-----Original Message-----
From: Eric Shubert [mailto:[email protected]]
Sent: Wednesday, March 16, 2011 11:43 AM
To: [email protected]
Subject: [qmailtoaster] Re: IMAP Ports
On 03/16/2011 09:28 AM, Scott Hughes wrote:
>
> I can telnet in port 143 from inside and outside the server. I just cannot
> get logged in. It is like it is not accepting my password for some reason.
I
> have checked the imap4 and imap4-ssl logs and am not even seeing the
> attempt. As soon as I change my port on the client side to 993 it works
> perfectly. Here is my dovecot config:
>
> ## Dovecot configuration file
>
> # Base directory where to store runtime data.
> base_dir = /var/run/dovecot/
>
> imap_client_workarounds = delay-newmail outlook-idle
>
> # Protocols we want to be serving: imap imaps pop3 pop3s
> # If you only want to use dovecot-auth, you can set this to "none".
> protocols = imap imaps
>
> ##
> ## Logging
> ##
> log_path = /dev/stderr
> info_log_path = /dev/stderr
> log_timestamp = ""
>
> ##
> ## SSL settings
> ##
> #ssl_disable = no
> ssl_cert_file = /var/qmail/control/servercert.pem
> ssl_key_file = /var/qmail/control/servercert.pem
> ssl_cipher_list = ALL:!LOW
> verbose_ssl = yes
>
> ##
> ## Login processes
> ##
> login_dir = /usr/local/var/run/dovecot/login
> login_user = dovecot
> login_process_per_connection = yes
> login_processes_count = 3
> login_max_processes_count = 128
> login_greeting = Dovecot ready.
> login_log_format_elements = user=<%u> method=%m rip=%r lip=%l %c
>
> ##
> ## Mailbox locations and namespaces
> ##
> mail_location = maildir:~/Maildir
> namespace private {
>
> separator = .
> prefix = INBOX.
> inbox = yes
>
> }
>
> ##
> ## Mail processes
> ##
> verbose_proctitle = yes
> first_valid_uid = 89
> last_valid_uid = 89
>
>
> ##
> ## Authentication processes
> ##
> disable_plaintext_auth = yes
>
> auth default {
>
> mechanisms = plain login digest-md5 cram-md5
> passdb vpopmail {
>
> args =
>
> }
> userdb vpopmail {
> }
> user = vpopmail
> count = 1
> ssl_require_client_cert = no
> }
>
> ## END
>
> Thanks,
> Scott
>
Which dovecot version?
There are packages of dovecot-2.0.11 for CentOS/QMT in the QTP repo. You
can install it with yum. If you didn't install dovecot with rpm, you
should "make uninstall" it first.
That being said, I'm guessing that your client doesn't have TLS or
secure logins enabled with port 143. Since you have
"disable_plaintext_auth = yes", dovecot will not allow logins with
passwords that are sent in the clear (which is a good thing). To use
port 143, clients need either secure logins (cram-md5) or TLS enabled.
TLS is preferred, as it will encrypt the entire connection. Note, that
TLS on port 143 is also preferred over IMAP/SSL on port 993.
--
-Eric 'shubes'
----------------------------------------------------------------------------
-----
I realized that I was looking in the wrong log file (I wasn't looking in the
dovecot log file). Here is what I am getting in the dovecot log file that I
think is relevant:
@400000004d80ea1a1a57ef44 imap-login: Info: Disconnected (auth failed, 5
attempts): method=DIGEST-MD5, rip=66.255.244.194, lip=66.255.244.196
Should I enable the method of DIGEST-MD5 in my config file?
My version of dovecot is: Info: Dovecot v1.2.3 starting up
Thanks,
Scott
---------------------------------------------------------------------------------
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
If you need professional help with your setup, contact them today!
---------------------------------------------------------------------------------
Please visit qmailtoaster.com for the latest news, updates, and packages.
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
