Bug 78875

Summary: NTLM ( SPA ) Authentication Support
Product: [Unmaintained] kmail Reporter: Jason Keirstead <jason>
Component: IMAPAssignee: kdepim bugs <kdepim-bugs>
Status: RESOLVED FIXED    
Severity: wishlist CC: gyurco
Priority: NOR    
Version: unspecified   
Target Milestone: ---   
Platform: Compiled Sources   
OS: Linux   
Latest Commit: Version Fixed In:
Sentry Crash Report:

Description Jason Keirstead 2004-04-01 19:14:23 UTC 
Version:            (using KDE Devel)
Installed from:    Compiled sources

Recently, my workplace switched the Exchange server to use "Secure Password Authentication" (NTLM) on the IMAP server, and thus I am forced to switch to Evolution to read my mail, since it supports this authentication scheme.

It would be nice if KMail also supported to so I could go back. There are several sources for this code now you could maybe use as a reference ( Evolution, Samba, Mozilla all support NTLM, though only Evolution seems to support it for IMAP )
Comment 1 Daniel Molkentin 2004-04-02 01:16:14 UTC 

*** This bug has been marked as a duplicate of 58356 ***
Comment 2 Jason Keirstead 2004-04-02 02:24:33 UTC 
On April 1, 2004 07:16 pm, Daniel Molkentin wrote:
>            What    |Removed                     |Added
> ----------------------------------------------------------------------------
>              Status|NEW                         |RESOLVED
>          Resolution|                            |DUPLICATE


I don't really agree that this is a duplicate at all.. this is a request for NTLM in the IMAP
IO slave for KMail... the other bug is a request for NTLM to talk to the MS proxy server.

It's a totally different request, and could very well need totally different code...
Comment 3 Waldo Bastian 2004-09-22 14:09:02 UTC 
Reopened bug: 58356 is about NTLM support in HTTP, which has been implemented now. But NTLM support in IMAP is a separate issue.

http://bugs.kde.org/show_bug.cgi?id=58356#c13 says that Cyrus-SASL supports NTLM so maybe IMAP can support NTLM via that already?
Comment 4 Tom Albers 2004-09-22 14:34:32 UTC 
Szombathelyi do you know this by any chance?
Comment 5 Szombathelyi György 2004-09-22 14:46:53 UTC 
I tested NTLM with a non-exchange server (cyrus), and it worked(CVS HEAD). Don't forget to install the cyrus-sasl NTLM plugin!
Comment 6 Tom Albers 2004-09-22 14:54:53 UTC 
Jason, could you test with KMail from HEAD and an Exchange Server?
Comment 7 Jason Keirstead 2004-09-22 17:59:37 UTC 
Can someone tell me how I install this plugin / how I compile KMail to do this? I can tell you right now the standard KMail does not work.

From my own personal browsing of the code, the KDE Sasl calls to not get delegate dto any cyrus libraries. The NTLM authentication is just not there.

But I will CVS update everything and try again just to be sure. Expect a response later this week.
Comment 8 Tom Albers 2004-09-22 18:36:59 UTC 
Great! 
Please check out the head version of kdepim.
./configure will let you know if it has found cyrus-sasl. Please make sure you have that installed.
Apart from that you need the "cyrus-sasl NTLM plugin". But this can be added later on if I have understood it correctly.
Comment 9 Szombathelyi György 2004-09-23 09:46:05 UTC 
KDESasl not extended with cyrus-sasl support, but replaced. The NTLM plugin can be added any time, the only problem is that not all distributions package it (maybe patent problems?), so you might need to download & compile cyrus-sasl: http://asg.web.cmu.edu/sasl/
Comment 10 Jason Keirstead 2004-09-23 14:46:23 UTC 
Seems to work ok. Thanks!
Comment 11 Adam Frank 2004-09-25 17:20:04 UTC 
I've tested this and it works good as well, However it appears as though our exchange server needs it for the smtp as well.. I will have to confirm this on monday.
Comment 12 Szombathelyi György 2004-09-28 22:01:24 UTC 
SMTP has cyrus-sasl support, too, so there's a chance that it will work with that, too ;)