POP3
POP3 AUTH NTLM SASL DOWNGRADE
RFC1734
RFC5034
#
# Server-side
AUTH NTLM PLAIN
REPLY "AUTH NTLM" +
REPLY TlRMTVNTUAABAAAABoIIAAAAAAAAAAAAAAAAAAAAAAA= + Rubbish
REPLY * -ERR AUTH exchange cancelled by client
REPLY "AUTH PLAIN" +
REPLY dXNlcgB1c2VyAHNlY3JldA== +OK Login successful
From: me@somewhere
To: fake@nowhere
body
--
yours sincerely
#
# Client-side
pop3
NTLM
!SSPI
POP3 NTLM authentication with SASL downgrade
# we force our own host name, in order to make the test machine independent
CURL_GETHOSTNAME=curlhost
# we try to use the LD_PRELOAD hack, if not a debug build
LD_PRELOAD=%PWD/libtest/.libs/libhostname.so
pop3://%HOSTIP:%POP3PORT/880 -u user:secret
chkhostname curlhost
#
# Verify data after the test has been "shot"
CAPA
AUTH NTLM
TlRMTVNTUAABAAAABoIIAAAAAAAAAAAAAAAAAAAAAAA=
*
AUTH PLAIN
dXNlcgB1c2VyAHNlY3JldA==
RETR 880
QUIT