Hi.  We've continued to see problems from users who are trying to use 
misconfigured IMAP servers which advertise (broken) GSSAPI authn 
support.  Clients want to work around this by avoiding use of GSSAPI; 
the only way to do this currently is to disable the auth_gss 
authenticator if linked in.  This is seen with PHP and was covered in 
this thread a few years ago:

http://mailman2.u.washington.edu/pipermail/imap-uw/2005-June/000101.html

It seems like a rather blunt approach to have to globally disable the 
auth_gss authenticator.  Would you accept a patch to add a new mailbox 
flag like "/nogssapi" which selectively disables GSSAPI support on a 
per-mailbox basis?

Regards, Joe
_______________________________________________
Imap-uw mailing list
Imap-uw@u.washington.edu
http://mailman2.u.washington.edu/mailman/listinfo/imap-uw

Reply via email to