Package: uw-imapd Version: 7:2002edebian1-11sarge1 Severity: normal Tags: security
Having upgraded a machine from woody to sarge, I encountered that the new uw-imapd package is now compiled to disallow plain text passwords, which broke my existing setup (using plain text auth via localhost:143). I am now getting LOGINDISABLED capability via IMAP from the server. The existing setup is as follows: the imap users here is a subset of power users with shell access (via ssh), and there's an additional acl for using imap, managed via /etc/pam.d/imap: auth required pam_listfile.so item=user sense=allow file=/etc/imap.allow During the upgrade, I accepted the new pam policy file, and prepended the above line to it. Please either transition back to two packages (SSL/non-SSL), as before, or otherwise allow a configuration option to allow plain text auth. -- System Information: Debian Release: 3.1 Architecture: i386 (i686) Kernel: Linux 2.4.27-2-686 Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968) Versions of packages uw-imapd depends on: ii debconf 1.4.30.13 Debian configuration management sy ii libc-client2002e 7:2002edebian1-11sarge1 UW c-client library for mail proto ii libc6 2.3.2.ds1-22 GNU C Library: Shared libraries an ii libcomerr2 1.37-2sarge1 common error description library ii libkrb53 1.3.6-2sarge2 MIT Kerberos runtime libraries ii libpam-runtime 0.76-22 Runtime support for the PAM librar ii libpam0g 0.76-22 Pluggable Authentication Modules l ii libssl0.9.7 0.9.7e-3 SSL shared libraries ii netbase 4.21 Basic TCP/IP networking system ii openssl 0.9.7e-3 Secure Socket Layer (SSL) binary a -- debconf information: * uw-imapd/force_debconf_choice: true * uw-imapd/protocol: imap2 -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
