fetchmail-friends
[Top] [All Lists]

[fetchmail]Re: kerberos support in fetchmail 5.9.0 broken?

2001-09-24 06:50:19
Tim Showalter <tjs(_at_)psaux(_dot_)com>:
Howdy.  I'm screwing around trying to get some mail server stuff
sorted out, and moving from one server to another is a lot easier with
fetchmail.

The remote server where my mail is currently stored has Kerberos 4
support.  But I can't get the Kerberos support in Fetchmail to work.
The remote server does not support KPOP, but it supports
AUTH=KERBEROS_V4 and whatever the POP equivalent is.

A little peeking at the Fetchmail source indicates that in driver.c,
there's a call to kerberos_auth that looks something like it's trying
to do KPOP; with strace I can see a write of AUTHV1.0KPOPV1.0 or
something.

Anyway, here's a diff that indicates my hack fix.  It fixes my problem
but I'm sure it screws KPOP users.  I am relucant to provide a better
fix as I don't have the details.

I'm a little suspicious of the kerberos_v5 change just below this one.

I'm going to bounce this to the fetchmail-friends list.  There are a
couple of people on there actually using Kerberos (I think Nalin Dahyabai
at Red Hat is one) and they should have a better take on what is actually
going on here.

By the way, looking at the definitions of the way CAPABILITY responses
in IMAP are scanned, they're not case-insensitive, but they should
be.  (IMAP4rev1 is what's in the spec, and that's what Cyrus sends, UW
sends IMAP4REV1, but ImAp4rEv1 is also legal, etc.)

I've already merged in a fix for that.

Thanks for the timesaver!  Let me know if this helps at all.

Tim

tjs(_at_)eddie:/usr/local/src/fetchmail-5.9.0$ diff -du 
fetchmail-5.9.0/driver.c driver.c
--- fetchmail-5.9.0/driver.c  Fri Aug  3 10:58:11 2001
+++ driver.c  Sun Sep  9 00:55:18 2001
@@ -898,6 +898,7 @@
      }
 #endif
 
+#if 0
 #ifdef KERBEROS_V4
      if (ctl->server.authenticate == A_KERBEROS_V4)
      {
@@ -909,6 +910,7 @@
              goto cleanUp;
      }
 #endif /* KERBEROS_V4 */
+#endif
 
 #ifdef KERBEROS_V5
      if (ctl->server.authenticate == A_KERBEROS_V5)

-- 
                <a href="http://www.tuxedo.org/~esr/";>Eric S. Raymond</a>

  "...quemadmodum gladius neminem occidit, occidentis telum est."
[...a sword never kills anybody; it's a tool in the killer's hand.]
        -- (Lucius Annaeus) Seneca "the Younger" (ca. 4 BC-65 AD),


<Prev in Thread] Current Thread [Next in Thread>
  • [fetchmail]Re: kerberos support in fetchmail 5.9.0 broken?, Eric S. Raymond <=