Michael, "Secure Password Authentication" is a not-so-secure
Microsoft-Domain-specific form of authentication. It basically means
"send this mail server your current authentication token ..."
In short, it don't work with Unix servers at all, especially Cyrus.
You can disable this, and enable using SSL and everything will be encrypted
just fine.
On Mon, Dec 04, 2000 at 11:28:42AM -0800, Michael Fair wrote:
> > From: "Michael Fair" <[EMAIL PROTECTED]>
> > > 4) Microsoft Outlook Express' "Secure Password
> > > Authentication" doesn't seem to work with cyrus.
> > > It complains about CRAM-MD5 failing and thinks
> > > the server doesn't support any authentication
> > > that my Windows 98 machine has on it.
> > > Anyone got any ideas on this one?
> > >
> > Oulook Express only supports the LOGIN mechanism, so you need to compile
> > SASL with '--enable-login'.
> >
>
> I did this after watching the unencrypted network
> traffic and seeing the word LOGIN from the Microsoft
> Client before I posted to the group.
> I probably should have mentioned that before.
> Enabling LOGIN with SASL seems to have made no
> difference to the Outlook Express 5.5 client.
> Here are my imtest results which show that SASL
> is working just fine.
> imtest -u test -a test -m LOGIN localhost works.
> imtest -u test -a test -m PLAIN localhost does not work.
> imtest -u test -a test -t "" -m PLAIN localhost works.
> imtest -u test -a test -m CRAM-MD5 localhost works.
> imtest -u test -a test -m DIGEST-MD5 localhost works.
>
> Any other ideas?
>
> -- Michael --
--
Joe Rhett Chief Technology Officer
[EMAIL PROTECTED] ISite Services, Inc.
PGP keys and contact information: http://www.noc.isite.net/Staff/
