It might be interesting to add that only certain mechanism provide so-called "proxy" authentication (authcid/authzid separation; how would this feature be called ?). PLAIN and DIGEST-MD5 are the one I know for sure provide it, while CRAM-MD5 don't. I am not sure about GSSAPI, EXTERNAL and other.
-- Etienne Goyer Linux Québec Technologies Inc. http://www.LinuxQuebec.com [EMAIL PROTECTED]