[Dovecot] Dovecot and Outlook Express "plaintext authentication not allowed..."
Server: Ubuntu 11.10 server with postfix (MTA), dovecot (MDA) Mail client: Outlook Express in Windows XP with IMAP on port 143, SMTP on port 25
When tried to set up a new Outlook Express mail acct, the following error encountered:
Your IMAP server wishes to alert you to the following: plaintext authentication not allowed without SSL/TLS, but your client did it anyway. If anyone was listening, the password was exposed.
When asked "would you like to download folders from the mail server you added?" then got the following error:
The server has rejected your login. Please verify that your user name and password are correct.
I re-entered several time with the correct username and password, but still responded the same error.
Any insights would be greatly appreciated.
Here is the message from the /var/log/mail.log:
Apr 17 01:54:17 server dovecot: imap-login: Disconnected (tried to use disabled plaintext auth): rip= 192.168.20.51, lip=192.168.20.100Apr 17 01:54:28 server dovecot: imap-login: Disconnected (tried to use disabled plaintext auth): rip= 192.168.20.51, lip=192.168.20.100
What might be wrong in my dovecot.conf file. Below is my dovecot.conf file:
# 2.0.13: /etc/dovecot/dovecot.conf # OS: Linux 3.0.0-16-server x86_64 Ubuntu 11.10 log_timestamp = "%Y-%m-%d %H:%M:%S " mail_location = maildir:~/Maildir mail_privileged_group = mail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date passdb { driver = pam } passdb { driver = pam } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = imap pop3 sieve service auth { unix_listener /var/spool/postfix/private/auth-client { group = postfix mode = 0660 user = postfix } unix_listener /var/spool/postfix/private/dovecot-auth { group = postfix mode = 0660 user = postfix } user = root } ssl_cert = was automatically rejected:%n%r }
On 2012-04-17 5:16 AM, D Chen dchenusa@yahoo.com wrote:
When tried to set up a new Outlook Express mail acct, the following error encountered:
Your IMAP server wishes to alert you to the following: plaintext authentication not allowed without SSL/TLS, but your client did it anyway.
Ummm... hello? McFly? ;)
You need to configure SSL on Outlook Express (why on gods green earth you are using that is beyond me), as the error plainly says. Until you do this it doesn't matter what you enter for a username/password.
Also, you should be using SSL on port 993, because I'm fairly certain that Outlook Express doesn't support STARTTLS on port 143.
And off topic but in the same vein, for postfix/SMTP relay you should be using the submission port (STARTTLS on port 587) for most clients, but I think Outlook Express again doesn't work with it, so you will need to use the deprecated SSL on port 465 (these two need to be enabled in postfix/master.cf - just uncomment the examples).
--
Best regards,
Charles
Hi Charles,
Thanks for the response.
Per your suggestion, in Outlook Express I changed to use SSL on port 993 for IMAP, and port 465 for SMTP, the creation of the new account succeeded without error! However, when tried to send to my yahoo mail or gmail acct, got the following error: (apparently failed to send!)
"The message could not be sent because one of the recipients was rejected by the server. The
rejected email address was 'dchenusa@yahoo.com.' Subject: 'test out to yahoo mail'
Account:'dchen192.168.20.100'
Server: 192.168.20.100
Protocol: SMTP, server response: 554 5.7.1
PS. in the same client PC, using Thunderbird client, IMAP and SMTP configured with either with SSL or without SSL, both outgoing mails were sent successfully!
Any thought?
Thx again,
Dennis
From: Charles Marcus CMarcus@Media-Brokers.com To: dovecot@dovecot.org Sent: Tuesday, April 17, 2012 3:26 AM Subject: Re: [Dovecot] Dovecot and Outlook Express "plaintext authentication not allowed..."
On 2012-04-17 5:16 AM, D Chen dchenusa@yahoo.com wrote:
When tried to set up a new Outlook Express mail acct, the following error encountered:
Your IMAP server wishes to alert you to the following: plaintext authentication not allowed without SSL/TLS, but your client did it anyway.
Ummm... hello? McFly? ;)
You need to configure SSL on Outlook Express (why on gods green earth you are using that is beyond me), as the error plainly says. Until you do this it doesn't matter what you enter for a username/password.
Also, you should be using SSL on port 993, because I'm fairly certain that Outlook Express doesn't support STARTTLS on port 143.
And off topic but in the same vein, for postfix/SMTP relay you should be using the submission port (STARTTLS on port 587) for most clients, but I think Outlook Express again doesn't work with it, so you will need to use the deprecated SSL on port 465 (these two need to be enabled in postfix/master.cf - just uncomment the examples).
