RoundCube 0.7.1 login failed

Posted on by

Note to readers: RoundCube 0.7.1 uses the Iloha IMAP Library. RoundCube 0.7.2 does not, so this particular problem may already be fixed.

In the past I’ve had to enable PLAIN IMAP authentication because older versions of M$ Outlook didn’t support CRAM-MD5 authentication. This means that my IMAP server advertises CRAM-MD5 as well as PLAIN as possible authentication methods.

All my clients who wanted to login using PLAIN cannot login using CRAM-MD5 because their passwords have to be stored in a different format.

A problem occurs when you set RoundCube’s “imap_auth_type” to “check”, because it picks CRAM-MD5 over PLAIN every time. I don’t want this to happen because some of my clients cannot login using CRAM-MD5. Ideally RoundCube should be following RFC3501:

If an AUTHENTICATE command fails with a NO response, the client MAY try another authentication mechanism by issuing another AUTHENTICATE command. It MAY also attempt to authenticate by using the LOGIN command

…but RoundCube doesn’t. To temporarily fix the problem you should be able to set “imap_auth_type” to “plain” so that RoundCube always uses PLAIN to authenticate against the IMAP server. However, I found that this does not work in 0.7.1 because of the following problem:

RoundCube passes options to the iil_Connect function of the Iloha IMAP Library. The options object includes a property “auth_method”, meant to control the authentication method, but this is never used, because the iil_Connect method expects this property to be named “imap”.

Line 382 of /program/include/rcmail.php is where the options object is defined – I simply changed ‘auth_method’ to ‘imap’.

6,297 thoughts on “RoundCube 0.7.1 login failed”

  3. Hi to every one, since I am truly keen of reading this weblog’s post to
    be updated on a regular basis. It consists of pleasant material.

  6. Hi! I know this is somewhat off-topic however I needed to ask.

    Does operating a well-established blog such as yours take a lot of
    work? I’m completely new to operating a blog however I do
    write in my diary everyday. I’d like to start a blog so I can easily share my own experience and views online.

    Please let me know if you have any recommendations or tips for
    new aspiring blog owners. Appreciate it!

  11. Have you ever considered about including a little bit more than just your articles?

    I mean, what you say is valuable and all. Nevertheless
    just imagine if you added some great images or videos to give your posts more, “pop”!
    Your content is excellent but with pics and clips, this blog could certainly
    be one of the greatest in its niche. Excellent blog!

  12. Today, while I was at work, my cousin stole my iPad and
    tested to see if it can survive a thirty foot drop, just so she can be a youtube sensation.
    My iPad is now broken and she has 83 views. I know this is totally off topic but I had to share it with
    someone!

  19. whoah this weblog is great i like reading your articles. Stay up the great work! You realize, lots of persons are looking round for this info, you can aid them greatly.

Leave a Reply

Your email address will not be published. Required fields are marked *

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>