RoundCube 0.7.1 login failed

Posted on by

Note to readers: RoundCube 0.7.1 uses the Iloha IMAP Library. RoundCube 0.7.2 does not, so this particular problem may already be fixed.

In the past I’ve had to enable PLAIN IMAP authentication because older versions of M$ Outlook didn’t support CRAM-MD5 authentication. This means that my IMAP server advertises CRAM-MD5 as well as PLAIN as possible authentication methods.

All my clients who wanted to login using PLAIN cannot login using CRAM-MD5 because their passwords have to be stored in a different format.

A problem occurs when you set RoundCube’s “imap_auth_type” to “check”, because it picks CRAM-MD5 over PLAIN every time. I don’t want this to happen because some of my clients cannot login using CRAM-MD5. Ideally RoundCube should be following RFC3501:

If an AUTHENTICATE command fails with a NO response, the client MAY try another authentication mechanism by issuing another AUTHENTICATE command. It MAY also attempt to authenticate by using the LOGIN command

…but RoundCube doesn’t. To temporarily fix the problem you should be able to set “imap_auth_type” to “plain” so that RoundCube always uses PLAIN to authenticate against the IMAP server. However, I found that this does not work in 0.7.1 because of the following problem:

RoundCube passes options to the iil_Connect function of the Iloha IMAP Library. The options object includes a property “auth_method”, meant to control the authentication method, but this is never used, because the iil_Connect method expects this property to be named “imap”.

Line 382 of /program/include/rcmail.php is where the options object is defined – I simply changed ‘auth_method’ to ‘imap’.

12,919 thoughts on “RoundCube 0.7.1 login failed”

  1. quatro casino together (Jeffery)
    canada, blackjack mulligan uk and no deposit online canadian casinos, or online
    gambling united states banned

  2. I payy a quick vijsit each dday some bblogs and
    information sites to read content, except this website offers fewture based content.
    xnxx

  5. Sweet blog! I found it while browsing on Yahoo News. Do you have any suggestions on how to get listed in Yahoo News? I’ve been trying for a while but I never seem to get there! Cheers

  7. Very rapidly this web site will be famous amid all blog visitors,
    due to it’s nice articles or reviews

  8. all slots casino 800 bonus (Mitzi) united kingdom
    reviews, united kingdom gambling revenue and where does native
    united statesn casino money go, or online casino canada free bonus

  24. online pokies free spins on sign up canada, united statesn biggest pokies
    operator and blackjack mulligan usa, or no deposit bonus aus casino

    my site; vegas roulette limits (Marian)

  27. You’re so cool! I don’t suppose I have read anything like that before.
    So good to find someone with original thoughts on this
    subject. Really.. thank you for starting this up.
    This site is one thing that’s needed on the web, someone with a bit of originality!

  39. Do you mind if I quote a few of your articles as long as I provide credit and sources back to your site?

    My blog is in the exact same area of interest as yours and my users would definitely benefit
    from a lot of the information you provide here.
    Please let me know if this alright with you. Appreciate
    it!

Leave a Reply

Your email address will not be published. Required fields are marked *

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>