MBOX-Line: From dave at cridland.net  Fri Dec  6 00:18:28 2013
To: imap-protocol@u.washington.edu
From: Dave Cridland <dave@cridland.net>
Date: Fri Jun  8 12:34:51 2018
Subject: [Imap-protocol] Kerio and authenticate plain
In-Reply-To: <52A0F6A2.8090108@comaxis.com>
References: <52A0F6A2.8090108@comaxis.com>
Message-ID: <CAKHUCzx3sZHnBO4FSfefyvQrY0h-Xpjp9nXANcrik5HOjCRv1w@mail.gmail.com>

On Thu, Dec 5, 2013 at 9:56 PM, Jeff McKay <jjmckay@comaxis.com> wrote:

> I am trying to use authenticate plain with a Kerio imap server and not
> having much luck.
> The idea is to use the admin name and password in order to log in to a
> user account and
> access the user's folders.  This appears to work but in fact I get access
> to the admin folders,
> not the user's.
>
> Basically I am constructing a buffer that looks like:
> <useraccount>0<adminaccount>0<adminpassword>
> (the 0 being a binary byte=x00.)  I base64 encode this, issue
> "authenticate plain" wait for the prompt,
> then send the encoded data.  Server responds authentication successful,
> however I am logged into
> the admin account, not the user.
>
> I have used this code successfully with other imap servers that support
> auth plain, so I know it
> works.  Is there something screwy about Kerio?
>

This isn't an IMAP question, per se, but a SASL one.

Still, the issue here is that you're using a different Authorization
identifier, and the server's neither allowing this, or rejecting your
authentication. I'd have thought one or other would be the correct thing to
do, and silently ignoring it would be a "bad" thing.

Dave.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman13.u.washington.edu/pipermail/imap-protocol/attachments/20131206/d8d0c50a/attachment.html>