Home Forums OS X Server and Client Discussion Questions and Answers Supporting Outlook "Secure Password Authentication&quot

Viewing 3 posts - 1 through 3 (of 3 total)
  • Author
    Posts
  • #357988
    Anonymous
    Participant

    Hi,

    I’ve been beating my head against a wall trying to find a way to support Outlook and Outlook Express users sending and receiving mail through my 10.3.3 Server. The problem is simple:

    1. I won’t allow plain text password authentication. At all.
    2. postfix and cyrus don’t have an obvious way to support NTLM authentication (which is what I understand is meant by the “Secure Password Authentication” option in Outlook [Express] ).

    The password server has all the protocols enabled:
    [code:1:552a2466aa]silver:/ root# NeST -getprotocols
    "SMB-NT" Enabled Hash
    "SMB-LAN-MANAGER" Enabled Hash
    "MS-CHAPv2" Enabled Plain
    "CRAM-MD5" Enabled Hash
    "WEBDAV-DIGEST" Enabled Hash
    "APOP" Enabled Plain[/code:1:552a2466aa]

    Any ideas what to do now?

    Thanks,
    Terry

    #357994
    Anonymous
    Participant

    [quote:11d492c2e8=”MacTroll”]I find it hard to believe that Outlook does not do md5 encryption for IMAP. It’s been a while since I’ve set this up, but I swear I’ve set up Outlook on a PC with md5 encryption.

    Either way, how about you just wrap your connection in SSL and then not worry so much about the password type?

    Joel[/quote:11d492c2e8]

    Outlook appears to support DIGEST-MD5 but not CRAM-MD5.

    And SSL isn’t going to be a complete solution for me:
    1. The server is our primary MX and therefore must have port 25 open.
    2. To allow SMTP AUTH from Outlook I’d have to enable LOGIN/PLAIN.
    3. I can’t trust the users to always use SSL.
    4. I’d end up with users doing cleartext SMTP AUTH.

    I really do want NTLM for cyrus and postfix. We have SASL. We support NTLM. We just need to plug them together.

    #380503
    zlatan24
    Participant

    [QUOTE][u]Quote by: MacTroll[/u][p]I find it hard to believe that Outlook does not do md5 encryption for IMAP. It’s been a while since I’ve set this up, but I swear I’ve set up Outlook on a PC with md5 encryption.

    Either way, how about you just wrap your connection in SSL and then not worry so much about the password type?

    Joel[/p][/QUOTE]

    My own ms outlook once had similar problems. But luckily for me for some minutes I could resolve all of them. It are available due to the next program. Which relieved me for short time and demonstrated all its resources for working out almost all kind of problem connected to ms outlook – http://www.recoverytoolbox.com/pst_outlook_xp_recovery.html

Viewing 3 posts - 1 through 3 (of 3 total)
  • You must be logged in to reply to this topic.

Comments are closed