Re: [exim] Why doesn't Exim authenticate against IMAP direct…

トップ ページ
このメッセージを削除
このメッセージに返信
著者: Marc Perkel
日付:  
To: exim-users
新しいトピック: [exim] How to make EXIM authenticate directly against IMAP
題目: Re: [exim] Why doesn't Exim authenticate against IMAP directly?
Lanny,

This almost works. The perl code works, but the authenticator isn't
working right to call it. Can you fix this part?

login:
driver = plaintext
public_name = LOGIN
server_prompts = "Username:: : Password::"
server_condition = "${if ${perl imapLogin{{$1}{$2}} {1}}}" <--- this
isn't right
server_set_id = $1

Also, need a plain login.

Thanks in advance. I really appreciate this!


Lanny Jason Godsey wrote:

> If you're going to go through the trouble of making an IMAP
> authenticator, maybe this will give you some help.
>
> First, the reason I think it's a bad idea is that it adds complexity,
> and isn't a standard practice.
>
> That said, I'd look into setting up perdition to use as a IMAP proxy
> which has it's own rules for which backend server to send requests for
> authentication. Perdition will also auto append, strip domains etc.
>
> Second, I'd use the power of Exim's embedded perl and make something
> with Imap::Simple
>
> perl_startup = do '/etc/exim/perl.pl'
>
> *** contents of /etc/exim/perl.pl ***
> #!/usr/bin/perl
>
> use Net::IMAP::Simple;
>
> sub imapLogin {
>    my $account = shift;
>    my $password = shift;

>
>    # open a connection to the IMAP server
>    my $server = new Net::IMAP::Simple( '127.0.0.1' ); # run Perdition
> on localhost.

>
>    # login, if success return 1 (true?) and 0 (false?)
>    if ($server->login( $account, $password )) {
>       return 1;
>    } else {
>       return 0;
>    }
>       $server->close();

>
> }
>
> *** end perl.pl ***
>
> then for authenticators something like:
>
> login:
> driver = plaintext
> public_name = LOGIN
> server_prompts = "Username:: : Password::"
> server_condition = "${if ${perl imapLogin{{$1}{$2}} {1}}}"
> server_set_id = $1
>
> Now, I'm not a perl monk or exim wizard, but I think the general idea
> is sound.
>
> I hope someone with more knowledge will reply to this and give any
> pointers just so the mail archive is complete.
>
>
>