Re: APOP, SSL, and PAM

At 3:02 PM -0700 10/17/07, Walter Ian Kaye wrote:

>  I just got this working (on FreeBSD 6.2). Whew!
>
>  I set up my system using the Vanemery.com qpopper page as a guide.

I'm not familiar with that.  If you have suggestions for changes to 
the Qpopper FAQ or the Administrators Guide, please send them in. 
Sending a patch is always welcome.

>  I had originally put all my users into the APOP db, but that 
> confused Qpopper when a PC user on OE tried to connect. So I 
> deleted the PC users from the APOP db (leaving the Mac users in, 
> since both Eudora and Mail.app do APOP), and that left me with a 
> PAM error ("pam_authenticate returned 9").

The default setting for 'clear-text-password' rejects attempts to log 
in with username/password if the user exists in the APOP database. 
Looking at the code, setting 'clear-text-password' to 'TLS' also does 
this, but I'm thinking this may be a bug.  Specifically, the code at 
pop_user.c line (line 256 in qpopper4.0.9) should check for other 
values as well.

-- 
Randall Gellens
Opinions are personal;    facts are suspect;    I speak for myself only
-------------- Randomly-selected tag: ---------------
It is easier to fight for one's principles than to live up to them.
                                                     --Alfred Adler