IPv6 auth failed

[Lefteris Tsintjelis]

On 9/8/2020 9:57, Aki Tuomi wrote:
> 
>> On 09/08/2020 09:53 Lefteris Tsintjelis <lefty at spes.gr> wrote:
>>
>>   
>> On 9/8/2020 9:51, Aki Tuomi wrote:
>>>
>>>> On 09/08/2020 09:15 Lefteris Tsintjelis <lefty at spes.gr> wrote:
>>>>
>>>>    
>>>> I am using latest Windows Thunderbird 68.11.0 and dovecot 2.3.10.1_2
>>>> with FreeBSD 12.1-RELEASE-p8. Whenever I enable dovecot IPv6 and I try
>>>> to login I get auth failed.
>>>>
>>>> Aug 09 08:36:11 imap-login: Info: Disconnected: Inactivity (auth failed,
>>>> 2 attempts in 180 secs): user=<user at domain.com>, method=CRAM-MD5,
>>>> rip=1:2:3:4::5, lip=1:2:3:6::7, TLS,
>>>> session=<HZeFLGusb8IgAQZ8LNQAEgAAAAAAAAAC>
>>>>
>>>> Switching dovecot back to IPv4 only (listen = *) starts to work as
>>>> expected. Roundcube seems to also have the same problem whenever dovecot
>>>> IPv6 is enabled.
>>>
>>> Are you intentionally using CRAM-MD5 to authenticate?
>>
>> Yes, but I have already tried plain with same results.
> 
> Can you turn on
> 
> auth_debug=yes
> 
> and see if that gives any further insight to this problem. I am using IPv6 myself with dovecot, so I doubt that's the problem.

Very right, it was not an IPv6 problem.

Aug 09 10:01:54 auth-worker(4431): Debug: 
sql(user at domain.com,1:2:3:4::5,<acTIaWysN8YgAQZ8LNQAEgAAAAAAAAAC>): 
allow_nets: Matching for network 0.0.0.0/0
Aug 09 10:01:54 auth-worker(4431): Info: 
sql(user at domain.com,1:2:3:4::5,<acTIaWysN8YgAQZ8LNQAEgAAAAAAAAAC>): 
allow_nets check failed: IP 1:2:3:4::5 not in allowed networks

I included IPv6 addresses in the allow_nets and now all works great!
Thank you Aki