RoundCube 0.7.1 login failed

Posted on by

Note to readers: RoundCube 0.7.1 uses the Iloha IMAP Library. RoundCube 0.7.2 does not, so this particular problem may already be fixed.

In the past I’ve had to enable PLAIN IMAP authentication because older versions of M$ Outlook didn’t support CRAM-MD5 authentication. This means that my IMAP server advertises CRAM-MD5 as well as PLAIN as possible authentication methods.

All my clients who wanted to login using PLAIN cannot login using CRAM-MD5 because their passwords have to be stored in a different format.

A problem occurs when you set RoundCube’s “imap_auth_type” to “check”, because it picks CRAM-MD5 over PLAIN every time. I don’t want this to happen because some of my clients cannot login using CRAM-MD5. Ideally RoundCube should be following RFC3501:

If an AUTHENTICATE command fails with a NO response, the client MAY try another authentication mechanism by issuing another AUTHENTICATE command. It MAY also attempt to authenticate by using the LOGIN command

…but RoundCube doesn’t. To temporarily fix the problem you should be able to set “imap_auth_type” to “plain” so that RoundCube always uses PLAIN to authenticate against the IMAP server. However, I found that this does not work in 0.7.1 because of the following problem:

RoundCube passes options to the iil_Connect function of the Iloha IMAP Library. The options object includes a property “auth_method”, meant to control the authentication method, but this is never used, because the iil_Connect method expects this property to be named “imap”.

Line 382 of /program/include/rcmail.php is where the options object is defined – I simply changed ‘auth_method’ to ‘imap’.

6,300 thoughts on “RoundCube 0.7.1 login failed”

  6. You made some first rate points there. I seemed on the internet for the problem and located most individuals will go along with along with your website.

  7. You can definitely see your skills within the work you write.
    The arena hopes for even more passionate writers such as you who
    aren’t afraid to mention how they believe. All the time go after your heart.

  8. Asking questions are actually nice thing if you are not understanding something entirely, however this piece of writing gives pleasant understanding yet.

  13. I’ve observed that in the world these days, video games are classified as the latest rage with children of all ages. There are occassions when it may be out of the question to drag your son or daughter away from the activities. If you want the very best of both worlds, there are several educational activities for kids. Good post.

  24. Good day! This is my first visit to your blog! We are a collection of volunteers and starting a
    new project in a community in the same niche.
    Your blog provided us useful information to work on. You
    have done a outstanding job!

  26. I’m not sure where you are getting your information, but good topic.
    I needs to spend some time learning more or understanding more.
    Thanks for magnificent info I was looking for this information for my mission.

  32. Aw, this was an incredibly nice post. Taking a few minutes
    and actual effort to create a top notch article… but what
    can I say… I put things off a lot and never manage to get nearly
    anything done.

  34. Hey there! This is my 1st comment here so I just wanted to give a quick shout
    out and say I really enjoy reading your posts.
    Can you suggest any other blogs/websites/forums that cover the same
    topics? Thanks a ton!

Leave a Reply

Your email address will not be published. Required fields are marked *

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>