Marco Colombo wrote:
>
> On Wed, 19 Mar 2003, Luca Olivetti wrote:
>
> > Note that if I omit the "-m plain" it will logs me in as user cyrus (so
> > no proxy):
> >
> > $ imtest -a cyrus -u luca localhost
> > S: * OK saturn.wetron.local Cyrus IMAP4 v2.1.12-Mandrake-RPM-2.1.12-1mdk
> > server ready
> > C: C01 CAPABILITY
> > S: * CAPABILITY IMAP4 IMAP4rev1 ACL QUOTA LITERAL+ MAILBOX-REFERRALS
> > NAMESPACE UIDPLUS ID NO_ATOMIC_RENAME UNSELECT CHILDREN MULTIAPPEND SORT
> > THREAD=ORDEREDSUBJECT THREAD=REFERENCES IDLE STARTTLS LISTEXT
> > LIST-SUBSCRIBED ANNOTATEMORE X-NETSCAPE
> > S: C01 OK Completed
> > Please enter your password:
> > C: L01 LOGIN cyrus {7}
> > S: + go ahead
> > C: <omitted>
> > S: L01 OK User logged in
> > Authenticated.
> > Security strength factor: 0
>
> That was the LOGIN command, not AUTHENTICATE. I think it bypasses
> SASL checks in some ways.
It still uses SASL (Cyrus uses SASL for ALL authentication), but
protocol-specific login commands are treated different from SASL mechs.
--
Kenneth Murchison Oceana Matrix Ltd.
Software Engineer 21 Princeton Place
716-662-8973 x26 Orchard Park, NY 14127
--PGP Public Key-- http://www.oceana.com/~ken/ksm.pgp
