Re: Kerberos support in Thunderbird

2005-09-27 Thread ch0w
This is the only thread I could Google that has anything remotely on the topic of Kerberos-compatibility in Thunderbird. However, I'm having a very difficult time following the thread discussion. Thunderbird imported my Eudora settings (which works for me), but upon Get Mail I always get the

Re: Kerberos support in Thunderbird

2005-09-26 Thread Jeffrey Altman
ch0w wrote: This is the only thread I could Google that has anything remotely on the topic of Kerberos-compatibility in Thunderbird. However, I'm having a very difficult time following the thread discussion. Thunderbird imported my Eudora settings (which works for me), but upon Get Mail I

Re: Kerberos support in Thunderbird

2005-09-15 Thread Andreas Hasenack
On Mon, Sep 12, 2005 at 10:43:42PM +, Jim Alexander wrote: I meant to also add that I think it is generally considered bad form to silently fall back to a weaker security mechanism when a stronger on fails. I want to be able to configure my mail client to use GSSAPI, and if it fails, I

Re: Kerberos support in Thunderbird

2005-09-15 Thread Jim Alexander
In article [EMAIL PROTECTED], Sam Hartman [EMAIL PROTECTED] wrote: ] ]sorry, but I'm fairly sure the GSSAPI SASL mechanism falls within the ]definition of IMAP secure authentication. Yes, I wasn't at all clear what I meant there. I was not referring to the general definition of secure

Re: Kerberos support in Thunderbird

2005-09-15 Thread Simon Wilkinson
Sam Hartman wrote: Jim (b) If my ticket cache is empty, Thunderbird correctly posts Jim a your server does not support secure authentication Jim dialog. My key manager never prompts me to obtain a ticket. On Mac and Windows this is not at all what I'd expect. I'd expect you to

Re: Kerberos support in Thunderbird

2005-09-14 Thread Jim Alexander
In article [EMAIL PROTECTED], Simon Wilkinson [EMAIL PROTECTED] wrote: ]At the moment, if the 'Use Secure Authentication' option is set for a ]given protocol, the server at the other end offers GSSAPI as one of its ]supported SASL mechanisms, and the first call to init_secure_context for ]that

Re: Kerberos support in Thunderbird

2005-09-14 Thread Jim Alexander
I meant to also add that I think it is generally considered bad form to silently fall back to a weaker security mechanism when a stronger on fails. I want to be able to configure my mail client to use GSSAPI, and if it fails, I want to be told that it failed, not fall back and perhaps successfully

Re: Kerberos support in Thunderbird

2005-09-14 Thread Sam Hartman
Jeffrey == Jeffrey Hutzelman [EMAIL PROTECTED] writes: Jeffrey On Monday, September 12, 2005 15:13:27 + Jeffrey Jeffrey Altman Jeffrey [EMAIL PROTECTED] wrote: This can end up causing some problems for end users. It is entirely possible for the GSSAPI authentication

Re: Kerberos support in Thunderbird

2005-09-14 Thread Sam Hartman
Jim == Jim Alexander [EMAIL PROTECTED] writes: Jim In article [EMAIL PROTECTED], Jim Simon Wilkinson [EMAIL PROTECTED] wrote: Jim ]At the moment, if the 'Use Secure Authentication' option is Jim set for a ]given protocol, the server at the other end offers Jim GSSAPI as one

Re: Kerberos support in Thunderbird

2005-09-14 Thread Sam Hartman
Jim == Jim Alexander [EMAIL PROTECTED] writes: Jim I meant to also add that I think it is generally considered Jim bad form to silently fall back to a weaker security mechanism Jim when a stronger on fails. I want to be able to configure my Jim mail client to use GSSAPI, and if

Re: Kerberos support in Thunderbird

2005-09-12 Thread Jeffrey Altman
Simon Wilkinson wrote: On Mac OS X and with KFW on Windows, you may also want to specify the name of the ccache to use. How do you do this from within the GSSAPI? At the moment, via the KRB5CCNAME environment variable. (Yes, I know, its not thread safe to do so) What test is Thunderbird

Re: Kerberos support in Thunderbird

2005-09-12 Thread Jeffrey Hutzelman
On Monday, September 12, 2005 15:13:27 + Jeffrey Altman [EMAIL PROTECTED] wrote: This can end up causing some problems for end users. It is entirely possible for the GSSAPI authentication to succeed and yet the user will be unable to access the mailbox they are attempting to reach because

Re: Kerberos support in Thunderbird

2005-09-12 Thread Ken Hornstein
The Thunderbird beta (1.5b1) that was released yesterday contains new support for Kerberos/GSSAPI authentication against POP3, IMAP and SMTP servers. It would be really good to get some test coverage against different servers, and in different environments. I originally wrote and tested the code

Re: Kerberos support in Thunderbird

2005-09-11 Thread Markus Moeller
Simon, is there also somewhere a documentation of how to enable it ? I didn't see any option when setting up an account nor for an outgoing smtp server. Thank you Markus Simon Wilkinson [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] The Thunderbird beta (1.5b1) that was released

Re: Kerberos support in Thunderbird

2005-09-11 Thread Mark Sirota
--On Sunday, September 11, 2005 6:27 PM +0100 Markus Moeller [EMAIL PROTECTED] wrote: is there also somewhere a documentation of how to enable it ? I didn't see any option when setting up an account nor for an outgoing smtp server. Make sure Use Secure Authentication is checked in the Security

Re: Kerberos support in Thunderbird

2005-09-11 Thread Jim Alexander
In article [EMAIL PROTECTED], Simon Wilkinson [EMAIL PROTECTED] wrote: ]The Thunderbird beta (1.5b1) that was released yesterday contains new ]support for Kerberos/GSSAPI authentication against POP3, IMAP and SMTP ]servers. ] ]It would be really good to get some test coverage against different

Kerberos support in Thunderbird

2005-09-10 Thread Simon Wilkinson
The Thunderbird beta (1.5b1) that was released yesterday contains new support for Kerberos/GSSAPI authentication against POP3, IMAP and SMTP servers. It would be really good to get some test coverage against different servers, and in different environments. I originally wrote and tested the code

Re: Kerberos support in Thunderbird

2005-09-10 Thread Markus Moeller
Does the Unix version work with Heimdal, MIT and others ? Thanks Markus Simon Wilkinson [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] The Thunderbird beta (1.5b1) that was released yesterday contains new support for Kerberos/GSSAPI authentication against POP3, IMAP and SMTP