIALS` OS=$@ \
diff -Nrup src/osdep/unix/ckp_pam.c /usr/local/src/imap-2002e/src/osdep/unix/ckp_pam.c
--- src/osdep/unix/ckp_pam.cMon Apr 29 22:32:27 2002
+++ /usr/local/src/imap-2002e/src/osdep/unix/ckp_pam.c  Thu Oct 30 20:47:17 2003
@@ -18,7 +18,11 @@
  * CPYRIGHT, included with this Distribution.
  */
 
+#ifndef PAMINCLUDED
 #include security/pam_appl.h
+#else
+#include pam_appl.h
+#endif
 
 struct checkpw_cred {
   char *uname; /* user name */


Re: Second patch for imapd under Panther

2003-10-30 Thread Mark Crispin
Hi Tom -

I've already done something similar in the latest imap-2003 development
tarball.  Could you make sure that
ftp://ftp.cac.washington.edu/mail/imap-2003.DEV.tar.Z
builds properly for you using the new oxp port (OSX with PAM)?

The reason why I spawned a new port is that I am concerned that the PAM
version might not build under the previous version.

Thanks,

-- Mark --

http://staff.washington.edu/mrc
Science does not emerge from voting, party politics, or public debate.
Si vis pacem, para bellum.