[imp] Re: IMP and Cyrus - unencrypted login to localhost impossible?

[Markus Gaugusch]

On Nov 21, Tornoci Laszlo <torlasz@xenia.sote.hu> wrote:
> Yes, it is not a problem with IMP. You need to tell Cyrus-imapd not to
> offer anything else but PLAIN as an auth mech, and then you are ok.
> Just make sure imap/notls is used only through localhost (I use iptables
> for this). These lines in /etc/imapd.conf will make Cyrus offer only PLAIN:
>
> allowplaintext: yes
> sasl_mech_list: PLAIN
>
> There is no need to recompile cyrus as someone else suggested on this
> list.
Sorry to bug you, but it didn't work:
dynast:~ # telnet localhost 143
Trying ::1...
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
* OK dynast Cyrus IMAP4 v2.1.9 server ready
. capability
* CAPABILITY IMAP4 IMAP4rev1 ACL QUOTA LITERAL+ MAILBOX-REFERRALS
NAMESPACE UIDPLUS ID NO_ATOMIC_RENAME UNSELECT CHILDREN MULTIAPPEND SORT
THREAD=ORDEREDSUBJECT THREAD=REFERENCES IDLE AUTH=GSSAPI AUTH=CRAM-MD5
AUTH=DIGEST-MD5 AUTH=OTP X-NETSCAPE
. OK Completed

My imapd.conf contains:
configdirectory: /var/lib/imap
partition-default: /var/spool/imap
sievedir: /var/lib/sieve
admins: cyrus
allowanonymouslogin: no
servername: mail.gaugusch.at
reject8bit: no
quotawarn: 90
timeout: 30
poptimeout: 10
dracinterval: 0
drachost: localhost
allowplainwithouttls: yes
allowplaintext: yes
#sasl_auto_transition: yes
sasl_pwcheck_method: saslauthd
sasl_mech_list: PLAIN
lmtp_overquota_perm_failure: no
tls_cert_file: /usr/ssl/certs/cert.pem
tls_key_file: /usr/ssl/certs/skey.pem

I'm using SuSE 8.1 by the way ...

Markus

-- 
_____________________________     /"\
Markus Gaugusch  ICQ 11374583     \ /    ASCII Ribbon Campaign
markus@gaugusch.at                 X     Against HTML Mail
                                  / \
Linux 2.4.19-4GB * Now playing Paradise Lost - 1 - Shades of God