You are viewing a plain text version of this content. The canonical link for it is here.
Posted to server-user@james.apache.org by "Spencer, Brent" <Br...@avnet.com> on 2003/08/01 22:43:09 UTC

Secure Password Authentication (SPA)

Does "James" support Microsoft Secure Password Authentication (SPA/AUTH MSN)
for SMTP (smtp.email.msn.com) communication -
http://www.kuro5hin.org/story/2002/4/28/1436/66154?

If not, do you know of any Java based application that does?

Sincerely,

Brent Spencer <Br...@avnet.com>
Avnet Computer Marketing
Hallmark, Services Business Unit

SavWareHA Support:    SavWareHA@avnet.com
SavWareHA Website:    www.SavWareHA.com
SavWareHA FAQ:
http://cmapps.avnet.com/stwww/cgi-bin/savwareha/catfaq

*140 W. Technology Drive, Suite 400, Irvine, CA 92618
*+1 949 789 4361  *+1 949 789 4365
Corporate Website:  www.avnet.com



---------------------------------------------------------------------
To unsubscribe, e-mail: server-user-unsubscribe@james.apache.org
For additional commands, e-mail: server-user-help@james.apache.org


RE: Secure Password Authentication (SPA)

Posted by "Noel J. Bergman" <no...@devtech.com>.
Brent,

> Does "James" support Microsoft Secure Password Authentication
> (SPA/AUTH MSN) for SMTP

As noted by the article you referenced,
http://www.kuro5hin.org/story/2002/4/28/1436/66154, the "Secure Password
Authentication (SPA) is a feature provided by Microsoft's e-mail servers
(and subsequently implemented in its e-mail clients) as a secure means of
authenticating e-mail traffic (POP3, SMTP, and IMAP).  This document
describes the Microsoft-proprietary protocol that operates via the SMTP AUTH
interface defined by RFC 2554."

Although it operates as a standard RFC 2554 extension to the standard SMTP
protocol described by RFC 2821, Microsoft SPA itself is a
"Microsoft-proprietary protocol".

Please review in detail the new Microsoft Communications Protocol Program,
which you can find at
http://members.microsoft.com/consent/Info/default.aspx.  It appears that
Microsoft is taking to licensing the wire-level protocols that they use as a
solution to the problem of Open Source software and competitive
implementations.  According to Microsoft's site, implementing any of
Microsoft's licensed protocols, whether extensions to standard public
protocols or Microsoft-originated protocols, will require the payment of a
licensing fee.

	--- Noel

-----Original Message-----
From: Serge Knystautas [mailto:sergek@lokitech.com]
Sent: Monday, August 04, 2003 15:24
To: James Users List
Subject: Re: Secure Password Authentication (SPA)

I'm not sure whether this helps that specific Microsoft protocol, but
http://jcifs.samba.org has a Java library that can help Java
applications integrate with Window-domain logins (NTLM).  Looking at the
link you sent briefly, it seems like NTLM is the basis of SPA, so then
in theory jCIFS should be able to help.

--
Serge Knystautas
President
Lokitech >> software . strategy . design >> http://www.lokitech.com
p. 301.656.5501
e. sergek@lokitech.com

Spencer, Brent wrote:
> Does "James" support Microsoft Secure Password Authentication (SPA/AUTH
MSN)
> for SMTP (smtp.email.msn.com) communication -
> http://www.kuro5hin.org/story/2002/4/28/1436/66154?
>
> If not, do you know of any Java based application that does?


---------------------------------------------------------------------
To unsubscribe, e-mail: server-user-unsubscribe@james.apache.org
For additional commands, e-mail: server-user-help@james.apache.org


Re: Secure Password Authentication (SPA)

Posted by Serge Knystautas <se...@lokitech.com>.
I'm not sure whether this helps that specific Microsoft protocol, but 
http://jcifs.samba.org has a Java library that can help Java 
applications integrate with Window-domain logins (NTLM).  Looking at the 
link you sent briefly, it seems like NTLM is the basis of SPA, so then 
in theory jCIFS should be able to help.

-- 
Serge Knystautas
President
Lokitech >> software . strategy . design >> http://www.lokitech.com
p. 301.656.5501
e. sergek@lokitech.com

Spencer, Brent wrote:
> Does "James" support Microsoft Secure Password Authentication (SPA/AUTH MSN)
> for SMTP (smtp.email.msn.com) communication -
> http://www.kuro5hin.org/story/2002/4/28/1436/66154?
> 
> If not, do you know of any Java based application that does?


---------------------------------------------------------------------
To unsubscribe, e-mail: server-user-unsubscribe@james.apache.org
For additional commands, e-mail: server-user-help@james.apache.org