Re: Failing to authenticate on the frontends

From: Jesus Roncero (no email)
Date: Thu Oct 05 2006 - 05:30:55 EDT

  • Next message: Jesus Roncero: "Re: Failing to authenticate on the frontends"

    Michael Loftis wrote:

    >>> Authentication of the user happens at the frontend. The frontend then
    >>> uses the proxy credentials to authorize as the user on the backend.
    >>> The backends don't need a full user database, just the proxy
    >>> information.
    >>
    >> Yes and no. If an IMAP client support referrals, the frontends will
    >> return a referral to the appropriate backend. So, the client may connect
    >> to the backend as well in some cases.
    >
    > Oops, I forgot about that detail. We locally patched referrals out of
    > our IMAP proxies.

    Umm, isn't there an option on the configuration to disable referrals? If
    not, do you have that patch available?

    Also, one question on the communication between the frontends and
    backends. I made them speak using TLS and plain, but would like to use
    CRAM-MD5 or DIGEST-MD5 and no TLS at all. Is that possible?
    Because when I disable TLS and force it to use the MD5 thing, the
    frontend complains that there are no mechs available.

    -- 
    Jesus Roncero <>
    System Developer
    Tel: +44 (0) 845 666 7778
    http://www.mxtelecom.com
    ----
    Cyrus Home Page: http://cyrusimap.web.cmu.edu/
    Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
    List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
    

  • Next message: Jesus Roncero: "Re: Failing to authenticate on the frontends"





    Hosted Email Solutions

    Invaluement Anti-Spam DNSBLs



    Powered By FreeBSD   Powered By FreeBSD