Re: userdb lookup not possible with only userdb prefetch

2014-12-06 Thread Alexander Dalloz
Am 07.12.2014 um 00:22 schrieb Yves Goergen: Hello, I am setting up a new server and migrating my Dovecot 1.2.9 config to the new 2.2.9 version. There wasn't much to keep from the old version so I had to recreate the config from scratch. Now I think I'm done but I can't login to IMAP. The log sa

userdb lookup not possible with only userdb prefetch

2014-12-06 Thread Yves Goergen
Hello, I am setting up a new server and migrating my Dovecot 1.2.9 config to the new 2.2.9 version. There wasn't much to keep from the old version so I had to recreate the config from scratch. Now I think I'm done but I can't login to IMAP. The log says this: dovecot: auth: Error: prefetch

Re: MD5-CRYPT/CRAM-MD5 vs SHA512-CRYPT/PLAIN

2014-12-06 Thread Jan Wideł
W dniu 2014-12-06 13:10, Reindl Harald napisał(a): Am 06.12.2014 um 06:56 schrieb Jan Wideł: If you add disable_plaintext_auth=yes ssl=required settings, then dovecot will drop authentication without STARTTLS. But damage will be done, client will send unencrypted (or in this scenario MD5 or SHA5

Re: MD5-CRYPT/CRAM-MD5 vs SHA512-CRYPT/PLAIN

2014-12-06 Thread Reindl Harald
Am 06.12.2014 um 14:40 schrieb Daniel Parthey: Am 6. Dezember 2014 13:10:58 MEZ, schrieb Reindl Harald : Am 06.12.2014 um 06:56 schrieb Jan Wideł: If you add disable_plaintext_auth=yes ssl=required settings, then dovecot will drop authentication without STARTTLS. But damage will be done, cli

Re: MD5-CRYPT/CRAM-MD5 vs SHA512-CRYPT/PLAIN

2014-12-06 Thread Daniel Parthey
Am 6. Dezember 2014 13:10:58 MEZ, schrieb Reindl Harald : > >Am 06.12.2014 um 06:56 schrieb Jan Wideł: >> If you add disable_plaintext_auth=yes ssl=required settings, then >> dovecot will drop authentication without STARTTLS. But damage will be >> done, client will send unencrypted (or in this sce

Re: MD5-CRYPT/CRAM-MD5 vs SHA512-CRYPT/PLAIN

2014-12-06 Thread Reindl Harald
Am 06.12.2014 um 06:56 schrieb Jan Wideł: If you add disable_plaintext_auth=yes ssl=required settings, then dovecot will drop authentication without STARTTLS. But damage will be done, client will send unencrypted (or in this scenario MD5 or SHA512 hash) login/password no, damage will *not* be