Issue connecting to dovecot from remote machine

[Steffen Kaiser]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Sat, 18 Feb 2017, Antoine Sirven wrote:

> I've set up a postfix +dovecot configuration on my debian jessie.
> But I have a connection issue. When I try to connect from thunderbird it
> doesn not work. When I check out my debug logs I get :
> auth-worker(22252): Info: pam(myuser,hostIP): pam_authenticate()
> failed: Authentication failure (password mismatch?) (given password:
> correctPassword)
>
> Running doveadm auth test tells me I can authenticate with the same
> password.
> So I tried connecting via openssl.
> When I connect from my local host, everything goes fine :
> * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE
> IDLE AUTH=PLAIN AUTH=LOGIN AUTH=CRAM-MD5] Dovecot ready.
> a login myUser myPassword
> a OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE
> IDLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS
> THREAD=ORDEREDSUBJECT MULTIAPPEND URL-PARTIAL CATENATE UNSELECT CHILDREN
> NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH
> ESORT SEARCHRES WITHIN CONTEXT=SEARCH LIST-STATUS SPECIAL-USE BINARY
> MOVE] Logged in
>
>
> But when I run the same thing from my remote laptop, I never get any
> reply from the imap server. It's as if the request wasn't reaching the
> server. Although I do get a first reply from the server, I just can't
> log in.
> * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE
> IDLE AUTH=PLAIN AUTH=LOGIN AUTH=CRAM-MD5] Dovecot ready.
> a login myUser myPassword
>
> (... and then nothing...)
>

I would:

1) sniff the connection on the mail server, if there is traffic after 
sending the login

2) test if you can log in locally while the remote connection hangs

3) does PAM performs some IP checks?

- -- 
Steffen Kaiser
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQEVAwUBWKqpmnz1H7kL/d9rAQLMCAf8CWN6vjosNYc9YjF7gGtXTLTUjqLon0an
fIO/ia+esglLuKLzu1VQ2cBSDcHgUhXscrMVwwf8SZxpK/xGL9FrwYEQf48dGym2
hp/csY5GjR2erDeKJYKQHkcgEpKhK1pveNIbVs5Z50mjHwbAuKIm92uNlxi8SJ08
DI5fNynUwisfcugAyaD3rcmylkDNSwRFaJMqyGGsIlSGBhy/e6rwxGZqpVsYoCk2
Tx6wHWRcg1p48EzqQbH+qpImRJiQhmsvrSDbqAcj0JDQr6ZvNw6ZyCmjniHZrgt3
GtSwupY8Wp3q0RXV+B2D6D12AjJC+vBfDJalS7Bu0cLDIVdSyv/RRQ==
=Hw5M
-----END PGP SIGNATURE-----