Actually, CRAM-MD5 *IS* supported by Courier-IMAP. See this link:
http://www.inter7.com/courierimap/INSTALL.html#crammd5 But I think you're on the right track: I DO NOT think that Courier-IMAP's vpopmail authentication module supports CRAM-MD5, effectively making CRAM-MD5 authentication with vpopmail impossible. This means that my ONLY choice is to prevent tmda-ofmipd from even announcing it's CRAM-MD5 capability, since email clients like Pegasus Mail will attempt to use CRAM-MD5 if it is announced, and you can't prevent it with a config field or file. So, I simply removed the 'cram-md5' string in the capability announcement line. Is there a better way to disable this? Perhaps a config flag? Thanks! On Friday 13 December 2002 16:59, David Guerizec wrote: > On Fri, 2002-12-13 at 20:21, Jesse Guardiani wrote: > > OK. LOGIN and PLAIN authentication are working great. But CRAM-MD5 fails. > > Although I didn't find it documented on the site, it happens that > CRAM-MD5 is not (and won't be) supported by remote login (imap[s], > [a]pop[s] or ldap[s]), so if you really need CRAM-MD5, you'll have to > create user:password entries in /etc/tofmipd, or in ~/.tmda/tofmipd > > The reason behind this is that we need to have clear text password on > the server side (MUA -> tmda-ofmipd) to do CRAM-MD5 auth. And we need to > have a clear text password on the client side (tmda-ofmipd -> imap) to > do remote auth. > Since with CRAM-MD5, your MUA only sends an MD5 digest, all we can do is > to compare it with a server-side generated MD5 digest from the > user:password pair found in /etc/tofmipd. > > Feel free to correct me if I'm not clear or plain wrong. > > David > > _____________________________________________ > tmda-users mailing list ([EMAIL PROTECTED]) > http://tmda.net/lists/listinfo/tmda-users -- Jesse Guardiani, Systems Administrator WingNET Internet Services, P.O. Box 2605 // Cleveland, TN 37320-2605 423-559-LINK (v) 423-559-5145 (f) http://www.wingnet.net We are actively looking for companies that do a lot of long distance faxing and want to cut their long distance bill by up to 50%. Contact [EMAIL PROTECTED] for more info. _____________________________________________ tmda-users mailing list ([EMAIL PROTECTED]) http://tmda.net/lists/listinfo/tmda-users
