Hi Achim

thank you for answering.

> Graham says:
> "The reason it tries CRAM-MD5 i because there were servers
> out there that would accept it but did not publish it in capa. If
> there server does not support it then it will return an error when
> you try."
> The change you suggest breaks interoperability to servers of that kind.

Ok, I reckoned with that argument. I'd say if their SASL support isn't
recognized, it's their own fault. In contrast I've seen servers which
disconnect if confronted with mechanisms they don't know.

> If the user want to check the servers capability he can use
> exists $capa->{'SASL'} as described in
> <http://perl.grolmsnet.de/authensasl/> and terminate to avoid the try.

That's a workaround I could live with. Have to try that.

>> auth () in Net::POP3 would need a
>>   return () unless $client;
>> added between
>>   my $client = $sasl->client_new('pop3',${*$self}{'net_pop3_host'},0);
> 
> What version of Net::POP3 have you used?

That was 2.28.

> The actual version in repository is available at
> <http://svn.goingon.net/repos/libnet/trunk/Net/POP3.pm>
> (hopefully becoming 2.29, I hope Graham will bring it to CPAN).

I've looked into that version. While the current code is good readable,
the changes in 2.28_2 are quite a mess for a Perl newbie like me.
But could it be this new code already sorts out mechanisms not supported
by Authen::SASL before trying?

Thanks,
Jürgen

Reply via email to