<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">Why would you want to, you are already using TLS so what do you expect to gain?<div class=""><span style="font-family: Menlo-Regular; font-size: 11px;" class="">plaintext+TLS</span></div><div class=""><div class=""><br class=""></div><div class="">md5 suffers from multiple inadequacies - so it seems pretty pointless to me.</div><div class=""><br class=""></div><div class=""><br class=""></div><div class="">M<br class=""><div class="">
<div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">--<br class="">Merlin Hartley<br class="">Computer Officer</div><div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">MRC Mitochondrial Biology Unit</div><div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">Cambridge, CB2 0XY</div><div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">United Kingdom</div></div></div>
</div>
<br class=""><div><blockquote type="cite" class=""><div class="">On 8 Oct 2017, at 21:21, Walter H. via Info-cyrus <<a href="mailto:info-cyrus@lists.andrew.cmu.edu" class="">info-cyrus@lists.andrew.cmu.edu</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div class="">Hello,<br class=""><br class="">when setting in squirrelmail<br class="">$imap_auth_mech = 'cram-md5';<br class="">or<br class="">$imap_auth_mech = 'digest-md5';<br class="">then the following is logged in /etc/maillog<br class=""><br class="">Oct 8 14:59:41 imap-host imaps[2042]: accepted connection<br class="">Oct 8 14:59:41 imap-host imaps[2042]: imapd:Loading DH parameters from file<br class="">Oct 8 14:59:41 imap-host imaps[2042]: SSL_accept() incomplete -> wait<br class="">Oct 8 14:59:41 imap-host imaps[2042]: SSL_accept() succeeded -> done<br class="">Oct 8 14:59:41 imap-host imaps[2042]: starttls: TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits new) no authentication<br class="">Oct 8 14:59:42 imap-host imaps[2042]: badlogin: host-running-squirrel [IPv6-running-squirrel] DIGEST-MD5 [SASL(-13): user not found: no secret in database]<br class=""><br class="">but, when setting in squirrelmail<br class="">$imap_auth_mech = 'login';<br class="">then the following is logged and it works ...<br class=""><br class="">Oct 8 18:37:16 imap-host imaps[10530]: accepted connection<br class="">Oct 8 18:37:16 imap-host imaps[10530]: imapd:Loading DH parameters from file<br class="">Oct 8 18:37:16 imap-host imaps[10530]: SSL_accept() incomplete -> wait<br class="">Oct 8 18:37:16 imap-host imaps[10530]: SSL_accept() succeeded -> done<br class="">Oct 8 18:37:16 imap-host imaps[10530]: starttls: TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits new) no authentication<br class="">Oct 8 18:37:17 imap-host imaps[10530]: login: host-running-squirrel [IPv6-running-squirrel] walter plaintext+TLS User logged in<br class=""><br class="">even /etc/imapd.conf is this:<br class=""><br class="">allowanonymouslogin: no<br class="">allowplaintext: no <--<br class="">altnamespace: no<br class="">configdirectory: /var/lib/imap<br class="">partition-default: /var/spool/imap<br class="">admins: cyrus<br class="">sievedir: /var/lib/imap/sieve<br class="">sendmail: /usr/sbin/sendmail<br class="">servername: storage.mail<br class="">hashimapspool: true<br class="">sasl_pwcheck_method: saslauthd<br class="">sasl_mech_list: PLAIN LOGIN CRAM-MD5 DIGEST-MD5<br class="">tls_cert_file: /etc/pki/cyrus-imapd/tls.crt/mail-host.crt<br class="">tls_key_file: /etc/pki/cyrus-imapd/tls.key/mail-host.key<br class="">tls_ca_file: /etc/pki/cyrus-imapd/tls.crt/server-chain-sslca.crt<br class="">quotawarn: 95<br class=""><br class="">sasldblistusers2 shows this:<br class=""><br class="">cyrus@imap-host: userPassword<br class=""><br class="">why I am unable to use digest-md5 or cram-md5?<br class="">or: what do I have to do to use digest-md5?<br class="">adding a user with saslpasswd2?<br class="">what is the 'appname'?<br class=""><br class="">Im using Centos 6 and the RPM packages of CentOS<br class=""><br class="">Thanks,<br class="">Walter<br class=""><br class=""><br class="">----<br class="">Cyrus Home Page: <a href="http://www.cyrusimap.org/" class="">http://www.cyrusimap.org/</a><br class="">List Archives/Info: <a href="http://lists.andrew.cmu.edu/pipermail/info-cyrus/" class="">http://lists.andrew.cmu.edu/pipermail/info-cyrus/</a><br class="">To Unsubscribe:<br class=""><a href="https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus" class="">https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus</a></div></div></blockquote></div><br class=""></div></div></body></html>