[gentoo-user] OT - 2 Questions

[gentoo-user] OT - 2 Questions

[Michael Sullivan]

I upgraded dovecot the other day to 1.0.beta3 and I was altering the
configuration file trying to get it to work when I discovered something
disturbing:  our passwords were being trasmitted unencrypted across the
Internet!  At least now I know it.  You can gripe at me all you want,
but I've learned my lesson.  Now to fix it.  I tried setting the default
authentication method to "digest-md5" and restarting dovecot, but it
gave me an error that no authentication database existed for checking
with digest-md5.  How do I generate one?

My second question was about a PaperPort 6100 parallel port scanner that
I recently inherited.  Can anyone point me to a Gentoo-specific or
otherwise easy-to-understand howto for getting it working?  I tried
googling it, but all the results were for USB scanners...
-Michael Sullivan-

-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] OT - 2 Questions

[Ernie Schroder]

On Thursday 23 February 2006 14:36, a tiny voice compelled Michael Sullivan to 
write:

> PaperPort 6100
from:
http://www.sane-project.org/sane-backends.html

PaperPort 6100 	Parport 	unsupported 	Most probably not supported. More 	                          
details would be appreciated.

-- 
Regards, Ernie
-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] OT - 2 Questions

[Michael Sullivan]

On Thu, 2006-02-23 at 15:41 -0500, Ernie Schroder wrote:
> On Thursday 23 February 2006 14:36, a tiny voice compelled Michael Sullivan to 
> write:
> 
> > PaperPort 6100
> from:
> http://www.sane-project.org/sane-backends.html
> 
> PaperPort 6100 	Parport 	unsupported 	Most probably not supported. More 	                          
> details would be appreciated.
> 
> -- 
> Regards, Ernie

What more details do you need, and how would I go about getting them for
you?  This is my first scanner, and I know barely anything about
hardware to begin with...

-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] OT - 2 Questions

[Ernie Schroder]

On Thursday 23 February 2006 16:44, a tiny voice compelled Michael Sullivan to 
write:
> On Thu, 2006-02-23 at 15:41 -0500, Ernie Schroder wrote:
> > On Thursday 23 February 2006 14:36, a tiny voice compelled Michael
> > Sullivan to
> >
> > write:
> > > PaperPort 6100
> >
> > from:
> > http://www.sane-project.org/sane-backends.html
> >
> > PaperPort 6100 	Parport 	unsupported 	Most probably not supported. More
> > details would be appreciated.
> >
> > --
> > Regards, Ernie
>
> What more details do you need, and how would I go about getting them for
> you?  This is my first scanner, and I know barely anything about
> hardware to begin with...


The sane page was asking for more details... If you knew the chipset the 
scanner uses, you might be able to find another supported scanner who's 
backend might work. It's also possible that Visionair didn't make the 
scanner, but rebranded someone else's design.
You might join the Sane-devel list and ask if anyone has had success.
http://lists.alioth.debian.org/mailman/listinfo/sane-devel

-- 
Regards, Ernie
-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] OT - 2 Questions

[Alexander Skwar]

Michael Sullivan wrote:
> On Thu, 2006-02-23 at 15:41 -0500, Ernie Schroder wrote:

>> http://www.sane-project.org/sane-backends.html


> What more details do you need, and how would I go about getting them for
> you?  This is my first scanner, and I know barely anything about
> hardware to begin with...

I don't think that Ernie needs more details. The sane project
needs more details.

Maybe it would help, if you donate one of the scanners to them.
But I doubt that. More probably, they'll need programming
documentation. And you don't have that - only the manufacturer
has.

IOW: Bad luck, pal. Buy a better supported scanner.

Alexander Skwar
-- 
I just got my PRINCE bumper sticker ... But now I can't remember WHO he is ...
-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] OT - 2 Questions

[darren kirby]

[-- Attachment #1: Type: text/plain, Size: 793 bytes --]

quoth the Michael Sullivan:
> I upgraded dovecot the other day to 1.0.beta3 and I was altering the
> configuration file trying to get it to work when I discovered something
> disturbing:  our passwords were being trasmitted unencrypted across the
> Internet!

Well, strait from the RFC we learn that POP3 protocol is plain text.

Before settling on digest-md5 (or any other method) for authentication you may 
want to check that the clients you will be using support it. This 
documentation will get you up to speed on your options:
http://wiki.dovecot.org/Authentication

-d
-- 
darren kirby :: Part of the problem since 1976 :: http://badcomputer.org
"...the number of UNIX installations has grown to 10, with more expected..."
- Dennis Ritchie and Ken Thompson, June 1972

[-- Attachment #2: Type: application/pgp-signature, Size: 191 bytes --]

Re: [gentoo-user] OT - 2 Questions

[Michael Sullivan]

On Thu, 2006-02-23 at 23:53 -0800, darren kirby wrote:
> quoth the Michael Sullivan:
> > I upgraded dovecot the other day to 1.0.beta3 and I was altering the
> > configuration file trying to get it to work when I discovered something
> > disturbing:  our passwords were being trasmitted unencrypted across the
> > Internet!
> 
> Well, strait from the RFC we learn that POP3 protocol is plain text.
> 
> Before settling on digest-md5 (or any other method) for authentication you may 
> want to check that the clients you will be using support it. This 
> documentation will get you up to speed on your options:
> http://wiki.dovecot.org/Authentication
> 
> -d
Based on what I read at the link you sent me, I think what I want is the
following:

CRAM-MD5: Protects the password in transit against eavesdroppers.
Somewhat good support in clients.

The problem is that the web site doesn't tell me how to create a
CRAM-MD5 password database...

-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] OT - 2 Questions

[kashani]

Michael Sullivan wrote:
> Based on what I read at the link you sent me, I think what I want is the
> following:
> 
> CRAM-MD5: Protects the password in transit against eavesdroppers.
> Somewhat good support in clients.
> 
> The problem is that the web site doesn't tell me how to create a
> CRAM-MD5 password database...
> 

Why not use tls/ssl with imaps?
http://wiki.dovecot.org/MainConfig#head-cd53a8f9b61ccdaf56665ce9819bd5dfea7a554c

kashani
-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] OT - 2 Questions

[Mike Williams]

On Friday 24 February 2006 15:58, Michael Sullivan wrote:
> Based on what I read at the link you sent me, I think what I want is the
> following:
>
> CRAM-MD5: Protects the password in transit against eavesdroppers.
> Somewhat good support in clients.
>
> The problem is that the web site doesn't tell me how to create a
> CRAM-MD5 password database...

CRAM-MD5 isn't a good choice.
The password is sent as a hash, based on a randomly generated per connection 
string. This means you have no choice but to have the password in plain text 
on the server to check against.
Like kashani says, use tls/ssl.

-- 
Mike Williams
-- 
gentoo-user@gentoo.org mailing list