Auth fails partly for imap

2003-07-27 Thread Johan Paul
Hi all,

What have I done wrong when I can log into my IMAP account 
(cyrus-imapd-2.0.17) via Mozilla and web mail (Squirrelmail) but Pine 
doesn't allow me to log in? I use PAM with MySQL authentication. This is 
what I get to my log file (first when I log into with Mozilla from a 
remote client, then Pine locally):

-- 8 --
Jul 27 18:04:27 silakka imapd[5665]: login: my.computer.foo[x.x.x.x] 
kypeli plaintext

Jul 27 18:05:09 silakka imapd[5685]: badlogin: 
localhost.computer.foo[127.0.0.1] CRAM-MD5 authentication failure [no 
secret in database]
-- 8 --

Why does Pine try to use CRAM-MD5 but Mozilla doesn't? I have 
{localhost:143}inbox in Pine in inbox-path.

Running FreeBSD 4.8.

Regards,

Johan Paul

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Auth fails partly for imap

2003-07-27 Thread Lucas Holt
Historically, Netscape has not supported encrypted (even if it is weak) 
authentication for imap and pop3.  Slowly, they add standards as people 
complain.  I'm sure the mozilla project is no different.  I know for a 
fact that early builds of mozilla did not support cram md5.

Basically, webmail and mozilla are sending clear text authentication.  
Pine is a bit smarter and uses cram md5.  Look through the pine 
preferences and see if you can downgrade it to clear text.  If not, 
there is probably a compile option to use cleartext.  (thats how they 
do it in imapd at least)

On Sunday, July 27, 2003, at 11:12  AM, Johan Paul wrote:

Hi all,

What have I done wrong when I can log into my IMAP account 
(cyrus-imapd-2.0.17) via Mozilla and web mail (Squirrelmail) but Pine 
doesn't allow me to log in? I use PAM with MySQL authentication. This 
is what I get to my log file (first when I log into with Mozilla from 
a remote client, then Pine locally):

-- 8 --
Jul 27 18:04:27 silakka imapd[5665]: login: my.computer.foo[x.x.x.x] 
kypeli plaintext

Jul 27 18:05:09 silakka imapd[5685]: badlogin: 
localhost.computer.foo[127.0.0.1] CRAM-MD5 authentication failure [no 
secret in database]
-- 8 --

Why does Pine try to use CRAM-MD5 but Mozilla doesn't? I have 
{localhost:143}inbox in Pine in inbox-path.

Running FreeBSD 4.8.

Regards,

Johan Paul

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to 
[EMAIL PROTECTED]


Lucas Holt
[EMAIL PROTECTED]

FoolishGames.com  (Jewel Fan Site)
JustJournal.com (Free blogging)
Only two things are infinite, the universe and human stupidity, and 
I'm not sure about the former.
- Albert Einstein (1879-1955)

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Auth fails partly for imap

2003-07-27 Thread Andrew BOGECHO
Sun Jul 27 12:18:29 EDT 2003

Hi,

We use plaintext over SSL. For pine to work we add the following line
in the pine.conf

disable-these-authenticators=CRAM-MD5

Hope that helps. Use with care over insecure connections.

Andrew.

On Sun, Jul 27, 2003 at 11:57:04AM -0400, Lucas Holt wrote:
 Historically, Netscape has not supported encrypted (even if it is weak) 
 authentication for imap and pop3.  Slowly, they add standards as people 
 complain.  I'm sure the mozilla project is no different.  I know for a 
 fact that early builds of mozilla did not support cram md5.
 
 Basically, webmail and mozilla are sending clear text authentication.  
 Pine is a bit smarter and uses cram md5.  Look through the pine 
 preferences and see if you can downgrade it to clear text.  If not, 
 there is probably a compile option to use cleartext.  (thats how they 
 do it in imapd at least)
 
 On Sunday, July 27, 2003, at 11:12  AM, Johan Paul wrote:
 
 Hi all,
 
 What have I done wrong when I can log into my IMAP account 
 (cyrus-imapd-2.0.17) via Mozilla and web mail (Squirrelmail) but Pine 
 doesn't allow me to log in? I use PAM with MySQL authentication. This 
 is what I get to my log file (first when I log into with Mozilla from 
 a remote client, then Pine locally):
 
 -- 8 --
 Jul 27 18:04:27 silakka imapd[5665]: login: my.computer.foo[x.x.x.x] 
 kypeli plaintext
 
 Jul 27 18:05:09 silakka imapd[5685]: badlogin: 
 localhost.computer.foo[127.0.0.1] CRAM-MD5 authentication failure [no 
 secret in database]
 -- 8 --
 
 Why does Pine try to use CRAM-MD5 but Mozilla doesn't? I have 
 {localhost:143}inbox in Pine in inbox-path.
 
