On Thu, Aug 17, 2006 at 12:58:28PM -0600, Kevin Pendleton wrote:
> So now I am really confused, shouldn't the proxy see the options tag and 
> query the remote server for the authentication?  I don't see why it 
> should need anything more then just the one options=mailhost tag or am I 
> missing something here?

Because of the way it works, it does a *full* authentication before proxying
the request (i.e. it checks the password as well).

In principle, you could have a proxy which accepted a username plus any
random password, and proxied to the backend without checking the password.
It would have to be clever enough to notice that if the far end rejects the
login, it goes back into the login loop locally. But this is not how courier
works.

It's not really a problem though - just put a full copy of your userdb on
the proxy box (or point your proxy box at the same LDAP / mysql / postgres
database)

Regards,

Brian.

-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Courier-imap mailing list
[email protected]
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-imap

Reply via email to