RoundCube 0.7.1 login failed

Posted on by

Note to readers: RoundCube 0.7.1 uses the Iloha IMAP Library. RoundCube 0.7.2 does not, so this particular problem may already be fixed.

In the past I’ve had to enable PLAIN IMAP authentication because older versions of M$ Outlook didn’t support CRAM-MD5 authentication. This means that my IMAP server advertises CRAM-MD5 as well as PLAIN as possible authentication methods.

All my clients who wanted to login using PLAIN cannot login using CRAM-MD5 because their passwords have to be stored in a different format.

A problem occurs when you set RoundCube’s “imap_auth_type” to “check”, because it picks CRAM-MD5 over PLAIN every time. I don’t want this to happen because some of my clients cannot login using CRAM-MD5. Ideally RoundCube should be following RFC3501:

If an AUTHENTICATE command fails with a NO response, the client MAY try another authentication mechanism by issuing another AUTHENTICATE command. It MAY also attempt to authenticate by using the LOGIN command

…but RoundCube doesn’t. To temporarily fix the problem you should be able to set “imap_auth_type” to “plain” so that RoundCube always uses PLAIN to authenticate against the IMAP server. However, I found that this does not work in 0.7.1 because of the following problem:

RoundCube passes options to the iil_Connect function of the Iloha IMAP Library. The options object includes a property “auth_method”, meant to control the authentication method, but this is never used, because the iil_Connect method expects this property to be named “imap”.

Line 382 of /program/include/rcmail.php is where the options object is defined – I simply changed ‘auth_method’ to ‘imap’.

9,425 thoughts on “RoundCube 0.7.1 login failed”

  2. ChinaWebX is a b2b seo agency china companies can use to reach decision-makers searching for products
    and services online. As a b2b seo company china businesses can work with, we focus on commercial keyword strategy, technical SEO, content optimization, and authority growth.
    Businesses looking for an seo consultant china can use
    ChinaWebX to build a clearer search strategy
    aimed at qualified international traffic and B2B lead generation.

  27. české fotbalové kluby v evropských pohárech

    my blog post sazka bonusový kód registrace; Don,

  29. roulette samsung france

    Feel free to visit my web-site :: comparer les sites de jeu en ligne
    et les casinos – Winnie
    -

  43. ruby fortune online pokies canada, dollar 5 deposit online g’day casino mobile –
    Sammy – united states and deposit 5 get
    100 free spins uk, or united kingdom poker slots free

  45. ChinaWebX is a b2b seo agency china companies can use to reach decision-makers searching for products and services online.
    As a b2b seo company china businesses can work with,
    we focus on commercial keyword strategy, technical
    SEO, content optimization, and authority growth.
    Businesses looking for an seo consultant china can use
    ChinaWebX to build a clearer search strategy aimed at qualified international
    traffic and B2B lead generation.

Leave a Reply

Your email address will not be published. Required fields are marked *

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>