Lighthouse has a new layout. Prefer the old one? Return to the old layout, and switch back any time from the link at the top of each page.

Auth-Method Settings

#1901

Hello,
I can't see how to set the authentification method.
According my logs MailMate uses the most primitive one (Plain) instead of a more secure one.
Thanks
Q

Reported by matthias · December 31st, 2017 @ 04:32 AM

State: new
Milestone: none
Assigned to: benny benny

Activity

  1. benny
    benny

    Well, MailMate also supports CRAM-MD5 (preferring this if it's available).

    Which authentication method were you looking for?

    (You should of course always ensure that SSL is enabled -- for many other reasons than the login itself.)

    January 3rd, 2018 @ 01:48 PM

  2. matthias
    matthias

    Hello Benny,
    yes I was looking for CRAM-MD5 and/or Kerberos, but as I can see from the logs, MailMate always uses PLAIN on my server (don't know for google).
    SSL is of course enabled, login without SSL/TLS is not allowed at my server (MacOS 10.11 Server with Postfix).
    cheers
    Q

    January 4th, 2018 @ 12:33 AM

  3. benny
    benny

    Do you see MailMate use PLAIN even if the server supports CRAM-MD5? This should only happen if CRAM-MD5 fails (which it unfortunately does for at least 1 buggy server).

    January 8th, 2018 @ 02:29 PM

  4. matthias
    matthias

    I'm just wondering, after checking again today, now it says:
    imap-login: xxx: Login: user=, method=CRAM-MD5, rip=192.168.1.31, lip=192.168.2.10, mpid=582, TLS
    which looks good.
    However, when I wrote that posting, it always said "PLAIN".

    To which "buggy" server are you referring to?
    MacOS Server uses Dovecot since some time and it works better then Cyrrus to my experience.
    With a pure Mac-Environment maybe the best choice would be Kerberos, but yes, I know, I made some mixed experiences with that one.
    How's about a simple pull-down to at least define a preference of the user?
    cheers
    Q

    January 9th, 2018 @ 05:02 AM

  5. benny
    benny
    • State changed from new to bluesky

    I seem to have failed to note the name of the buggy server, but it was not a mainstream IMAP server. Dovecot should certainly be fine.

    There's no pull-down, but it is possible to force the authentication method used. You need to edit this file while MailMate is not running:

    ~/Library/Application Support/MailMate/Sources.plist

    Add the following to the account:

    authMechanism = "CRAM-MD5";

    I'll switch the ticket to “bluesky” since I'm unlikely to add more authentication methods in the foreseeable future.

    January 10th, 2018 @ 01:55 PM

Please Sign in or create a free account to add a new ticket.

With your very own profile, you can contribute to projects, track your activity, watch tickets, receive and update tickets through your email and much more.