Blame allow_auth_plain_proxying.patch
|
 |
cf58a5c |
--- imap/imapd.c
|
|
|
cf58a5c |
+++ imap/imapd.c 2004/01/16 12:25:51
|
|
|
cf58a5c |
@@ -578,8 +578,11 @@
|
|
|
cf58a5c |
fatal("SASL failed initializing: sasl_server_new()", EC_TEMPFAIL);
|
|
|
cf58a5c |
}
|
|
|
cf58a5c |
|
|
|
cf58a5c |
- /* never allow plaintext, since IMAP has the LOGIN command */
|
|
|
cf58a5c |
- secprops = mysasl_secprops(SASL_SEC_NOPLAINTEXT);
|
|
|
cf58a5c |
+ if( (config_getswitch(IMAPOPT_ALLOWPLAINWITHOUTTLS) == 0) ) {
|
|
|
cf58a5c |
+ secprops = mysasl_secprops(SASL_SEC_NOPLAINTEXT);
|
|
|
cf58a5c |
+ } else {
|
|
|
cf58a5c |
+ secprops = mysasl_secprops(0);
|
|
|
cf58a5c |
+ }
|
|
|
cf58a5c |
sasl_setprop(imapd_saslconn, SASL_SEC_PROPS, secprops);
|
|
|
cf58a5c |
sasl_setprop(imapd_saslconn, SASL_SSF_EXTERNAL, &extprops_ssf);
|
|
|
cf58a5c |
|
|
|
cf58a5c |
--- lib/imapoptions
|
|
|
cf58a5c |
+++ lib/imapoptions 2004/01/16 12:27:52
|
|
|
cf58a5c |
@@ -684,6 +684,9 @@
|
|
|
cf58a5c |
to set this to yes, especially if OpenLDAP is used as authentication
|
|
|
cf58a5c |
source. */
|
|
|
cf58a5c |
|
|
|
cf58a5c |
+{ "allowplainwithouttls", 0, SWITCH }
|
|
|
cf58a5c |
+/* Allow plain login mechanism without an encrypted connection. */
|
|
|
cf58a5c |
+
|
|
|
cf58a5c |
/*
|
|
|
cf58a5c |
.SH SEE ALSO
|
|
|
cf58a5c |
.PP
|