Cyrus IMAP Presentation

[Mathieu Arnold]

--On dimanche 22 septembre 2002 10:11 -0500 Eric Estabrooks
<eric at urbanrage.com> wrote:

> It should be possible to write a pam module (or extend an existing one)
> to include other mechanisms beside plain, if like you said you had plain
> text passwords available on the server side.  Of course there might be an
> additional restriction imposed by the sasl interface in that it might
> only present plain to the pam interface or the likes of saslauthd and try
> to resolve others internally or drop them if configured for using pam.
> 
> This discussion has sparked my curiosity, I'm going to try and see if I
> can get CRAM into a pam module.

Well, the problem is that cyrus will not use something else than sasl for
digests authentication, it can only use something else, for instance
saslauthd or pam for plain text passwords, no matter what your pam module
returns, I auth all my users, against a postgresql database, and after
struggling against the pam-pgsql module, I figured out that I should have
written an sasl auxprop pluggin instead.

-- 
Mathieu Arnold