diff options
Diffstat (limited to 'fetchmail.man')
| -rw-r--r-- | fetchmail.man | 28 |
1 files changed, 15 insertions, 13 deletions
diff --git a/fetchmail.man b/fetchmail.man index db1444aa..26e940bb 100644 --- a/fetchmail.man +++ b/fetchmail.man @@ -499,20 +499,22 @@ when interface data is being collected. .TP .B --preauth <type> (Keyword: preauth[enticate]) -This option permits you to specify a preauthentication type (see USER -AUTHENTICATION below for details). The possible values are +This option permits you to specify an authentication type (see USER +AUTHENTICATION below for details). The possible values are \fBany\fR, \&`\fBpassword\fR', `\fBkerberos_v5\fR' and `\fBkerberos\fR' (or, for excruciating exactness, `\fBkerberos_v4\fR'), \fRgssapi\fR, and -\fBssh\fR. Any value other than "password" suppresses fetchmail's -normal inquiry for a password. Specify \fBssh\fR when you are using -an end-to-end secure connection such as an ssh tunnel; specify -\fRgssapi\fR or \fBkerberos_v4\fR if you are using a protocol variant -that employs GSSAPI or K4. Other values of this option are provided -primarily for developers; choosing KPOP protocol automatically selects -Kerberos preauthentication, and all other alternatives use password -authentication (though APOP uses a generated one-time key as the -password and IMAP-K4 uses RFC1731 Kerberos v4 authentication). This -option does not work with ETRN or ODMR. +\fBssh\fR. When \fBany\fR (the default) is specified, fetchmail tries +first methods that don't require a password (GSSAPI, KERBEROS_IV); +then it looks for methods that mask your password (CRAM-MD5, X-OTP); +and only if it the server doesn't support any of those will it ship +your password en clair. Other values may be used to force various +authentication methods (\fBssh\fR suppresses authentication). Any +value other than "password" suppresses fetchmail's normal inquiry for +a password. Specify \fBssh\fR when you are using an end-to-end secure +connection such as an ssh tunnel; specify \fRgssapi\fR or +\fBkerberos_v4\fR if you are using a protocol variant that employs +GSSAPI or K4. Choosing KPOP protocol automatically selects Kerberos +preauthentication. This option does not work with ETRN or ODMR. .SS Miscellaneous Options .TP .B \-f <pathname>, --fetchmailrc <pathname> @@ -601,7 +603,7 @@ editor like written in Python. .SH USER AUTHENTICATION AND ENCRYPTION -Every mode except ETRN requires authentication of the client. +All modes except ETRN and ODMR requires authentication of the client. Normal user authentication in .I fetchmail is very much like the authentication mechanism of |