Dear Mark,

Here is what I get (anonymized a bit for the list):

first, for imap:
[<prompt>:~] bonomo% grep imap /etc/services
imap            143/udp     # Internet Message Access Protocol
imap            143/tcp     # Internet Message Access Protocol
imap3           220/udp     # Interactive Mail Access Protocol v3
imap3           220/tcp     # Interactive Mail Access Protocol v3
imap4-ssl       585/udp     # IMAP4+SSL (use 993 instead)
imap4-ssl       585/tcp     # IMAP4+SSL (use 993 instead)
imaps           993/udp     # imap4 protocol over TLS/SSL
imaps           993/tcp     # imap4 protocol over TLS/SSL
[<prompt>:~] bonomo% telnet <host.domain> 143
Trying 144.92.179.82...
Connected to <host.domain>.
Escape character is '^]'.
* OK [CAPABILITY IMAP4REV1 LITERAL+ SASL-IR LOGIN-REFERRALS AUTH=LOGIN] <host.domain> IMAP4rev1 2004.357 at Thu, 3 Nov 2005 10:31:29 -0600 (CST)
a01 login bonomo
a01 BAD Missing or invalid argument to LOGIN
a02 login bonomo <password>
a02 NO LOGIN failed
a03 logout
* BYE <host-domain> IMAP4rev1 server terminating connection
a03 OK LOGOUT completed
Connection closed by foreign host.

then pop3:
[<prompt>:~] bonomo% grep pop /etc/services
##########      106        Unauthorized use by insecure poppassd protocol
pop2            109/udp     # Post Office Protocol - Version 2
pop2            109/tcp     # Post Office Protocol - Version 2
pop3            110/udp     # Post Office Protocol - Version 3
pop3            110/tcp     # Post Office Protocol - Version 3
hybrid-pop      473/udp     # hybrid-pop
hybrid-pop      473/tcp     # hybrid-pop
pop3s           995/udp     # pop3 protocol over TLS/SSL (was spop3)
pop3s           995/tcp     # pop3 protocol over TLS/SSL (was spop3)
[<prompt>:~] bonomo% telnet <host.domain> 110
Trying <IP number>...
Connected to <host.domain>.
Escape character is '^]'.
+OK POP3 <host.domain> 2004.89 server ready
user bonomo
+OK User name accepted, password please
pass <password>
-ERR Bad login
quit
+OK Sayonara
Connection closed by foreign host.
[<prompt>:~] bonomo%

system.log shows:

Nov 3 10:32:09 Richard-Bonomos-Computer imapd[28968]: Login failed user=bonomo auth=bonomo host=<host.domain> [<IP number>] Nov 3 10:37:03 Richard-Bonomos-Computer ipop3d[28976]: Login failed user=bonomo auth=bonomo host=<host.domain> [<IP number>]

What do you make of it?

Rich

On Wed, 2 Nov 2005, Mark Crispin wrote:

On Wed, 2 Nov 2005, Richard Bonomo wrote:
Logins are still failing.
Unless I have a bright idea overnight, I will probably take
you up on your offer tomorrow.

Quick thing for you to check. When you get the greeting banner from imapd, does LOGINDISABLED show up in the list of capabilities? That is, do you see something like:

* OK [CAPABILITY IMAP4REV1 LITERAL+ SASL-IR LOGIN-REFERRALS STARTTLS LOGINDISABLED] imap.example.com IMAP4rev1 2005.362 at Wed, 2 Nov 2005 14:53:26 -0800 (PST)

If so, then you haven't successfully overcome the "no password authentication in non-SSL/TLS sessions" facility.

-- Mark --

http://staff.washington.edu/mrc
Science does not emerge from voting, party politics, or public debate.
Si vis pacem, para bellum.


--
************************************************
Richard Bonomo
UW Space Astronomy Laboratory
ph: (608) 263-4683 telefacsimile: (608) 263-0361
SAL-related email: [EMAIL PROTECTED]
all other email: [EMAIL PROTECTED]
web page URL: http://www.cae.wisc.edu/~bonomo
************************************************
_______________________________________________
Imap-uw mailing list
Imap-uw@u.washington.edu
https://mailman1.u.washington.edu/mailman/listinfo/imap-uw

Reply via email to