> I'm attaching a patch here that can be applied to 1.2.7, and > incorporates the patch against 1.2.6 provided to this list by Jeffrey > Arbuckle <jbar...@gmail.com> on 7/20/10 that allowed SASL plain > authentications using a service account. > > My patch adds the following features: > > - STARTTLS is attempted before fetching capabilities > > - STARTTLS code was refactored into a single piece of code > > - AUTH=LOGIN is no longer stripped from capabilities if it exists
This was a misunderstanding on Martin's part. This was never a problem in IMAP Proxy. > - auth_shared_secret setting so that IMAP LOGINs still have to supply a > shared secret before being logged in without a password using AUTH=PLAIN > > I added an auth_shared_secret setting so that even if someone gets > access to imapproxy listening at 127.0.0.1, they'll need to provide a > shared secret as the password part of an IMAP login command before SASL > plain auth is attempted using the account specified by Jeffrey's > auth_sasl_plain_username and auth_sasl_plain_password settings. > > I hope this is useful for someone! I have added a somewhat heavily modified version of Martin and Jeffrey's work. It can be found in our repository immediately or in our daily snapshot releases within 24 hours from now. Testing and feedback appreciated. Cheers, Paul -- Paul Lesniewski SquirrelMail Team Please support Open Source Software by donating to SquirrelMail! http://squirrelmail.org/donate_paul_lesniewski.php ------------------------------------------------------------------------------ Protect Your Site and Customers from Malware Attacks Learn about various malware tactics and how to avoid them. Understand malware threats, the impact they can have on your business, and how you can protect your company and customers by using code signing. http://p.sf.net/sfu/oracle-sfdevnl ----- squirrelmail-imapproxy mailing list Posting guidelines: http://squirrelmail.org/postingguidelines List address: squirrelmail-imapproxy@lists.sourceforge.net List archives: http://news.gmane.org/gmane.mail.squirrelmail.imapproxy List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-imapproxy
