Using 1.8e on Solaris:

When anyone tries to view an attachment to a message fom the archives, the
system asks for a login... even if they've already logged in. After that,
the system never seems to recognise their cookie for viewing attachments,
though it works fine for access to lists.

-- DCP