> However, the PLAIN and LOGIN mechanisms send the password over the wire > (base64 > encoded in the case of the LOGIN), so it would be possible to support > crypted > passwords there, but then the plugin couldn't support CRAM-MD5 at all.
Correct, the changes I made won't support crypted passwords with CRAM-MD5, but I think the plugin can still be used in CRAM-MD5 mode with these mods. > Since vpopmail's recommended installation instructions suggesting using > the > '--enable-clear-passwd=y' option, I'm inclined to leave the plugin as is. > The > plugin is documented to require that option. > > Sorry... No problem. I'm running Gentoo Linux which installs vpopmail without clear passwords by default, so I thought I would post these changes for other users out who are also using crypted passwords in the database. Thanks for these plugins - good stuff!
