7:00pm Sam Varshavchik said:

> Curtis Doty writes:
> 
> > However, the new courier says it can do STLS when it actually cannot. Nor 
> 
> Yes, it can.  More than likely you are running off a default self-signed

Agreed. I was confusing symptoms. It is doing STLS as advertized in the 
CAPA. Even though I don't wish it.

> > How on earth do I positivly disable the STLS CAPA on POP3? Or is this 
> 
> Turn off POP3AUTH_TLS in the pop3d configuration file.

But of course that was the first thing I tried. Along with 
POP3_STARTTLS=NO and then a few more guesses. All to no avail. :-(

Your response however, gave me a second wind. And I eventually found what 
appears to be causing the problem in pop3d.rc. It is sourcing 
etc/pop3d-ssl *after* the expected etc/pop3d conf is sourced.

So that even if I have POP3AUTH_TLS="" in etc/pop3d, it makes no 
difference and STLS is still enabled due to the POP3_STARTTLS=YES 
inadvertently getting sucked in from etc/pop3d-ssl.

One easy hack is to flip the sourcing order in the run commands and then 
explicitly state POP3_STARTTLS=NO in the non-ssl conf. Supposing 
pop3d-ssl.rc will still work with it's different order?

But I'm really not sure if the necesity of all that. WFM, though.

../C

Index: pop3d.rc.in
===================================================================
RCS file: /cvsroot/courier/courier/imap/pop3d.rc.in,v
retrieving revision 1.16
diff -u -r1.16 pop3d.rc.in
--- pop3d.rc.in 2 Jul 2005 01:13:56 -0000       1.16
+++ pop3d.rc.in 9 Nov 2006 06:03:23 -0000
@@ -32,8 +32,8 @@
                [EMAIL PROTECTED]@ ;
                [EMAIL PROTECTED]@ ;
                [EMAIL PROTECTED]@ ;
-               . @sysconfdir@/pop3d ; \
                . @sysconfdir@/pop3d-ssl ; \
+               . @sysconfdir@/pop3d ; \
                PROXY_HOSTNAME=$PROXY_HOSTNAME ; \
                TLS_PROTOCOL=$TLS_STARTTLS_PROTOCOL ; \
                @courierlogger@ -pid=$PIDFILE -start $LOGGEROPTS \
Index: imap/pop3d.dist.in
===================================================================
RCS file: /cvsroot/courier/courier/imap/imap/pop3d.dist.in,v
retrieving revision 1.16
diff -u -r1.16 pop3d.dist.in
--- imap/pop3d.dist.in  5 Jul 2005 12:42:51 -0000       1.16
+++ imap/pop3d.dist.in  9 Nov 2006 06:03:23 -0000
@@ -63,6 +63,10 @@
 
 POP3AUTH_TLS_ORIG="LOGIN PLAIN"
 
+# really truly disable STLS on plain ol' POP3
+#
+POP3_STARTTLS=NO
+
 ##NAME: POP3_PROXY:0
 #
 # Enable proxying.  See README.proxy


-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Courier-imap mailing list
[email protected]
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-imap

Reply via email to