X-Git-Url: http://pileus.org/git/?a=blobdiff_plain;f=fetchmail-FAQ.html;h=6b425ea2c376cc9b7d049e76044f250bcaa9c6be;hb=da989f7b8294e342572ec5f27f1a6f3f2b1fe56f;hp=e78e566ef85171ef31c01b1f8e6a77fd4bcdce82;hpb=3bca40cdb016a869c75d72a9af4f46881bfaff22;p=~andy%2Ffetchmail diff --git a/fetchmail-FAQ.html b/fetchmail-FAQ.html index e78e566e..6b425ea2 100644 --- a/fetchmail-FAQ.html +++ b/fetchmail-FAQ.html @@ -2003,6 +2003,15 @@ sorts of strange effects, for instance, your sent mail may show up in the mail that fetchmail fetches. It's best to avoid fetching mail from Google until they are using standards-compliant software.

+

If you still need to use Google's mail service, these links may help (valid as of 2011-04-13):

+ +

How to set up well-known security and authentication methods

@@ -2508,14 +2517,26 @@ env PATH=/opt/openssl1.0.0/bin /opt/openssl1.0.0/bin/c_rehash /home/hans/certs

R15. Help, I'm getting Authorization failure!

+

First, try upgrading to fetchmail 6.3.18 or newer. Release 6.3.18 has +received a considerable number of bug fixes for the authentication +feature (AUTH, AUTHENTICATE, SASL). Most notably, fetchmail aborts SASL +authentication attempts properly with an asterisk if it detects that it +cannot make progress with a particular authentication scheme. This fixes +issues where GSSAPI-enabled fetchmail cannot authenticate against +Microsoft Exchange 2007 and 2010. Note that this is a +bug in old fetchmail versions!

+

Fetchmail by default attempts to authenticate using various schemes. Fetchmail tries these schemes in order of descending security, meaning the most secure schemes are tried first.

However, sometimes the server offers a secure authentication scheme that is not properly configured, or an authentication scheme such as -GSSAPI does requires credentials to be acquired externally. In some -situations, fetchmail cannot know the scheme will fail without trying.

+GSSAPI that requires credentials to be acquired externally. In some +situations, fetchmail cannot know that the scheme will fail beforehand, +without trying it. In most cases, fetchmail should proceed to the next +authentication scheme automatically, but this sometimes does not +work.

Solution: Configure the right authentication scheme explicitly, for instance, with --auth cram-md5 or --auth