Re: A question about plain and cram-md5 authentication mechanisms

2009-11-13 Thread Ali Majdzadeh
Patrick, Hi Thanks for your reply and for your attention. I think it would be better to find a solution so that we can utilize these two authentication mechanisms. Thanks again. Warm Regards Ali Majdzadeh Kohbanani 2009/11/13 Ali Majdzadeh > Patrick, > Hi > Thanks for your reply and for your a

Re: A question about plain and cram-md5 authentication mechanisms

2009-11-11 Thread Patrick Ben Koetter
* Ali Majdzadeh : > Viktor, > Thanks for your attention. You are right, but unfortunately we have got some > in-house developed mail clients which are bound to use cram-md5 > authentication mechanism. Well, I think I should investigate on integrating > LDAP to our architecture and figure out the ne

Re: A question about plain and cram-md5 authentication mechanisms

2009-11-11 Thread Patrick Ben Koetter
* Ali Majdzadeh : > Patrick, > Thanks a lot for your help. I will test the mentioned configuration and will > post the results to the list. I hope it works. Unfortunately, I do not have > so much knowledge about LDAP, but I do know that it is possible to store > Kerberos principals in an LDAP struc

Re: A question about plain and cram-md5 authentication mechanisms

2009-11-11 Thread Ali Majdzadeh
Viktor, Thanks for your attention. You are right, but unfortunately we have got some in-house developed mail clients which are bound to use cram-md5 authentication mechanism. Well, I think I should investigate on integrating LDAP to our architecture and figure out the new opportunities. Thanks agai

Re: A question about plain and cram-md5 authentication mechanisms

2009-11-11 Thread Ali Majdzadeh
Patrick, Thanks a lot for your help. I will test the mentioned configuration and will post the results to the list. I hope it works. Unfortunately, I do not have so much knowledge about LDAP, but I do know that it is possible to store Kerberos principals in an LDAP structure. Well, I don't know whe

Re: A question about plain and cram-md5 authentication mechanisms

2009-11-11 Thread Victor Duchovni
On Wed, Nov 11, 2009 at 11:21:33AM +0330, Ali Majdzadeh wrote: > mech_list: gssapi plain > pwcheck_method: saslauthd > saslauthd_path: /var/run/saslauthd/mux > keytab: /etc/krb5.keytab > > and I am able to use GSSAPI and PLAIN (Over PAM using pam_krb5.so) > mechanisms. How is it possible to add c

Re: A question about plain and cram-md5 authentication mechanisms

2009-11-11 Thread Patrick Ben Koetter
* Ali Majdzadeh : > Patrick, > Thanks for your reply. So if I have concluded correctly, the following > configuration is the one which should bring together gssapi, plain and > cram-md5 authentication mechanisms: It should. I have never done this myself. > pwcheck_method: saslauthd auxprop > mech

Re: A question about plain and cram-md5 authentication mechanisms

2009-11-11 Thread Ali Majdzadeh
Patrick, Thanks for your reply. So if I have concluded correctly, the following configuration is the one which should bring together gssapi, plain and cram-md5 authentication mechanisms: pwcheck_method: saslauthd auxprop mech_list: gssapi plain cram-md5 saslauthd_path: /var/run/saslauthd/mux keyta

Re: A question about plain and cram-md5 authentication mechanisms

2009-11-11 Thread Patrick Ben Koetter
* Ali Majdzadeh : > Patrick, > Hi > Thanks for your mail. I use the following options in smtpd.conf: > > mech_list: gssapi plain > pwcheck_method: saslauthd > saslauthd_path: /var/run/saslauthd/mux > keytab: /etc/krb5.keytab > > and I am able to use GSSAPI and PLAIN (Over PAM using pam_krb5.so) >

Re: A question about plain and cram-md5 authentication mechanisms

2009-11-11 Thread Ali Majdzadeh
Suomi, Thanks for your mail. I do not use LDAP, instead I use PAM and I want to have the following authentication mechanisms together: PLAIN (over PAM, pam_krb5.so and saslauthd) GSSAPI CRAM-MD5 Currently, two of these work fine together; plain and gssapi, but I am not able to get cram-md5 workin

Re: A question about plain and cram-md5 authentication mechanisms

2009-11-11 Thread Ali Majdzadeh
Patrick, Hi Thanks for your mail. I use the following options in smtpd.conf: mech_list: gssapi plain pwcheck_method: saslauthd saslauthd_path: /var/run/saslauthd/mux keytab: /etc/krb5.keytab and I am able to use GSSAPI and PLAIN (Over PAM using pam_krb5.so) mechanisms. How is it possible to add

Re: A question about plain and cram-md5 authentication mechanisms

2009-11-11 Thread suomi
Hi Ali i had problems using login, plain, cram-md5 and digest-md5 (all toghether) through saslauthd. At this site, all mail parameters are in LDAP, so i had to tell saslauthd to get the authentication parameters from LDAP. For the tests, i had inserted the passwords in plaintext into LDAP. But

Re: A question about plain and cram-md5 authentication mechanisms

2009-11-10 Thread Ali Majdzadeh
Patrick, Hi Thanks for your mail. I use the following options in smtpd.conf: mech_list: gssapi plain pwcheck_method: saslauthd saslauthd_path: /var/run/saslauthd/mux keytab: /etc/krb5.keytab and I am able to use GSSAPI and PLAIN (Over PAM using pam_krb5.so) mechanisms. How is it possible to add c

Re: A question about plain and cram-md5 authentication mechanisms

2009-11-10 Thread Patrick Ben Koetter
* Ali Majdzadeh : > Hello All > Is it possible to have both PLAIN and CRAM-MD5 authentication > mechanisms using SASL? Yes. The password must be stored as plaintext. Then plaintext and shared-secret mechanisms will work. p...@rick -- All technical questions asked privately will be automatically

Re: A question about plain and cram-md5 authentication mechanisms

2009-11-10 Thread Magnus Bäck
On Wed, November 11, 2009 7:29 am, Ali Majdzadeh said: > Is it possible to have both PLAIN and CRAM-MD5 authentication > mechanisms using SASL? Yes. -- Magnus Bäck mag...@dsek.lth.se

A question about plain and cram-md5 authentication mechanisms

2009-11-10 Thread Ali Majdzadeh
Hello All Is it possible to have both PLAIN and CRAM-MD5 authentication mechanisms using SASL? Best Regards Ali Majdzadeh Kohbanani