Hello List,

I want to allow plain text passwords only on ssl/tls.

Is it possible to have: auth default { mechanisms = cram-md5 ntlm ...... }

and then over-ride this when connection is ssl/tls to allow plain and
login?

I have tried adding "mechanisms = plain login cram-md5 ntlm" to
"protocol imaps{}" as an example but I get an error that the protocol
does not exist.

I read somewhere today that dovecot enables plain automatically over
secure connections (ssl/tls) but I'm not seeing it.

Also, "auth default" suggests that "auth something_else" is possible.
I'm probably just doing a poor job of research but I'm not finding the
answers I'm seeking.

Using postfix and lda.

# openssl s_client -connect localhost:993 # a01 capability

• CAPABILITY IMAP4rev1 SASL-IR SORT THREAD=REFERENCES MULTIAPPEND
  UNSELECT LITERAL+ IDLE CHILDREN NAMESPACE LOGIN-REFERRALS UIDPLUS LIST- EXTENDED I18NLEVEL=1 AUTH=CRAM-MD5 AUTH=NTLM a01 OK Capability completed.

Note about below, fd limit is increased management script. # dovecot -n # 1.1.3: /opt/local/etc/dovecot/dovecot.conf Warning: fd limit 256 is lower than what Dovecot can use under full
load (more than 768). Either grow the limit or change
login_max_processes_count and max_mail_processes settings log_path: /opt/local/var/ispbox/log/mail/dovecot.log protocols: imap imaps pop3 pop3s ssl_cert_file: /opt/local/etc/ssl/certs/dovecot.pem ssl_key_file: /opt/local/etc/ssl/private/dovecot.pem login_dir: /opt/local/var/run/dovecot/login login_executable(default): /opt/local/libexec/dovecot/imap-login login_executable(imap): /opt/local/libexec/dovecot/imap-login login_executable(pop3): /opt/local/libexec/dovecot/pop3-login mail_location: dbox:/opt/local/var/ispbox/mail/%d/%n/dbox mail_executable(default): /opt/local/libexec/dovecot/imap mail_executable(imap): /opt/local/libexec/dovecot/imap mail_executable(pop3): /opt/local/libexec/dovecot/pop3 mail_plugin_dir(default): /opt/local/lib/dovecot/imap mail_plugin_dir(imap): /opt/local/lib/dovecot/imap mail_plugin_dir(pop3): /opt/local/lib/dovecot/pop3 auth default: mechanisms: cram-md5 ntlm passdb: driver: sql args: /opt/local/etc/dovecot/dovecot_mysql.conf userdb: driver: prefetch userdb: driver: sql args: /opt/local/etc/dovecot/dovecot_mysql.conf socket: type: listen client: path: /opt/local/var/spool/postfix/private/auth mode: 432 user: _postfix group: _postfix master: path: /opt/local/var/run/dovecot/auth-master mode: 384 user: _vmail

Thanks for any tips, //Bradley