Users unable to login

[Aki Tuomi]

You can't use DIGEST-MD5 if you have hashed passwords (using other than DIGEST-MD5 scheme).

Aki

> On 21/10/2020 16:52 jesus san miguel <jesus.sanmiguel at gmail.com> wrote:
> 
>  
> Yes, something came up here:
> 
> Oct 21 15:34:18 auth: Debug: auth client connected (pid=1706005)
> 
> Oct 21 15:34:18 auth: Debug: client in: AUTH 1 DIGEST-MD5 service=imap
> secured session=EQqBZy6yBJQAAAAAAAAAAAAAAAAAAAAB lip=::1rip=::1
> lport=143 rport=37892
> 
> Oct 21 15:34:18 auth: Debug: client passdb out: CONT 1
> cmVhbG09IiIsbm9uY2U9ImxFZEFqZG91OFNTRWJXMWo4dWNwdWc9PSIscW9wPSJhdXRoIixjaGFyc2V0PSJ1dGYtOCIsYWxnb3JpdGhtPSJtZDUtc2VzcyI=
> 
> Oct 21 15:34:18 auth: Debug: client in: CONT<hidden>
> 
> Oct 21 15:34:18 auth: Debug:
> vpopmail(someuser at somedomain.com,::1,<EQqBZy6yBJQAAAAAAAAAAAAAAAAAAAAB>):
> Performing passdb lookup
> 
> Oct 21 15:34:18 auth: Debug:
> vpopmail(someuser at somedomain.com,::1,<EQqBZy6yBJQAAAAAAAAAAAAAAAAAAAAB>):
> cache hit: <hidden>
> 
> Oct 21 15:34:18 auth: Info:
> vpopmail(someuser at somedomain.com,::1,<EQqBZy6yBJQAAAAAAAAAAAAAAAAAAAAB>):
> Requested DIGEST-MD5 scheme, but we have only SHA1
> 
> Oct 21 15:34:18 auth: Debug:
> vpopmail(someuser at somedomain.com,::1,<EQqBZy6yBJQAAAAAAAAAAAAAAAAAAAAB>):
> Finished passdb lookup
> 
> Oct 21 15:34:18 auth: Debug:
> auth(someuser at somedomain.com,::1,<EQqBZy6yBJQAAAAAAAAAAAAAAAAAAAAB>):
> Auth request finished
> 
> Oct 21 15:34:20 auth: Debug: client passdb out: FAIL 1
> user=someuser at somedomain.com
> 
> Oct 21 15:34:20 imap-login: Info: Disconnected (auth failed, 1
> attempts in 2 secs): user=<someuser at somedomain.com>,
> method=DIGEST-MD5, rip=::1, lip=::1, secured,
> session=<EQqBZy6yBJQAAAAAAAAAAAAAAAAAAAAB>
> 
> On Wed, Oct 21, 2020 at 1:11 PM Aki Tuomi <aki.tuomi at open-xchange.com> wrote:
> >
> > Can you turn on
> >
> > auth_debug=yes
> >
> > and then see what happens?
> >
> > Aki
> >
> > > On 21/10/2020 13:46 jesus san miguel <jesus.sanmiguel at gmail.com> wrote:
> > >
> > >
> > > Yes, we support DIGEST-MD5, but the password is correct: If I restart
> > > the service, they can login immediately.
> > >
> > > [root at hermes dovecot]# grep md5 *
> > > grep: conf.d: Is a directory
> > > toaster.conf:auth_mechanisms = plain login digest-md5 cram-md5
> > > [root at hermes dovecot]#
> > >
> > > On Wed, Oct 21, 2020 at 12:12 PM Aki Tuomi <aki.tuomi at open-xchange.com> wrote:
> > > >
> > > >
> > > > > On 21/10/2020 12:58 jesus san miguel <jesus.sanmiguel at gmail.com> wrote:
> > > > >
> > > > >
> > > > > I have certain power users who can't login through POP3 or IMAP from
> > > > > their computer while being receiving mail on their cell phones (pop3),
> > > > > despite pop3_lock_session = no
> > > > >
> > > > > Am I hitting some other limit? I don't see any error in dovecot.log
> > > > > but a generic failed login:
> > > > >
> > > > > Oct 21 10:31:44 imap-login: Info: Disconnected (auth failed, 1
> > > > > attempts in 2 secs): user=<someuser at somedomain.com>,
> > > > > method=DIGEST-MD5, rip=::1, lip=::1, secured,
> > > > > session=<XSVQLSqy2IYAAAAAAAAAAAAAAAAAAAAB>
> > > > >
> > > > > Running version is 2.3.11.3
> > > >
> > > > Do you support DIGEST-MD5 logins? If yes, then they have wrong password.
> > > >
> > > > Aki