! Please note that this is a snapshot of our old Bugzilla server, which is read only since May 29, 2020. Please go to gitlab.xfce.org for our new server !
Plugin not working with dovecot imap server over unencrypted connection
Status:
RESOLVED: MOVED
Product:
Xfce4-mailwatch-plugin

Comments

Description Martin Thierer 2017-03-19 13:13:14 CET
Created attachment 7052 
Check for CRAM-MD5 capability before checking for LOGINDISABLED

I can't use the plugin to check for new mail on my local dovecot server, which doesn't support encryption but hashed passwords (cram-md5) and has disabled plaintext logins as per dovecot default (disable_plaintext_auth=yes).

To prevent clients from sending credentials over an unencrypted connection when plaintext logins are disabled, it includes "LOGINDISABLED" in its capabilities if queried over an unsecure connection.

It also includes "CRAM-MD5" in the capabilities, but unfortunately that doesn't work with the mailwatch plugin because it checks for "LOGINDISABLED" *first*.

So I suggest to move the check for "LOGINDISABLED" behind the check for "CRAM-MD5" in libmailwatch-core/mailwatch-mailbox-imap.c.

The plugin works for me with this change and I can't see a harm in doing so.
Comment 1 Git Bot editbugs 2020-05-24 00:45:46 CEST
-- GitLab Migration Automatic Message --

This bug has been migrated to xfce.org's GitLab instance and has been closed from further activity.

You can subscribe and participate further through the new bug through this link to our GitLab instance: https://gitlab.xfce.org/panel-plugins/xfce4-mailwatch-plugin/-/issues/49.

Please create an account or use an existing account on one of our supported OAuth providers. 

If you want to fork to submit patches and merge requests please continue reading here: https://docs.xfce.org/contribute/dev/git/start#gitlab_forks_and_merge_requests

Also feel free to reach out to us on the mailing list https://mail.xfce.org/mailman/listinfo/xfce4-dev

Bug #13443

Reported by:
Martin Thierer
Reported on: 2017-03-19
Last modified on: 2020-05-24

People

Assignee:
Florian Rivoal
CC List:
0 users

Version

Version:
unspecified

Attachments

Additional information