Re: SASL LOGIN mechanism

2018-02-14 Thread Patrick Monnerat
On 02/14/2018 09:04 PM, Ray Satiro wrote: Obviously the server does not require the password because the client certificate authentication takes precedence; the AUTH command is however needed before being able to use other commands. This looks like a deviance from the description (https://tool

Re: SASL LOGIN mechanism

2018-02-14 Thread Ray Satiro
On 2/13/2018 7:48 PM, Patrick Monnerat wrote: > I've recently been facing a special case: a pop3 server (dovecot) with > a TLS-upgraded connection and client certificate does not require the > password when the LOGIN authentication mechanism is used, effectively > behaving as if it was an EXTERNAL

SASL LOGIN mechanism

2018-02-13 Thread Patrick Monnerat
I've recently been facing a special case: a pop3 server (dovecot) with a TLS-upgraded connection and client certificate does not require the password when the LOGIN authentication mechanism is used, effectively behaving as if it was an EXTERNAL authentication. > AUTH LOGIN < + VXNlcm5hbWU6 >