Auth fails partly for imap

[Johan Paul]

> Hi!
> 
> That helped! Now I can log into my IMAP account even with Pine. I will 
> use SSL to secure the authentication though.
> 
> Oddly though even the login from Pine worked after the initial 
> installation and configuration of FreeBSD and all other applications. 
> Now I moved the server from an internal network to the Internet and if I 
> can remember correctly Pine failed after this move. Any ideas why the 
> change of IP (and hostname) would cause this kind of behaviour? Have I 
> missed some setting somewhere with PAM or something?
> 
> I have this in my /var/log/messages and it from the time the server was 
> on the internal net:
> 
> Jul 25 18:39:50 silakka imapd[5956]: login: 
> localhost.milkyway[127.0.0.1] kypeli CRAM-MD5 User logged in
> 
> This must be from Pine since Mozilla and webmail use plain text. Now I 
> am even more confused :)

Ok, some updates that I came up with.

If my doubts are correct the problem might be in the sasldb auth method. 
I have set up my user originally (as a test) to authenticate from the 
sasldb and added my user using saslpasswd2. It then added as the realm 
my old hostname which now have changed since I moved the computer to the 
Internet. That's why the CRAM-MD5 failes.

And if my thoughts are correct there is no way to use CRAM-MD5 (or other 
method than plain text) if you want to authenticate with PAM from MySQL 
like I do. I am correct? :)  Hence I have to live with the fact that 
Pine needs that line of configuration to work with PAM/MySQL?

> 
> Best regards,
> Johan Paul

Once again,

Johan Paul


> 
>>
>> Andrew.
>>
>> On Sun, Jul 27, 2003 at 11:57:04AM -0400, Lucas Holt wrote:
>>
>>> Historically, Netscape has not supported encrypted (even if it is 
>>> weak) authentication for imap and pop3.  Slowly, they add standards 
>>> as people complain.  I'm sure the mozilla project is no different.  I 
>>> know for a fact that early builds of mozilla did not support cram md5.
>>>
>>> Basically, webmail and mozilla are sending clear text 
>>> authentication.  Pine is a bit smarter and uses cram md5.  Look 
>>> through the pine preferences and see if you can downgrade it to clear 
>>> text.  If not, there is probably a compile option to use cleartext.  
>>> (thats how they do it in imapd at least)
>>>
>>> On Sunday, July 27, 2003, at 11:12  AM, Johan Paul wrote:
>>>
>>>
>>>> Hi all,
>>>>
>>>> What have I done wrong when I can log into my IMAP account 
>>>> (cyrus-imapd-2.0.17) via Mozilla and web mail (Squirrelmail) but 
>>>> Pine doesn't allow me to log in? I use PAM with MySQL 
>>>> authentication. This is what I get to my log file (first when I log 
>>>> into with Mozilla from a remote client, then Pine locally):
>>>>
>>>> -- 8< --
>>>> Jul 27 18:04:27 silakka imapd[5665]: login: my.computer.foo[x.x.x.x] 
>>>> kypeli plaintext
>>>>
>>>> Jul 27 18:05:09 silakka imapd[5685]: badlogin: 
>>>> localhost.computer.foo[127.0.0.1] CRAM-MD5 authentication failure 
>>>> [no secret in database]
>>>> -- 8< --
>>>>
>>>> Why does Pine try to use CRAM-MD5 but Mozilla doesn't? I have 
>>>> {localhost:143}inbox in Pine in inbox-path.
>>>>
>>>> Running FreeBSD 4.8.
>>>>
>>>>
>>>> Regards,
>>>>
>>>> Johan Paul
>>>>
>>>> _______________________________________________
>>>> freebsd-questions at freebsd.org mailing list
>>>> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
>>>> To unsubscribe, send any mail to 
>>>> "freebsd-questions-unsubscribe at freebsd.org"
>>>>
>>>>
>>>
>>> Lucas Holt
>>> Luke at FoolishGames.com
>>> ________________________________________________________
>>> FoolishGames.com  (Jewel Fan Site)
>>> JustJournal.com (Free blogging)
>>>
>>> "Only two things are infinite, the universe and human stupidity, and 
>>> I'm not sure about the former."
>>> - Albert Einstein (1879-1955)
>>>
>>> _______________________________________________
>>> freebsd-questions at freebsd.org mailing list
>>> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
>>> To unsubscribe, send any mail to 
>>> "freebsd-questions-unsubscribe at freebsd.org"
>>>
>>
>> _______________________________________________
>> freebsd-questions at freebsd.org mailing list
>> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
>> To unsubscribe, send any mail to 
>> "freebsd-questions-unsubscribe at freebsd.org"
> 
> 
> 
> _______________________________________________
> freebsd-questions at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to 
> "freebsd-questions-unsubscribe at freebsd.org"