Communicating kerberos password expiration

Jason L Tibbitts III tibbs at math.uh.edu
Tue Feb 17 11:12:25 EST 2015


Thanks for your response!

>>>>> "DW" == Dan White <dwhite at olp.net> writes:

DW> I haven't found it common for IMAP clients to display Quota alerts,
DW> but I haven't extensively tested. Squirrel mail, and perhaps Horde,
DW> will display Quota Alerts, so it's possible that it would display
DW> any alert provided by the imap server.

Interesting.  I figure the most common clients would be thunderbird,
outlook express, whatever mail client Apple is shipping by default, the
default iOS and Android clients, and maybe K9 mail and its derivatives
(because it's what I recommend to users).  Looks like I'll need to do
some testing.

DW> There is an annotation (/comment) which you can set per mailbox,
DW> which should result in an alert being displayed:

DW> https://cyrusimap.org/mediawiki/index.php/FAQ

Oh, neat.  This is great.

DW> I'm unfamiliar with the EXPIRED response code or what Cyrus' plans
DW> are for supporting it.

I only found it by searching; it's documented in RFC5530:

   EXPIRED
       Either authentication succeeded or the server no longer had the
       necessary data; either way, access is no longer permitted using
       that passphrase.  The client or user should get a new passphrase.

       C: d login "fred" "foo"
       S: d NO [EXPIRED] That password isn't valid any more

 - J<


More information about the Info-cyrus mailing list