[suse-security] Re: IMAP and 8.2

["Peter Hinterseer" <iceman@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>]

> David,
>
> stunnel does not work with the imap-2000 package supplied by SuSE 8.2.
> You have to find an imapd implentation that supports plain text logins.
>
> The point of stunnel is to convert an insecure imap server into a secure
> one. SuSE blew this apart by building imapd in such a way that it would
> not support this.
>
> Bob

Hi!

This is not entirely true. SuSE's imap-2002 package released with 8.2 has to
be enabled to accept plaintext passwords. This is easily done by creating a
file '/etc/c-client.cf' with the following content:

--
I accept the risk

set disable-plaintext 0
--

WIthout the '--' of course... ;-)

Have fun,

Peter



-- 
Check the headers for your unsubscription address
For additional commands, e-mail: suse-security-help@xxxxxxxx
Security-related bug reports go to security@xxxxxxx, not here