[gentoo-user] IMAP authentication not secure?

[gentoo-user] IMAP authentication not secure?

[Grant]

I've been using claws-mail with my IMAP server.  I'm giving
thunderbird a try but it won't work if I have "Use secure
authentication" checked under "Server Settings".  I thought I had
configured the server to use secure authentication only.  Here is some
of my /etc/postfix/main.cf:

smtpd_sasl_auth_enable = yes
smtpd_sasl2_auth_enable = yes
smtpd_sasl_security_options = noanonymous
smtpd_sasl_local_domain =

smtpd_recipient_restrictions =
        permit_sasl_authenticated,
        permit_mynetworks,
        check_policy_service inet:127.0.0.1:10030
        reject_unauth_destination,
        permit

virtual_alias_maps = hash:/etc/postfix/virtual

message_size_limit = 20480000

smtpd_tls_security_level = may
smtpd_tls_auth_only = yes
smtpd_tls_key_file = /etc/ssl/postfix/server.key
smtpd_tls_cert_file = /etc/ssl/postfix/server.crt
smtpd_tls_CAfile = /etc/ssl/postfix/server.pem
smtpd_tls_session_cache_timeout = 3600s
tls_random_source = dev:/dev/urandom

- Grant
-- 
gentoo-user@lists.gentoo.org mailing list

Re: [gentoo-user] IMAP authentication not secure?

[Alan McKinnon]

On Monday 07 April 2008, Grant wrote:
> I've been using claws-mail with my IMAP server.  I'm giving
> thunderbird a try but it won't work if I have "Use secure
> authentication" checked under "Server Settings".  I thought I had
> configured the server to use secure authentication only.  Here is
> some of my /etc/postfix/main.cf:

That's the *mail*server* config

You need to supply the *imap*server* config

:-)


-- 
Alan McKinnon
alan dot mckinnon at gmail dot com

-- 
gentoo-user@lists.gentoo.org mailing list

Re: [gentoo-user] IMAP authentication not secure?

[Grant]

>  > I've been using claws-mail with my IMAP server.  I'm giving
>  > thunderbird a try but it won't work if I have "Use secure
>  > authentication" checked under "Server Settings".  I thought I had
>  > configured the server to use secure authentication only.  Here is
>  > some of my /etc/postfix/main.cf:
>
>  That's the *mail*server* config
>
>  You need to supply the *imap*server* config

Would it be /etc/courier-imap/imapd or /etc/courier-imap/imapd-ssl?
Any idea what the config option is?

- Grant

>  Alan McKinnon
-- 
gentoo-user@lists.gentoo.org mailing list

Re: [gentoo-user] IMAP authentication not secure?

[kashani]

Grant wrote:
> I've been using claws-mail with my IMAP server.  I'm giving
> thunderbird a try but it won't work if I have "Use secure
> authentication" checked under "Server Settings". 

The secure auth button refers to NTLM which is also called Secure 
Password Authentication (SPA) or Windows Integrated Login. You don't 
need it and your imap server won't support it without jumping through 
some hoops. As long as you're using imap over SSL there is no reason for 
it.

kashani
-- 
gentoo-user@lists.gentoo.org mailing list

Re: [gentoo-user] IMAP authentication not secure?

[Alan McKinnon]

On Monday 07 April 2008, Grant wrote:
> >  You need to supply the *imap*server* config
>
> Would it be /etc/courier-imap/imapd or /etc/courier-imap/imapd-ssl?
> Any idea what the config option is?

Sorry, I'm not familiar enough with courier to assist.

Plenty other people around here do know though so someone ought to be 
along shortly with real advice

-- 
Alan McKinnon
alan dot mckinnon at gmail dot com

--
gentoo-user@lists.gentoo.org mailing list

Re: [gentoo-user] IMAP authentication not secure?

[Grant]

> > I've been using claws-mail with my IMAP server.  I'm giving
> > thunderbird a try but it won't work if I have "Use secure
> > authentication" checked under "Server Settings".
> >
>
>  The secure auth button refers to NTLM which is also called Secure Password
> Authentication (SPA) or Windows Integrated Login. You don't need it and your
> imap server won't support it without jumping through some hoops. As long as
> you're using imap over SSL there is no reason for it.
>
>  kashani

Thanks Kashani and Alan.  I thought I had a good setup.

- Grant
-- 
gentoo-user@lists.gentoo.org mailing list

Re: [gentoo-user] IMAP authentication not secure?

[Iain Buchanan]

On Mon, 2008-04-07 at 15:35 -0700, Grant wrote:
> > > I've been using claws-mail with my IMAP server.  I'm giving
> > > thunderbird a try but it won't work if I have "Use secure
> > > authentication" checked under "Server Settings".
> > >
> >
> >  The secure auth button refers to NTLM which is also called Secure Password
> > Authentication (SPA) or Windows Integrated Login. You don't need it and your
> > imap server won't support it without jumping through some hoops. As long as
> > you're using imap over SSL there is no reason for it.
> >
> >  kashani
> 
> Thanks Kashani and Alan.  I thought I had a good setup.

to be sure, just packet sniff it :)
-- 
Iain Buchanan <iaindb at netspace dot net dot au>

That feeling just came over me.
		-- Albert DeSalvo, the "Boston Strangler"

-- 
gentoo-user@lists.gentoo.org mailing list