Mailinglist Archive: opensuse (868 mails)

[Cristian Rodríguez <crrodriguez@xxxxxxxxxxxx>]

El 12/05/11 10:48, Yu Meng Chong escribió:
> Hi all, 
>
> So, now I have my little Cyrus IMAP server running and I've created a
> user and tested successfully using imtest. I decided to try to test
> the IMAP server by using telnet.
>
> cyrus@linux-zuge:~> telnet localhost imap
> Trying 127.0.0.1...
> Connected to localhost.
> Escape character is '^]'.
> * OK [CAPABILITY IMAP4 IMAP4rev1 LITERAL+ ID LOGINDISABLED
> * AUTH=CRAM-MD5 AUTH=DIGEST-MD5 SASL-IR COMPRESS=DEFLATE] linux-zuge
> * Cyrus IMAP v2.3.16 server ready
> . login ahkow@xxxxxxxx pass1234
> . NO Login only available under a layer
> . logout
> * BYE LOGOUT received
> . OK Completed
> Connection closed by foreign host.
>  
> The password is correct because I used it with imtest, but I could
> also specify that I was using DIGEST-MD5 in imtest. Do I need to make
> a MD5 hash of my password and enter it when I login with telnet? If
> so, how do I generate the MD5 hash of "pass1234"? 

they key here is "LOGINDISABLED"

"LOGINDISABLED is an IMAP extension which means: The server is
configured to reject plaintext login. The client has to use either TLS
or a challenge/response mechanism such as CRAM-MD5."

Enabling plaintext login or using CRAM-MD5 is a really bad idea, and
your server does not seems to expose capability STARTTLS.


-- 
To unsubscribe, e-mail: opensuse+unsubscribe@xxxxxxxxxxxx
For additional commands, e-mail: opensuse+help@xxxxxxxxxxxx