On Fri, 2002-12-13 at 20:21, Jesse Guardiani wrote:
> OK. LOGIN and PLAIN authentication are working great. But CRAM-MD5 fails.
> 

Although I didn't find it documented on the site, it happens that
CRAM-MD5 is not (and won't be) supported by remote login (imap[s],
[a]pop[s] or ldap[s]), so if you really need CRAM-MD5, you'll have to
create user:password entries in /etc/tofmipd, or in ~/.tmda/tofmipd

The reason behind this is that we need to have clear text password on
the server side (MUA -> tmda-ofmipd) to do CRAM-MD5 auth. And we need to
have a clear text password on the client side (tmda-ofmipd -> imap) to
do remote auth.
Since with CRAM-MD5, your MUA only sends an MD5 digest, all we can do is
to compare it with a server-side generated MD5 digest from the
user:password pair found in /etc/tofmipd.

Feel free to correct me if I'm not clear or plain wrong.

David

_____________________________________________
tmda-users mailing list ([EMAIL PROTECTED])
http://tmda.net/lists/listinfo/tmda-users

Reply via email to