[...]
>> What about SASL?
>> SASL has different 'Login realms' - use the domain as realm.
> The problem is that email clients don't supply the realm
> information when they authenticate.  If they log in as
> their email address then this isn't a problem because
> the login name contains the domain info but the "holy
> grail" in my mind's eye would be to allow [EMAIL PROTECTED]
> and [EMAIL PROTECTED] to both be able to authenticate as "bob".

IMHO SASL is the right way to do it. In time, clients probably will
support SASL realms (just a matter of time before Microsoft realize the
power of ADS/LDAP).

OBTW: I'm not sure how Cyrus Imapd pass a login realm to SASL (does the
imap server support this?)

--  
Ørnulf Nielsen

Reply via email to