#42 APOP support

[Randall Smith]

This patch adds APOP support between POPFile and
the real POP server. It requires Digest::MD5 which is
present in many recent Perl distributions, including the
ActiveState distribution for Windows.

So Window's users will need to either add Digest::MD5
to the POPFile Perl distribution, or run popfile.pl under a
recent ActiveState Perl distribution. If you use
ActiveState, be sure to update your shortcuts under the
Start->Programs->Startup and POPFile menus.

After applying the patch to popfile.pl, restart popfile.pl,
bring up the POPFile Control Center in your browser and
enable APOP Authentication located near the bottom of
the Security tab. Restart popfile.pl. This causes
Digest::MD5 to be loaded as necessary when
run_popfile is invoked and allows the patched popfile.pl
to be used where no Digest::MD5 exists (without APOP
support of course).

In your mail client, select plaintext password
authentication and set your login username as

realpophost:username:apop

When the client issues the USER command, popfile
connects to the real pop server. If the :apop tag is
present in the username string, popfile will retain the real
pop server banner in $apopbanner and the username in
$apopuser. Otherwise, it sets $apopuser="" and just
forwards the USER command to the real pop server.

When the client issues the PASS command, popfile
checks to see if $apopuser is non-empty. If so, it
computes the md5 digest from $apopbanner and the
supplied password and sends an APOP command to
the real pop server. If the "+OK hello username"
response is returned, popfile returns "+OK password ok"
to the client, otherwise it returns the error message from
the real pop server. If $apopuser was empty, then it just
forwards the normal PASS command to the real pop
server.

[Randall Smith]

popfile.pl patch for APOP support

[Randall Smith]

Logged In: YES
user_id=680935

patch file didn't originally upload.

[John Graham-Cumming]

Logged In: YES
user_id=578491

Can you redo this against the current CVS?

John.

[Randall Smith]

APOP patches ~ popfile v1.193

[Randall Smith]

Logged In: YES
user_id=680935

Here is the APOP support patched against CVS as of Jan 24
2003 6:15 MST. The NSIS installer was also patched to
install the Perl 5.8.0 Digest::MD5 support. As such, I've
removed the UI configuration support for APOP.

[John Graham-Cumming]

Logged In: YES
user_id=578491

Cool, I'll be accepting this if I get a POPFile License
Agreement back from you. Take a look at the POPFile
Developer's Guide in Docs for more info.

John.

[Randall Smith]

APOP patch to 2003_03_21 CVS HEAD

[Randall Smith]

Logged In: YES
user_id=680935

Here is the APOP support patched against CVS as of Mar.
21, 2003 16:22 MST.

[Randall Smith]

APOP patche to 2003_04_04 CVS HEAD

[Randall Smith]

Logged In: YES
user_id=680935

Here is the APOP support patched against CVS 2003_04_04.
It really only includes changes to the INET Socket IO where
\r\n sequences were being expanded to \015\015\012 which
caused problems in HTTP headers. Specifically, IE 6 on
Win98 would close the socket upon encountering the string
HTTP/1.0 200 OK\r\r\n. WinNT would do the same when
accessing a remote UI but it would tolerate the additional \r
on a local UI. Win2000 would also tolerate the additional \r on
remote connections.

[John Graham-Cumming]

Logged In: YES
user_id=578491

Reopening because I want to examine this for possible
inclusion in v0.20.0.

John.

[Nobody/Anonymous]

Logged In: NO

+OK

[Nobody/Anonymous]

Logged In: NO

I need try APOP!

[F G Patterson]

Logged In: YES
user_id=895926

Does this still work with v0.20.0 cross-platform? Thx.

[John Graham-Cumming]

Logged In: YES
user_id=578491

We have a newer patch for this.

John.