From: alex@milivojevic.org
As I said, there are multiple domains, so IMAP server can't simply slap @REALM to the end of user supplied username and do the check directly.
Ahhh, a key point I missed. My apologies.
For historical reasons, IMAP server uses flat userspace (while in reality it is more tree-like). And nope, having users type the @REALM part during login is not acceptable solution (most of them don't even know what @REALM should be, nor should they be bothered with such details).
Hmmm, most usrs have to do DOMAIN/user for Windows DCs so I don't know how "unacceptable" is is to require "@REALM," but that's just my view.
-- Bryan J. Smith mailto:b.j.smith@ieee.org