-- Best regards,
Charles
On Tue, 17 Apr 2012 13:41:20 -0700 (PDT) D Chen articulated:
Per your suggestion, in Outlook Express I changed to use SSL on port 993 for IMAP, and port 465 for SMTP, the creation of the new account succeeded without error! However, when tried to send to my yahoo mail or gmail acct, got the following error: (apparently failed to send!)
"The message could not be sent because one of the recipients was rejected by the server. The rejected email address was 'dchenusa@yahoo.com.' Subject: 'test out to yahoo mail' Account:'dchen192.168.20.100' Server: 192.168.20.100 Protocol: SMTP, server response: 554 5.7.1
: client host rejected access denied, port: 465, Secured [SSL]: Yes, server Error: 554, Error number: 0x800CCC79" PS. in the same client PC, using Thunderbird client, IMAP and SMTP configured with either with SSL or without SSL, both outgoing mails were sent successfully!
Any thought?
Well, my first thought is that you should lost the tendency to "Top Post".
Second, why are you screwing around with the SMTP settings? Dovecot could not care less about them.
Third, Outlook Express has been abandoned years ago. Why are you still using it? If you really need it, try Windows Live Essentials http://windows.microsoft.com/en-US/windows-live/essentials-other-programs. I know users who have it working with Dovecot just fine.
-- Jerry ♔
Disclaimer: off-list followups get on-list replies or get ignored. Please do not ignore the Reply-To header.
On 2012-04-17 4:41 PM, D Chen dchenusa@yahoo.com wrote:
Per your suggestion, in Outlook Express I changed to use SSL on port 993 for IMAP, and port 465 for SMTP, the creation of the new account succeeded without error! However, when tried to send to my yahoo mail or gmail acct, got the following error: (apparently failed to send!)
Changed subject to OT because this is not relevant to dovecot...
"The message could not be sent because one of the recipients was rejected by the server. The rejected email address was 'dchenusa@yahoo.com.' Subject: 'test out to yahoo mail' Account:'dchen192.168.20.100' Server: 192.168.20.100 Protocol: SMTP, server response: 554 5.7.1
That is a 'Relay access denied' error (assuming yahoo uses correct error codes, which is probably a bad assumption)...
Either Yahoo doesn't support port 465 (try the submission port for your yahoo smtp server - 587)... or you have a free account which doesn't allow relaying using their servers (so you'd have to use something else for sending - what does the Thunderbird client use for sending for that account?)...
But as suggested... don't use Outlook Express, use a modern mail client (Thunderbird is my preference, but someone else suggested Windows Live Mail which does suck much less than Outlook Express)...
--
Best regards,
Charles
On 17/04/2012 12:16, D Chen wrote:
Server: Ubuntu 11.10 server with postfix (MTA), dovecot (MDA) Mail client: Outlook Express in Windows XP with IMAP on port 143, SMTP on port 25
When tried to set up a new Outlook Express mail acct, the following error encountered:
Your IMAP server wishes to alert you to the following: plaintext authentication not allowed without SSL/TLS, but your client did it anyway. If anyone was listening, the password was exposed.
When asked "would you like to download folders from the mail server you added?" then got the following error:
The server has rejected your login. Please verify that your user name and password are correct.
I re-entered several time with the correct username and password, but still responded the same error.
Any insights would be greatly appreciated.
Here is the message from the /var/log/mail.log:
Apr 17 01:54:17 server dovecot: imap-login: Disconnected (tried to use disabled plaintext auth): rip= 192.168.20.51, lip=192.168.20.100Apr 17 01:54:28 server dovecot: imap-login: Disconnected (tried to use disabled plaintext auth): rip= 192.168.20.51, lip=192.168.20.100
What might be wrong in my dovecot.conf file. Below is my dovecot.conf file:
# 2.0.13: /etc/dovecot/dovecot.conf # OS: Linux 3.0.0-16-server x86_64 Ubuntu 11.10 log_timestamp = "%Y-%m-%d %H:%M:%S " mail_location = maildir:~/Maildir mail_privileged_group = mail managesieve_notify_capability = mailto managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date passdb { driver = pam } passdb { driver = pam } plugin { sieve = ~/.dovecot.sieve sieve_dir = ~/sieve } protocols = imap pop3 sieve service auth { unix_listener /var/spool/postfix/private/auth-client { group = postfix mode = 0660 user = postfix } unix_listener /var/spool/postfix/private/dovecot-auth { group = postfix mode = 0660 user = postfix } user = root } ssl_cert = was automatically rejected:%n%r }
Maybe auth_mechanisms = plain login cram-md5
participants (4)
-
Birta Levente
-
Charles Marcus
-
D Chen
-
Jerry