 Running FreeBSD 4.8.
 
 
 Regards,
 
 Johan Paul
 
 ___
 [EMAIL PROTECTED] mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to 
 [EMAIL PROTECTED]
 
 
 
 Lucas Holt
 [EMAIL PROTECTED]
 
 FoolishGames.com  (Jewel Fan Site)
 JustJournal.com (Free blogging)
 
 Only two things are infinite, the universe and human stupidity, and 
 I'm not sure about the former.
 - Albert Einstein (1879-1955)
 
 ___
 [EMAIL PROTECTED] mailing list
 http://lists.freebsd.org/mailman/listinfo/freebsd-questions
 To unsubscribe, send any mail to [EMAIL PROTECTED]
 
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: Auth fails partly for imap

2003-07-27 Thread Johan Paul
Hi,
Hi!

We use plaintext over SSL. For pine to work we add the following line
in the pine.conf
disable-these-authenticators=CRAM-MD5

Hope that helps. Use with care over insecure connections.
Hi!

That helped! Now I can log into my IMAP account even with Pine. I will 
use SSL to secure the authentication though.

Oddly though even the login from Pine worked after the initial 
installation and configuration of FreeBSD and all other applications. 
Now I moved the server from an internal network to the Internet and if I 
can remember correctly Pine failed after this move. Any ideas why the 
change of IP (and hostname) would cause this kind of behaviour? Have I 
missed some setting somewhere with PAM or something?

I have this in my /var/log/messages and it from the time the server was 
on the internal net:

Jul 25 18:39:50 silakka imapd[5956]: login: 
localhost.milkyway[127.0.0.1] kypeli CRAM-MD5 User logged in

This must be from Pine since Mozilla and webmail use plain text. Now I 
am even more confused :)

Best regards,
Johan Paul
Andrew.

On Sun, Jul 27, 2003 at 11:57:04AM -0400, Lucas Holt wrote:

Historically, Netscape has not supported encrypted (even if it is weak) 
authentication for imap and pop3.  Slowly, they add standards as people 
complain.  I'm sure the mozilla project is no different.  I know for a 
fact that early builds of mozilla did not support cram md5.

Basically, webmail and mozilla are sending clear text authentication.  
Pine is a bit smarter and uses cram md5.  Look through the pine 
preferences and see if you can downgrade it to clear text.  If not, 
there is probably a compile option to use cleartext.  (thats how they 
do it in imapd at least)

On Sunday, July 27, 2003, at 11:12  AM, Johan Paul wrote:


Hi all,

What have I done wrong when I can log into my IMAP account 
(cyrus-imapd-2.0.17) via Mozilla and web mail (Squirrelmail) but Pine 
doesn't allow me to log in? I use PAM with MySQL authentication. This 
is what I get to my log file (first when I log into with Mozilla from 
a remote client, then Pine locally):

-- 8 --
Jul 27 18:04:27 silakka imapd[5665]: login: my.computer.foo[x.x.x.x] 
kypeli plaintext

Jul 27 18:05:09 silakka imapd[5685]: badlogin: 
localhost.computer.foo[127.0.0.1] CRAM-MD5 authentication failure [no 
secret in database]
-- 8 --

Why does Pine try to use CRAM-MD5 but Mozilla doesn't? I have 
{localhost:143}inbox in Pine in inbox-path.

Running FreeBSD 4.8.

Regards,

Johan Paul

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to 
[EMAIL PROTECTED]


Lucas Holt
[EMAIL PROTECTED]

FoolishGames.com  (Jewel Fan Site)
JustJournal.com (Free blogging)
Only two things are infinite, the universe and human stupidity, and 
I'm not sure about the former.
- Albert Einstein (1879-1955)

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]