[sasl] public test SCRAM-SHA-1 server

Simon Josefsson <simon@josefsson.org> Wed, 16 September 2009 15:54 UTC

Return-Path: <simon@josefsson.org>
X-Original-To: sasl@core3.amsl.com
Delivered-To: sasl@core3.amsl.com
Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id A5ABA28C1FE for <sasl@core3.amsl.com>; Wed, 16 Sep 2009 08:54:16 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 1.662
X-Spam-Level: *
X-Spam-Status: No, score=1.662 tagged_above=-999 required=5 tests=[AWL=-4.127, BAYES_00=-2.599, FB_WORD1_END_DOLLAR=3.294, FB_WORD2_END_DOLLAR=3.294, J_CHICKENPOX_45=0.6, J_CHICKENPOX_47=0.6, J_CHICKENPOX_48=0.6]
Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 2t+UtTmJKzPU for <sasl@core3.amsl.com>; Wed, 16 Sep 2009 08:54:15 -0700 (PDT)
Received: from yxa-v.extundo.com (yxa-v.extundo.com [83.241.177.39]) by core3.amsl.com (Postfix) with ESMTP id 0D7B328C21D for <sasl@ietf.org>; Wed, 16 Sep 2009 08:53:55 -0700 (PDT)
Received: from mocca.josefsson.org (c80-216-24-211.bredband.comhem.se [80.216.24.211]) (authenticated bits=0) by yxa-v.extundo.com (8.14.3/8.14.3/Debian-5) with ESMTP id n8GFseg2000714 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES128-SHA bits=128 verify=NOT) for <sasl@ietf.org>; Wed, 16 Sep 2009 17:54:43 +0200
X-Hashcash: 1:22:090916:sasl@ietf.org::smbvgjAI83hInpRQ:I9rl
From: Simon Josefsson <simon@josefsson.org>
To: sasl@ietf.org
References: <87tyz3hrbn.fsf@mocca.josefsson.org> <87ljkej3xv.fsf@mocca.josefsson.org>
OpenPGP: id=B565716F; url=http://josefsson.org/key.txt
X-Hashcash: 1:22:090916:bug-mailutils@gnu.org::mVdHoWp6/dGULffI:54uQ
Date: Wed, 16 Sep 2009 17:54:40 +0200
In-Reply-To: <87ljkej3xv.fsf@mocca.josefsson.org> (Simon Josefsson's message of "Wed, 16 Sep 2009 17:37:48 +0200")
Message-ID: <87ab0uj35r.fsf_-_@mocca.josefsson.org>
User-Agent: Gnus/5.110011 (No Gnus v0.11) Emacs/23.1 (gnu/linux)
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
X-Virus-Scanned: clamav-milter 0.95.2 at yxa-v
X-Virus-Status: Clean
Subject: [sasl] public test SCRAM-SHA-1 server
X-BeenThere: sasl@ietf.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: SASL Working Group <sasl.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/listinfo/sasl>, <mailto:sasl-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/sasl>
List-Post: <mailto:sasl@ietf.org>
List-Help: <mailto:sasl-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/sasl>, <mailto:sasl-request@ietf.org?subject=subscribe>
X-List-Received-Date: Wed, 16 Sep 2009 15:54:16 -0000

FYI, I have set up a IMAP server with support for SCRAM-SHA-1.  Host
'nubb.josefsson.org', username 'user', and password 'pencil'.  See
announcement below.

/Simon

Simon Josefsson <simon@josefsson.org> writes:

> I'm happy to announce that GNU MailUtils imapd will use SCRAM-SHA-1 (the
> next generation SASL mechanism) without any code changes if compiled
> with --with-gsasl and the system's GNU SASL is recent enough to support
> SCRAM-SHA-1.
>
> Example session (use password 'pencil'):
>
> jas@mocca:~/src/gsasl master$ src/gsasl --connect nubb.josefsson.org -a user
> Trying `nubb.josefsson.org'...
> * OK IMAP4rev1
> . CAPABILITY
> * CAPABILITY IMAP4rev1 NAMESPACE ID IDLE LITERAL+ UNSELECT AUTH=ANONYMOUS AUTH=EXTERNAL AUTH=LOGIN AUTH=PLAIN AUTH=SECURID AUTH=DIGEST-MD5 AUTH=CRAM-MD5 AUTH=SCRAM-SHA-1
> . OK CAPABILITY Completed
> . CAPABILITY
> * CAPABILITY IMAP4rev1 NAMESPACE ID IDLE LITERAL+ UNSELECT AUTH=ANONYMOUS AUTH=EXTERNAL AUTH=LOGIN AUTH=PLAIN AUTH=SECURID AUTH=DIGEST-MD5 AUTH=CRAM-MD5 AUTH=SCRAM-SHA-1
> . OK CAPABILITY Completed
> . AUTHENTICATE SCRAM-SHA-1
> + 
> biwsbj11c2VyLHI9Y3BsU0ZOV2hzYWI2NG52ZWdHYTdvNy9Z
> + cj1jcGxTRk5XaHNhYjY0bnZlZ0dhN283L1loTTF1a2h4ZlFPZWgrT3krOXcscz1CYUc2UDRmRGpuNDhHcFh0LGk9NDA5Ng==
> Enter password: 
> Yz1iaXdzLHI9Y3BsU0ZOV2hzYWI2NG52ZWdHYTdvNy9ZaE0xdWtoeGZRT2VoK095Kzl3LHA9aXF2R212Q0YzRE1jYTMweUFWZUlKYTBDN3M4PQ==
> + dj1zTmdERmFnd3dDVTVwL0RuTXhpTmxCdUg1Z1U9
> . OK AUTHENTICATE SCRAM-SHA-1 authentication successful
> Client authentication finished (server trusted)...
> Enter application data (EOF to finish):
> . capability
> * CAPABILITY IMAP4rev1 NAMESPACE ID IDLE LITERAL+ UNSELECT
> . OK CAPABILITY Completed
> . logout
> * BYE Session terminating.
> . OK LOGOUT Completed
> Session finished...
> . LOGOUT
> jas@mocca:~/src/gsasl master$ 
>
> /Simon