0 votes
by (910 points)
edited

One of our customers has a mail server which obviously has a broken APOP implementation (see low below. According to our customer the server doesn't support APOP, but still it sends a timestamp/hash on connect indicating that it does :-/). Is there a way to explicitly DON'T use APOP (instead of explicitly specifying an authentication method like ClearText)?

State changed from 'Disconnected' to 'Connecting'.
Connecting to 192.168.213.170:110 using Pop3 2.0.5198.1.
Connection succeeded.
State changed from 'Connecting' to 'Reading'.
+OK <12729538649576916123.1396367624@benhur> benhur Cyrus POP3 v2.3.13 server ready
State changed from 'Reading' to 'Ready'.
State changed from 'Ready' to 'Sending'.
CAPA
State changed from 'Sending' to 'Reading'.
+OK List of capabilities follows
State changed from 'Reading' to 'Downloading'.
SASL LOGIN PLAIN
EXPIRE NEVER
LOGIN-DELAY 0
TOP
UIDL
PIPELINING
RESP-CODES
AUTH-RESP-CODE
USER
IMPLEMENTATION Cyrus POP3 v2.3.13
.
State changed from 'Downloading' to 'Ready'.
State changed from 'Ready' to 'Sending'.
APOP einkauf 01ddfc2118feb64f7f0bae1166c76846
State changed from 'Sending' to 'Reading'.
-ERR [AUTH] authenticating: authentication failure
State changed from 'Reading' to 'Ready'.
Rebex.Net.Pop3Exception: [AUTH] authenticating: authentication failure
   bei Rebex.Net.Pop3.US(Boolean A, Boolean B, String& C)
   bei Rebex.Net.Pop3.OP(String A, Boolean B, Boolean C)
   bei Rebex.Net.Pop3.FQ(String A, String B, Pop3Authentication C, GssApiProvider D)
   bei Rebex.Net.Pop3.WN(String A, String B, Pop3Authentication C)
State changed from 'Ready' to 'Sending'.
QUIT
State changed from 'Sending' to 'Reading'.
+OK
State changed from 'Reading' to 'Downloading'.
State changed from 'Downloading' to 'Disconnected'.
Applies to: Rebex Secure Mail

1 Answer

+1 vote
by (58.9k points)
edited

UPDATE The DisableApopAuthentication option has been added as a part of version 2014R2.


I have added an option which explicitly disables APOP authentication method. I am sending a hotfix links to you by email. Please use the DisableApopAuthentication like this:

Pop3 client = new Pop3();
client.Settings.DisableApopAuthentication = true;

Here is a free trial version of the hotfix for trial users. The newly added option will be included in the next release, i.e. 2014R2.

...