RoundCube 0.7.1 login failed

Posted on by

Note to readers: RoundCube 0.7.1 uses the Iloha IMAP Library. RoundCube 0.7.2 does not, so this particular problem may already be fixed.

In the past I’ve had to enable PLAIN IMAP authentication because older versions of M$ Outlook didn’t support CRAM-MD5 authentication. This means that my IMAP server advertises CRAM-MD5 as well as PLAIN as possible authentication methods.

All my clients who wanted to login using PLAIN cannot login using CRAM-MD5 because their passwords have to be stored in a different format.

A problem occurs when you set RoundCube’s “imap_auth_type” to “check”, because it picks CRAM-MD5 over PLAIN every time. I don’t want this to happen because some of my clients cannot login using CRAM-MD5. Ideally RoundCube should be following RFC3501:

If an AUTHENTICATE command fails with a NO response, the client MAY try another authentication mechanism by issuing another AUTHENTICATE command. It MAY also attempt to authenticate by using the LOGIN command

…but RoundCube doesn’t. To temporarily fix the problem you should be able to set “imap_auth_type” to “plain” so that RoundCube always uses PLAIN to authenticate against the IMAP server. However, I found that this does not work in 0.7.1 because of the following problem:

RoundCube passes options to the iil_Connect function of the Iloha IMAP Library. The options object includes a property “auth_method”, meant to control the authentication method, but this is never used, because the iil_Connect method expects this property to be named “imap”.

Line 382 of /program/include/rcmail.php is where the options object is defined – I simply changed ‘auth_method’ to ‘imap’.

9,398 thoughts on “RoundCube 0.7.1 login failed”

  12. Have you ever thought about publishing an ebook or guest
    authoring on other websites? I have a blog centered on the same topics you
    discuss and would love to have you share some stories/information. I
    know my viewers would appreciate your work. If you’re even remotely interested,
    feel free to shoot me an e-mail.

  14. Greetings! This is my first visit to your blog! We are a team of volunteers and
    starting a new initiative in a community in the same niche.
    Your blog provided us beneficial information to work on. You have done a wonderful job!

  16. Excellent way of explaining, and pleasant article to get facts on the topic of my presentation topic, which i am going to deliver
    in institution of higher education.

  18. Thanks for your exciting article. One other problem is that mesothelioma cancer is generally the result of the inhalation of fibres from asbestos fiber, which is a extremely dangerous material. It truly is commonly noticed among individuals in the structure industry with long exposure to asbestos. It can be caused by residing in asbestos insulated buildings for long periods of time, Family genes plays a crucial role, and some individuals are more vulnerable to the risk compared to others.

  37. new zealandn no deposit bonus casinos, united kingdom roulette for mobile
    phones and canada casino download free game, or online casino canada
    free bonus

    my web-site :: states where craps is legal (Clark)

  44. usa online casinos 2021, latest no deposit casino bonuses usa and free poker no deposit uk, or united statesn poker tour

    My web site – how old to gamble in each state (Albertha)

  45. 10 minimum cash bandits no deposit free spins, Amparo, casino united kingdom, united statesn roulette wheel number order and new
    zealandn real money pokies, or new online casino australia 2021

  49. best online usa casinos, can i play online pokies in australia and new zealandn eagle slot machine, or is online bingo legal in canada

    Here is my web-site; rules for playing blackjack at a casino (Loyd)

Leave a Reply

Your email address will not be published. Required fields are marked *

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>