[imp] PHP Upgrade Changes Default IMP Authentication Method

Evans, Tim Tim_Evans@troweprice.com
Tue, 11 Dec 2001 14:34:13 -0500


> Quoting "Evans, Tim" <Tim_Evans@troweprice.com>:
> 
> > Current Config (Needing Upgrade)
> > --------------------------------
> > IMP 2.2.3, horde 1.2.3, php 4.0.3pl1, cyrus imapd 1.6.24, cyrus sasl
> > 1.5.24, pam_mysql 0.4.5
> >
> > Replacing php with 4.0.6 causes IMP login to default to 
> CRAM-MD5, rather
> > than the current plaintext.  Is this default changed in 
> 4.0.6; how to
> > revert to plaintext?
> 
> Yes, 4.0.6 got the crammd5 authenticator added.  It only uses 
> it if the 
> server advertises the crammd5 capability.  You should be able 
> to force 
> plaintext on the server side.

Well, turns out that, since there was no data in the SASL CRAM-MD5 database
(/etc/sasldb), simply removing it forces PHP/IMP to fall through the
plaintext authentication.  Cyrus imapd *always* uses CRAM-MD5 if the
database exists; if not, it goes on to other methods.

Thanks.  Now, to the other upgrades...
--
Tim Evans, T.Rowe Price Investment Technologies   | tkevans@troweprice.com
P.O. Box 89000, Baltimore, MD 21289-0374          | (410) 345-8134
http://www.troweprice.com/ Invest with Confidence | (410) 345-8150 (Fax)