mailing list archives

meli community discussions

⚠️ if something does not work as intended when interracting with the mailing lists,
reach out Github mirror Gitea repo @epilys:matrix.org

[Imap-protocol] Kerio and authenticate plain

E-mail headers
From: Jeff McKay <jjmckay@comaxis.com>
To: imap-protocol@u.washington.edu
Date: Fri, 08 Jun 2018 12:34:51 -0000
Message-ID: 52A0F6A2.8090108@comaxis.com permalink / raw / eml / mbox 
I am trying to use authenticate plain with a Kerio imap server and not 
having much luck.
The idea is to use the admin name and password in order to log in to a 
user account and
access the user's folders.  This appears to work but in fact I get 
access to the admin folders,
not the user's.

Basically I am constructing a buffer that looks like: 
<useraccount>0<adminaccount>0<adminpassword>
(the 0 being a binary byte=x00.)  I base64 encode this, issue 
"authenticate plain" wait for the prompt,
then send the encoded data.  Server responds authentication successful, 
however I am logged into
the admin account, not the user.

I have used this code successfully with other imap servers that support 
auth plain, so I know it
works.  Is there something screwy about Kerio?
Reply
E-mail headers
From: dave@cridland.net
To: imap-protocol@localhost
Date: Fri, 08 Jun 2018 12:34:51 -0000
Message-ID: CAKHUCzx3sZHnBO4FSfefyvQrY0h-Xpjp9nXANcrik5HOjCRv1w@mail.gmail.com permalink / raw / eml / mbox 
On Thu, Dec 5, 2013 at 9:56 PM, Jeff McKay <jjmckay@comaxis.com> wrote:

> I am trying to use authenticate plain with a Kerio imap server and not
> having much luck.
> The idea is to use the admin name and password in order to log in to a
> user account and
> access the user's folders.  This appears to work but in fact I get access
> to the admin folders,
> not the user's.
>
> Basically I am constructing a buffer that looks like:
> <useraccount>0<adminaccount>0<adminpassword>
> (the 0 being a binary byte=x00.)  I base64 encode this, issue
> "authenticate plain" wait for the prompt,
> then send the encoded data.  Server responds authentication successful,
> however I am logged into
> the admin account, not the user.
>
> I have used this code successfully with other imap servers that support
> auth plain, so I know it
> works.  Is there something screwy about Kerio?
>

This isn't an IMAP question, per se, but a SASL one.

Still, the issue here is that you're using a different Authorization
identifier, and the server's neither allowing this, or rejecting your
authentication. I'd have thought one or other would be the correct thing to
do, and silently ignoring it would be a "bad" thing.

Dave.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman13.u.washington.edu/pipermail/imap-protocol/attachments/20131206/d8d0c50a/attachment.html>
Reply