You are certainly correct, it was written for my own personal use. On my system, I use vmailmgr which stores its passwd info in cdb files owned by the user in their home dir... no way for a non-root process to read them that I can think of. I think that is why Jeff asked about the possibility of using some sort of SSL frontend which would be nice to see.

Of course, if anyone else has methods for dealing with vmailmgr usernames I'd be happy to hear them.

On Apr 1, 2005, at 6:41 AM, John Peacock wrote:

Christopher Heschong wrote:
Hi Jeff, I wrote a plugin that I posted to this list a while back that will authenticate to the local IMAP server, so if you already have IMAP or POP3 setup on your server with whatever backend authentication mechanisms you might need (vpopmail, etc), you don't have to worry about a second authentication method or different way of accessing them.

The one caveat being that your implementation only supports cleartext methods like auth-plain (and auth-login if you added it). Because you need the cleartext password to perform the backend authentication, there is no way to support auth-cram-md5. That may be an acceptable limitation for some sites, but doesn't lend itself to a generalized solution.

John

Attachment: smime.p7s
Description: S/MIME cryptographic signature



Reply via email to