[Tickets #2926] New IMAP Class defaults to CRAM-MD5?

[bugs@bugs.horde.org]

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: http://bugs.horde.org/ticket/?id=2926
-----------------------------------------------------------------------
 Ticket             | 2926
 Updated By         | Michael Slusarz <slusarz at mail.curecanti.org>
 Summary            | New IMAP Class defaults to CRAM-MD5?
 Queue              | MIMP
 Version            | HEAD
-State              | Assigned
+State              | Feedback
 Priority           | 2. Medium
 Type               | Bug
 Owners             | Michael Slusarz
-----------------------------------------------------------------------


Michael Slusarz <slusarz at mail.curecanti.org> (2005-11-06 15:29) wrote:

I can verify that IMAP_Client connects just fine via CRAM-MD5 to a correctly
setup IMAP server.  It is likely that your IMAP server is incorrectly
identifying that it can handle CRAM-MD5 passwords - actually, a better way
to phrase this is that your IMAP server can handle the CRAM-MD5
authentication exchange fine, but the issue is with the authentication db
your IMAP server is connecting to.  A quick test to determine if your IMAP
server should broadcast CRAM-MD5 is as follows: Does the authentication DB
that your IMAP server connect to store its passwords in cleartext.  If the
answer is no, then you can not use CRAM-MD5.