Plain text password between frontend and backend

[Ramya Krishnan]

Ken Murchison wrote:

>
> Because the frontends proxy as the user to the backend, the IMAP LOGIN 
> command can not be used.  The only plaintext SASL mechanism that can 
> be used is PLAIN, but you can't use it unless protected by TLS.  
> Looking at the CAPABILITY output above, it doesn't look like you've 
> configured TLS.
>
> You might also be able to fake this by running imapd on the backends 
> with the '-p 2' option.
>
1. I have 2 backend servers and one proxy-cum/mupdate server. The 
password comes as clear text over the network (unsafe) to proxy. Then I 
am forced to use TLS between the backend and frontend servers... This 
network is safe and i dun want the overhead of ssl... Is there a way to 
overcome this
2. When i use SSL in the backend server, it asks for a password
/var/cyrus/sbin/master
Enter PEM pass phrase:
I dun want to enter the password every time i restart master... Is there 
a way
I generate a the CA and certificates with this.
openssl req -new -x509 -keyout CAkey.pem -out CAcert.pem
openssl req  -new -keyout mailkey.pem -out mailreq.pem  -days 360
cat mailreq.pem mailkey.pem > mail.pem
openssl ca  -policy policy_anything -out mailcert.pem  -infiles mail.pem




--Thanks and Regards
Ramya Krishnan
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
 -Ed Howdershelt (Author)



********** DISCLAIMER **********
Information contained and transmitted by this E-MAIL is proprietary to 
Sify Limited and is intended for use only by the individual or entity to 
which it is addressed, and may contain information that is privileged, 
confidential or exempt from disclosure under applicable law. If this is a 
forwarded message, the content of this E-MAIL may not have been sent with 
the authority of the Company. If you are not the intended recipient, an 
agent of the intended recipient or a  person responsible for delivering the 
information to the named recipient,  you are notified that any use, 
distribution, transmission, printing, copying or dissemination of this 
information in any way or in any manner is strictly prohibited. If you have 
received this communication in error, please delete this mail & notify us 
immediately at admin at sifycorp.com

www.sify.com - your homepage on the internet for news, sports, finance,
astrology, movies, entertainment, food, languages etc
-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://lists.andrew.cmu.edu/mailman/private/info-cyrus/attachments/20051215/35530239/attachment.html