On 03/18/2011 02:57 AM, Martin Waschbuesch wrote:
Sogo indeed supports tls (and ssl) login using plain auto.

Martin

Von meinem iPhone gesendet

Am 17.03.2011 um 17:55 schrieb Eric Shubert<e...@shubes.net>:

On 03/17/2011 09:44 AM, Bharath Chari wrote:
On 03/17/2011 09:37 PM, Eric Shubert wrote:
On 03/17/2011 08:52 AM, Bharath Chari wrote:
On 03/17/2011 07:42 PM, Carlos Herrera Polo wrote:
Sogo looks excelent.... I should install from RPM or sources ??
We have to make a lot of changes ?? Or not ??... Qmailtoaster is a
great MTA... and groupware software is a plus

2011/3/17 Martin Waschbuesch<mar...@waschbuesch.de
<mailto:mar...@waschbuesch.de>>

Hi guys,

I have successfully installed sogo on my toaster, but there are
some issues I still need to work on:

- Auth-backend is ldap and I failed terribly at any attempt to
have more than one mail domain reflected in the ldap tree
- i had to manually set up the ldap tree to reflect that one domain

Luckily, it still solves my immediate problem as I had a
requirement to offer CalDAV&  CardDAV support. Works like a charm!

I don't even know what language(s) sogo's written in. I'm
guessing
the authentication part (at least) is c/c++, but it could be
something else. Would someone like to find out?

Should not be to difficult to do this, even a view might do
the trick..
Sogo is written in Objective-C btw..

Will do some tests soon..

JP

My thought (after my earlier post), was to rig up a view in
MySQL with
appropriate field names, so as not to mess around with sogo
code. Should
be doable in a single domain situation. Will run tests after I
get sogo
set up, and post results.

Bharath

I had a doubt that Sogo may not support md5crypt, which is how the
passwords are stored in the vpopmail database. It looks like that is the
case.

See this link:

http://mail.opengroupware.org/pipermail/sogo/2010-February/005083.html

I haven't found any later references that say that sogo supports
md5crypt, so it looks like the sogo code WILL have to be patched for
authentication against the vpopmail mysql database. Please note that the
patch in the link may be against an earlier release.

Bharath
Does sogo support plain login with TLS/SSL? If so, that should work.

While patching sogo is probably more attractive than patching
vpopmail, perhaps we should make a request to have vpopmail support
whatever it is that sogo is using. (I'm guessing digest-md5).

An _ugly_ workaround would be to use stunnel. Doesn't make too much
sense on localhost though, does it? So, cleartext from a trusted
(localhost) connection may be the simplest way to achieve this. Initial
thoughts only, so don't hold it against me :)

Bharath

---------------------------------------------------------------------------------
I don't have a problem using plain login w/ TLS. In fact, I would use TLS with 
localhost as well (just so I know it works because I'd likely move it to a 
separate host at some point).

As long as TLS (or SSL, but I prefer TLS) is used, plain logins are ok, as 
passwords are not sent in clear text over the wire this way.

The only problem I see with plain logins is that passwords are stored in clear 
text. I don't necessarily recommend this, and it can be a problem in some 
situations. Changing this policy though is a bigger change, and should be 
addressed on its own. Personally, I wouldn't mind seeing QMT move in this 
direction (eliminating the storing of passwords in clear text). We need to be 
sure though that in so doing that all of the other bases (encrypted password 
types) are covered.

--
-Eric 'shubes'
Hi,

Sogo authentication against the vpopmail database on a remote server is working using CRYPT. The latest build of sogo supports it. Login is done using the full email ID. The IMAP folders display as expected. Haven't yet worked on the SMTP part.

Screen shot at http://chari.arachnis.com/sogo.png

This is an initial test. Will keep the list posted on developments.

Bharath

---------------------------------------------------------------------------------
Qmailtoaster is sponsored by Vickers Consulting Group 
(www.vickersconsulting.com)
   Vickers Consulting Group offers Qmailtoaster support and installations.
     If you need professional help with your setup, contact them today!
---------------------------------------------------------------------------------
    Please visit qmailtoaster.com for the latest news, updates, and packages.
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
    For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com


Reply via email to