I already tried to configure squirrelmail using all login methods, although
i have nothing special configured (like MD5 or TLS).
BTW i believe it is $imap_auth_mech not $imap_auth_meth.

Below there is a connect to my imap server. There is one word which cought
my attention: "LOGINDISABLED".  This is not good i guess.
---
platform6:/home/dampee# telnet localhost 143
Trying 127.0.0.1...
Connected to platform6.
Escape character is '^]'.
* OK [CAPABILITY IMAP4REV1 LOGIN-REFERRALS STARTTLS LOGINDISABLED] platform6
IMAP4rev1 2003.339 at Tue, 14 Jun 2005 11:45:15 +0200 (CEST)
001 Capability
* CAPABILITY IMAP4REV1 IDLE NAMESPACE MAILBOX-REFERRALS BINARY UNSELECT SCAN
SORT THREAD=REFERENCES THREAD=ORDEREDSUBJECT MULTIAPPEND LOGIN-REFERRALS
STARTTLS LOGINDISABLED
001 OK CAPABILITY completed
---

In meanwhile, I also tried to connect using Microsoft Outlook express (...
yes yes), but no luck either.

Option 1: (Allow plain text logins) is ok for me, there on the same machine.
The question is... How do i do that?

Option 2: Been there, done that, no luck...

Kind regards
Damiaan

----- Original Message -----
From: Dennis Stosberg <[EMAIL PROTECTED]>
To: <debian-user@lists.debian.org>
Sent: Tuesday, June 14, 2005 11:37 AM
Subject: Re: Sarge Upgrade Problem Webmail (Imap)
The error message tells you that your imap server does not allow a
plain text login.  This is usually good practice, since passwords
are transmitted over the wire in clear text with this authentication
method.

However, your squirrelmail was configured to do plain authentication
only.  So squirrelmail and your imap server share no common
authentication method and thus cannot communicate.

Option 1: Allow plain text logins on your imap server.  Only do
          this if your squirrelmail web server and the imap server
          are on the same machine.  And even then make sure the
          imap server accepts plain text logins from the loop
          interface only.

Option 2: Make squirrelmail use a more secure authentication
          method.  Have a look at "/etc/squirrelmail/conf.pl",
          esp. on $imap_auth_meth and $use_imap_tls.

To see which authentication methods your imap server supports you can
telnet into it:

[EMAIL PROTECTED]:~# telnet localhost 143
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
* OK IMAP4 ready.
001 capability
* CAPABILITY IMAP4 IMAP4rev1 IDLE AUTH=LOGIN AUTH=CRAM-MD5
001 OK CAPABILITY completed
001 logout

Regards,
Dennis

Am 14.06.2005 um 09:06 schrieb VFJ - Damiaan Peeters:

> When i try to log in i get the error message:
> ERROR:
> Bad request: The IMAP server is reporting that plain text logins
> are disabled. Using CRAM-MD5 or DIGEST-MD5 authentication instead
> may work. Also, the use of TLS may allow SquirrelMail to
> login. Please contact your system administrator and report this
> error.
>
> I am not very familiar with (very) advanced server configuration
> (mail & apache), but i do understand very good the basics and
> basic security issues.
>
> What is the best (easiest?) way to fix this?


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to