Mail module: auth cram-md5 does not work

[Petite Abeille]

On Feb 5, 2009, at 10:55 PM, Miguel Beccari wrote:

> AUTH CRAM-MD5
> 334 PDc1Njk0NDk5MS4xMjMzODcwNTE3QG15c3FsPg==
> bXlfdGVzdEBjbGlra2EuY29tIDdjNzRkYjUxYTNhZGZjMTZhNjVhNDdhY2ExMzZkNTE4
> 535 5.7.0 Invalid login or password
>
> This is my HTTP auth log
>
> HTTP_AUTH_USER = my_test_user
> HTTP_AUTH_PASS = 7c74db51a3adfc16a65a47aca136d518
>
>
> NOTE: password should be "test" and not  
> "7c74db51a3adfc16a65a47aca136d518"
>
> Am I wrong?

With CRAM-MD5 [1], no password is sent in the clear, but rather a HMAC- 
MD5 of the server challenge.

Cheers,

--
PA.
http://alt.textdrive.com/nanoki/

[1] http://en.wikipedia.org/wiki/CRAM-MD5