Re: Howto specify password and AUTH field in POP url ?

[Olivier Bornet]

Hello,

On Mon, Oct 28, 2002 at 07:28:31PM -0500, Sam Roberts wrote:
> You might want to look at the wicket_t, an example of it being used is
> sieve. It gets usernames and passwords from a ticket file, but if your
> application had another type of ticket store, you could make a version
> that retrieved passwords from wherever you store your passwords.

OK. I have found a method using ticket_t (as explained in my previous
email on this thread). This seems to work as I want, so I don't have
look for the moment in wicket_t.

> It didn't occur to me to allow both, I'm not sure what it would look
> like,
> 
>      pop://user:password;address@hidden  ?
>      pop://user;AUTH=+APOP:address@hidden  ?

For me, it's OK with the ticket. Of course, this would be must simple
with just an URL, but it's not a problem at this time to use a ticket.

> One thing I wanted to do was be able to register multiple authentication
> sources, so you put the wicket_t object first, then some object that
> queries the user, for example. As soon as one of the auth objects
> returns the auth info, then the search would stop. As it is, you have
> only one source, and only user names and passwords, what if you needed a
> private key and a certificate to complete an ssl exchange?

Interesting. What it will be also usefull is to have some kind of
"auto-auth" feature. This mean : use the most secure way when possible.
For example, with a POP account, I want to try +APOP first, and if this
fails, try without APOP. It this already possible ?

> Btw, I did document this in url.texi, did you find this, or is it too
> dusty a corner?

I have found in url.texi the sytax for the URL. And this is from this
file I have think mixing AUTH and password is not possible. So, this is
correctly documented.

What I don't have found in the doc is some help how to use ticket_t and
wicket_t. I think this can be usefull, for example in auth.texi. I think
auth.texi is not enough complete. (maybe because I don't have understand
the small sample with my_authenticate () ...)

Good day.

                Olivier
-- 
Olivier Bornet                      http://www.smartdata.ch/
address@hidden         SMARTDATA SA
Phone: +41-27-723'55'03             Rue du Collège 5A
GPG key ID: C53D9218                CH-1920 Martigny

pgpe_VST8EXfm.pgp
Description: PGP signature