Hi Michael,
My question is, how to know the exact CAPABILITY after a user logged in, he'd 
have been able to know the CAPABILITY he really has.
Simply, what should be followed as the CAPABILITY after a user logged in?


-----Original Message-----
From: [email protected] 
[mailto:[email protected]] On Behalf Of ext 
Michael M. Slusarz
Sent: 28 March 2009 01:46
To: [email protected]
Subject: Re: [Dovecot] [Help] How get the complete CAPABILITY list?

Quoting [email protected]:

> A Login user1 <user1's pwd>
> A CAPABILITY
>
> I expect to get the list that contains the following -
> AUTH=PLAIN AUTH=LOGIN AUTH=CRAM-MD5 AUTH=DIGEST-MD5
>
> But actually I did not get the above content, I only get a short list
> as below,
>
> CAPABILITY IMAP4rev1 SASL -IR SORT THREAD=REFERENCES MULTIAPPEND
> UNSELECT LITERAL+ IDLE CHILDREN NAMESPACE LOGIN-REFERRALS
>  A OK Capability completed
>
> Why did I miss the AUTH=PLAIN AUTH=LOGIN AUTH=CRAM-MD5 AUTH=DIGEST-MD5??

Once you login, the list of available authentication methods is  
irrelevant.  The RFC allows the CAPABILITY string to be different in  
unauthenticated vs. authenticated state.

michael

Reply via email to