afaik the digest-md5 occurs between cyrus and the imap client (AUTHENTICATE command) so my doubt is about the user db and password store. Is the password stored in plain text? (mysql auth like http://www.delouw.ch/linux/Postfix-Cyrus-Web-cyradm-HOWTO/html/cyrus-config.html ) kind regards -- Ing.Guillermo Gomez S.