RoundCube 0.7.1 login failed

Posted on by

Note to readers: RoundCube 0.7.1 uses the Iloha IMAP Library. RoundCube 0.7.2 does not, so this particular problem may already be fixed.

In the past I’ve had to enable PLAIN IMAP authentication because older versions of M$ Outlook didn’t support CRAM-MD5 authentication. This means that my IMAP server advertises CRAM-MD5 as well as PLAIN as possible authentication methods.

All my clients who wanted to login using PLAIN cannot login using CRAM-MD5 because their passwords have to be stored in a different format.

A problem occurs when you set RoundCube’s “imap_auth_type” to “check”, because it picks CRAM-MD5 over PLAIN every time. I don’t want this to happen because some of my clients cannot login using CRAM-MD5. Ideally RoundCube should be following RFC3501:

If an AUTHENTICATE command fails with a NO response, the client MAY try another authentication mechanism by issuing another AUTHENTICATE command. It MAY also attempt to authenticate by using the LOGIN command

…but RoundCube doesn’t. To temporarily fix the problem you should be able to set “imap_auth_type” to “plain” so that RoundCube always uses PLAIN to authenticate against the IMAP server. However, I found that this does not work in 0.7.1 because of the following problem:

RoundCube passes options to the iil_Connect function of the Iloha IMAP Library. The options object includes a property “auth_method”, meant to control the authentication method, but this is never used, because the iil_Connect method expects this property to be named “imap”.

Line 382 of /program/include/rcmail.php is where the options object is defined – I simply changed ‘auth_method’ to ‘imap’.

9,435 thoughts on “RoundCube 0.7.1 login failed”

  3. I love your blog.. very nice colors & theme. Did you create this website yourself or did you hire someone to do it for you?
    Plz answer back as I’m looking to design my
    own blog and would like to find out where u got this from.
    appreciate it

  20. I’ve been browsing on-line more than three hours as of late,
    yet I by no means discovered any interesting article like
    yours. It’s pretty worth enough for me. In my view, if all website owners
    and bloggers made good content material as you probably did,
    the internet can be a lot more useful than ever before.

  21. I was suggested this website by my cousin. I am not sure whether
    this post is written by him as nobody else know such detailed about my problem.
    You are incredible! Thanks!

  27. An impressive share! I have just forwarded this onto a co-worker who has
    been doing a little research on this. And he actually bought
    me dinner because I discovered it for him… lol. So let me reword this….
    Thank YOU for the meal!! But yeah, thanks for spending time to discuss
    this issue here on your web site.

  30. I am really impressed with your writing skills as well as with the layout
    on your weblog. Is this a paid theme or did you modify it yourself?

    Anyway keep up the nice quality writing, it is rare to
    see a nice blog like this one these days.

  47. You have made some good points there. I checked on the internet to find out more about the issue and found most
    individuals will go along with your views on this website.

Leave a Reply

Your email address will not be published. Required fields are marked *

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>