Hi,
I was recently working with POP3 and have few questions about the working of authentication of POP3. I went through few RFCs and found out that POP3 supports SASL authentication mechanisms and TLS as well.
How does SASL PLAIN work without using TLS ?
I tried using base64 encoded 'username' + '\0' + 'username' + '\0' + 'password'.
But it's not authorizing me. What's the problem here...
Dear Shreedhan,
I can partly help you:
echo -e -n "\0username\0password" | base64
gives you the encoded login
telnet mypopserver 110
Escape character is '^]'.
+OK Dovecot ready.
AUTH PLAIN thestringfromthecommandabove
+OK Logged in.
Not very safe, because you can decode the string with base64 -d
The TLS variant is much more complex, so that is something I can answer you, ...
Do you have dovecot running for pop3s only?
You want secured pop3 right?
Look at your /etc/dovecot.conf file.
Code:
# Protocols we want to be serving: imap imaps pop3 pop3s managesieve
# If you only want to use dovecot-auth, you can set this to "none".
protocols = pop3s
Edit: Whoops, didn't realized in was in the programming section. Can't delete my entry, sorry.
Quote:
Originally Posted by marcrblevins
Do you have dovecot running for pop3s only?
You want secured pop3 right?
Look at your /etc/dovecot.conf file.
Code:
# Protocols we want to be serving: imap imaps pop3 pop3s managesieve
# If you only want to use dovecot-auth, you can set this to "none".
protocols = pop3s...
Quote:
Originally Posted by marcrblevins
Do you have dovecot running for pop3s only?
You want secured pop3 right?
Yes, I want a secured POP3.
Actually, I'm developing a POP3 Client and have no access to servers.
This POP3 Client needs to connect to different servers and download mails.
But the problem is...
shreedhan Offline Registered User replied 3 weeks, 3 days ago
Quote:
Originally Posted by marcrblevins
Do you have dovecot running for pop3s only?
You want secured pop3 right?
Yes, I want a secured POP3.
Actually, I'm developing a POP3 Client and have no access to servers.
This POP3 Client needs to connect to different servers and download mails.
But the problem is...
Quote: Originally Posted by marcrblevins Do you have dovecot running for pop3s only? You want secured pop3 right? Yes, I want a secured POP3. Actually, I'm developing a POP3 Client and have no access to servers. This POP3 Client needs to connect to different servers and download mails. But the problem is plain-text authentication is not supported by all the servers and not secure as well. So I needed to use TLS or other authentication...
Quote: Originally Posted by marcrblevins Do you have dovecot running for pop3s only? You want secured pop3 right? Look at your /etc/dovecot.conf file. Code: # Protocols we want to be serving: imap imaps pop3 pop3s managesieve # If you only want to use dovecot-auth, you can set this to "none". protocols = pop3s Edit: Whoops, didn't realized in was in the programming section. Can't delete my entry, sorry. No, in my...
Do you have dovecot running for pop3s only? You want secured pop3 right? Look at your /etc/dovecot.conf file. Code: # Protocols we want to be serving: imap imaps pop3 pop3s managesieve # If you only want to use dovecot-auth, you can set this to "none". protocols = pop3s Edit: Whoops, didn't realized in was in the programming section. Can't delete my entry, sorry.
Quote: Originally Posted by marcrblevins Do you have dovecot running for pop3s only? You want secured pop3 right? Yes, I want a secured POP3. Actually, I'm developing a POP3 Client and have no access to servers. This POP3 Client needs to connect to different servers and download mails. But the problem is plain-text authentication is not supported by all the servers and not secure as well. So I needed to use TLS or other authentication...
Related threads on "FedoraForum.org - Fedora Core Support Forum & Community":
@ jcruz yes, we can do authentication via POP3, IMAP,... @ jcruz yes, we can do authentication via POP3, IMAP, or LDAP (ps sorry for the delay call of duty 4 wouldnt leave me alone last night)
7:48 AM Sep 23rd from TweetDeck
in reply to jcruz
Thread profile page for "Authentication in POP3" on http://www.fedoraforum.org.
This report page is a snippet summary view from a single thread "Authentication in POP3", located on the Message Board at http://www.fedoraforum.org.
This thread profile page shows the thread statistics for: Total Authors, Total Thread Posts, and Thread Activity