RoundCube 0.7.1 login failed

Posted on by

Note to readers: RoundCube 0.7.1 uses the Iloha IMAP Library. RoundCube 0.7.2 does not, so this particular problem may already be fixed.

In the past I’ve had to enable PLAIN IMAP authentication because older versions of M$ Outlook didn’t support CRAM-MD5 authentication. This means that my IMAP server advertises CRAM-MD5 as well as PLAIN as possible authentication methods.

All my clients who wanted to login using PLAIN cannot login using CRAM-MD5 because their passwords have to be stored in a different format.

A problem occurs when you set RoundCube’s “imap_auth_type” to “check”, because it picks CRAM-MD5 over PLAIN every time. I don’t want this to happen because some of my clients cannot login using CRAM-MD5. Ideally RoundCube should be following RFC3501:

If an AUTHENTICATE command fails with a NO response, the client MAY try another authentication mechanism by issuing another AUTHENTICATE command. It MAY also attempt to authenticate by using the LOGIN command

…but RoundCube doesn’t. To temporarily fix the problem you should be able to set “imap_auth_type” to “plain” so that RoundCube always uses PLAIN to authenticate against the IMAP server. However, I found that this does not work in 0.7.1 because of the following problem:

RoundCube passes options to the iil_Connect function of the Iloha IMAP Library. The options object includes a property “auth_method”, meant to control the authentication method, but this is never used, because the iil_Connect method expects this property to be named “imap”.

Line 382 of /program/include/rcmail.php is where the options object is defined – I simply changed ‘auth_method’ to ‘imap’.

13,066 thoughts on “RoundCube 0.7.1 login failed”

  5. Hey I know this is off topic but I was wondering if you knew of any widgets I could add to my blog that automatically tweet my newest twitter updates. I’ve been looking for a plug-in like this for quite some time and was hoping maybe you would have some experience with something like this. Please let me know if you run into anything. I truly enjoy reading your blog and I look forward to your new updates.

  9. united statesn roulette online fast, no id casino
    uk and play pokies online canada, or usa casino rewards

    My blog post: fidget spinner gambling – Malinda,

  29. casino in british columbia united kingdom, online casino deposito minimo 1 euro – Douglas – paypal deposit usa and deposit 5 get 100 free spins uk, or free spins casino no deposit bonus united states

  30. online poker australia no deposit bonus, pay by mobile casino vodafone
    (Christina)
    age limit uk and best casino site canada, or united states online casino news

  45. Hey there, You’ve done a great job. I’ll certainly digg it and individually suggest to my friends. I’m sure they will be benefited from this website.

  48. Hey there would yoou mind letting me knpw which
    web hhost you’re workinmg with? I’ve loaded your blog in 3 differrent btowsers and I must
    saay thiss blog loads a lot quicke then most. Can you sugest
    a goo wweb hsting provider at a honest price? Thanks a lot, I appreciate it!

    xnxx

Leave a Reply

Your email address will not be published. Required fields are marked *

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>