On Fri, Jan 19, 2007 at 11:13:27AM +1100, Stephen Meatheringham wrote:
> > There's no such thing as "PROXYAUTH" in IMAP.  You are obviously referring
> > to a label, or a method, used by this Perl module to implement something
> > that's called something else, in IMAP.
> 
> Yes, as shown in the example code I supplied.
> In fact, it's not even properly documented in the Perl MAIL::IMAPClient 
> module.
> 
> > I think I know what you're referring to, and Courier does not implement
> > this optional IMAP function.
> 
> Thanks.  Yes, Courier is not one of the mail servers that is listed as 
> working 
> with it, but then neither was Exchange.  Oh well, the users will just have to 
> save what mail they wish to keep manually, before they are moved over.

Or, if you have each user's password in plaintext, you can login as each
user individually.

Or, you can write a temporary custom auth module with authpipe, which allows
all users to login with the same hard-coded password, and then remove it
after the migration is done.

PROXYAUTH appears to be one vendor's private extension:
http://www.mail-archive.com/[email protected]/msg17652.html

Probably the 'right' way to do this is with SASL which has separate
authentication and authorization identities. For AUTH PLAIN, it just has to
split the base64 data into

    <authorization user> \0 <authentication user> \0 <password>

A simple auth module would say: if <authentication user> = "root" and
<password> = "xyzzy", then return the account information for <authorization
user>

See RFC 2595 for details.

However this is probably tricky to implement in courier-imap, since the raw
SASL data is not made available to the auth module. That is,

    AUTH PLAIN XXX\0FOO\0BAR

is converted into login foo\nbar\n by the time it reaches the auth module.

Another option to consider is to use the 'loginexec' functionality, a script
which is run the first time the user logins in to their maildir on the new
server. Whilst the plaintext password currently isn't passed to the
loginexec script, it would be fairly easy to make it do so. This would allow
it to copy across IMAP contents even if you only have encrypted passwords in
your database.

Regards,

Brian.

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Courier-imap mailing list
[email protected]
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-imap

Reply via email to