[prev in list] [next in list] [prev in thread] [next in thread] 

List:       tmda-cvs
Subject:    CVS: tmda/bin ChangeLog,1.247,1.248 tmda-ofmipd,1.20,1.21
From:       "Jason R. Mastaler" <jasonrm () users ! sourceforge ! net>
Date:       2003-01-22 18:45:37
[Download RAW message or body]

Update of /cvsroot/tmda/tmda/bin
In directory sc8-pr-cvs1:/tmp/cvs-serv10739/bin

Modified Files:
	ChangeLog tmda-ofmipd 
Log Message:
Remove CRAM-MD5 from the published SASL types if using the
`--authprog' or `--remoteauth' options. This is because after the
client has authenticated via CRAM-MD5, the username/password pair is
no longer available to use for authentication with a remote service
like an IMAP server. Most MUAs will choose CRAM-MD5 is offered, but
can use LOGIN or PLAIN if it's not available.

See FAQ 5.8 for a more detailed explanation of why CRAM-MD5 can't
be used with `--authprog' or `--remoteauth'.


Index: ChangeLog
===================================================================
RCS file: /cvsroot/tmda/tmda/bin/ChangeLog,v
retrieving revision 1.247
retrieving revision 1.248
diff -u -r1.247 -r1.248
--- ChangeLog	21 Jan 2003 05:36:24 -0000	1.247
+++ ChangeLog	22 Jan 2003 18:45:31 -0000	1.248
@@ -1,3 +1,8 @@
+2003-01-22  Jason R. Mastaler  <jasonrm@hrothgar.la.mastaler.com>
+
+	* tmda-ofmipd (SMTPChannel.__init__): Don't advertise CRAM-MD5
+	when using the `--authprog' or `--remoteauth' options.
+
 2003-01-20  Tim Legant  <tim@catseye.net>
 
 	* tmda-ofmipd (class VDomainProxy): Added new proxy class to

Index: tmda-ofmipd
===================================================================
RCS file: /cvsroot/tmda/tmda/bin/tmda-ofmipd,v
retrieving revision 1.20
retrieving revision 1.21
diff -u -r1.20 -r1.21
--- tmda-ofmipd	21 Jan 2003 05:36:24 -0000	1.20
+++ tmda-ofmipd	22 Jan 2003 18:45:33 -0000	1.21
@@ -553,6 +553,10 @@
         self.__auth_password = None
         self.__auth_sasl = None
         self.__sasl_types = ['login', 'cram-md5', 'plain']
+        # Remove CRAM-MD5 from the published SASL types if using the
+        # `--authprog' or `--remoteauth' options. See FAQ 5.8.
+        if remoteauth['enable'] or authprog:
+            self.__sasl_types.remove('cram-md5')
         self.__auth_cram_md5_ticket = '<%s.%s@%s>' % (random.randrange(10000),
                                                       int(time.time()), FQDN)
         self.__server = server

_______________________________________
tmda-cvs mailing list
http://tmda.net/lists/listinfo/tmda-cvs
[prev in list] [next in list] [prev in thread] [next in thread]