[SVN] r530 - in /trunk/cyrus-imapd-2.2.13/debian: changelog patches/75-update-imapd.conf-documentation.dpatch

[debian at incase.de]

Author: sven
Date: Wed Aug  2 23:21:38 2006
New Revision: 530

URL: https://mail.incase.de/viewcvs?rev=530&root=cyrus22&view=rev
Log:
Update imapd.conf documentation to clarify allowplaintext behaviour

Modified:
    trunk/cyrus-imapd-2.2.13/debian/changelog
    trunk/cyrus-imapd-2.2.13/debian/patches/75-update-imapd.conf-documentation.dpatch

Modified: trunk/cyrus-imapd-2.2.13/debian/changelog
URL: https://mail.incase.de/viewcvs/trunk/cyrus-imapd-2.2.13/debian/changelog?rev=530&root=cyrus22&r1=529&r2=530&view=diff
==============================================================================
--- trunk/cyrus-imapd-2.2.13/debian/changelog (original)
+++ trunk/cyrus-imapd-2.2.13/debian/changelog Wed Aug  2 23:21:38 2006
@@ -25,8 +25,10 @@
     behaviour. (Closes: #379881)
   * Use ssl-cert and reference system-wide ssl certificates in imapd.conf,
     leaving the service specific ssl certs as-is.
-
- -- Sven Mueller <sven at debian.org>  Mon, 31 Jul 2006 12:57:34 +0200
+  * Update imapd.conf documentation to clarify behaviour of allowplaintext in
+    combination with sasl_mech_list.
+
+ -- Sven Mueller <sven at debian.org>  Wed,  2 Aug 2006 23:19:13 +0200
 
 cyrus-imapd-2.2 (2.2.13-4) unstable; urgency=low
 

Modified: trunk/cyrus-imapd-2.2.13/debian/patches/75-update-imapd.conf-documentation.dpatch
URL: https://mail.incase.de/viewcvs/trunk/cyrus-imapd-2.2.13/debian/patches/75-update-imapd.conf-documentation.dpatch?rev=530&root=cyrus22&r1=529&r2=530&view=diff
==============================================================================
--- trunk/cyrus-imapd-2.2.13/debian/patches/75-update-imapd.conf-documentation.dpatch (original)
+++ trunk/cyrus-imapd-2.2.13/debian/patches/75-update-imapd.conf-documentation.dpatch Wed Aug  2 23:21:38 2006
@@ -5,9 +5,9 @@
 ## DP: No description.
 
 @DPATCH@
-diff -urNad cyrus-imapd-2.2.13/lib/imapoptions /tmp/dpep.sBopzk/cyrus-imapd-2.2.13/lib/imapoptions
---- cyrus-imapd-2.2.13/lib/imapoptions	2006-07-26 16:34:40.000000000 +0200
-+++ /tmp/dpep.sBopzk/cyrus-imapd-2.2.13/lib/imapoptions	2006-07-26 17:08:18.006267524 +0200
+diff -urNad cyrus-imapd-2.2.13/lib/imapoptions /tmp/dpep.YhnBkx/cyrus-imapd-2.2.13/lib/imapoptions
+--- cyrus-imapd-2.2.13/lib/imapoptions	2006-08-02 23:15:02.000000000 +0200
++++ /tmp/dpep.YhnBkx/cyrus-imapd-2.2.13/lib/imapoptions	2006-08-02 23:17:59.362341706 +0200
 @@ -69,7 +69,10 @@
  \fB/etc/imapd.conf\fR file, and show each option's default value.
  Some options have no default value, these are listed with
@@ -20,3 +20,22 @@
  */
  
  # OPTIONS
+@@ -122,7 +125,17 @@
+   enabled when absolutely necessary. */
+ 
+ { "allowplaintext", 1, SWITCH }
+-/* Allow the use of cleartext passwords on the wire. */
++/* Allow the use of cleartext passwords on the wire.
++.PP
++  To disallow the use of plaintext passwords for authentication, you can
++  set ``allowplaintext: no'' in imapd.conf. This will still allow PLAIN
++  under TLS, but IMAP LOGIN commands will now fail.
++.PP
++  If you only list plaintext authentication mechanisms in ``sasl_mech_list''
++  and set ``allowplaintext: no'', only users on encrypted sessions (TLS or
++  SSL) will be able to authenticate. On the other hand, if you list no
++  plaintext authentication options in ``sasl_mech_list'',
++  ``allowplaintext: yes'' would have no effect. */
+    
+ { "allowusermoves", 0, SWITCH }
+ /* Allow moving user accounts (with associated meta-data) via RENAME