LinuxQuestions.org
Register a domain and help support LQ
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices

Reply
 
Search this Thread
Old 08-08-2012, 02:34 AM   #1
snowweb
Member
 
Registered: May 2008
Distribution: Ubuntu12, CentOS6
Posts: 61

Rep: Reputation: 0
Dovecot: Changing IMAP authentication from PLAIN to CRAM-MD5


I've just installed Dovecot 2.0.9 and roundcube.

I've got it working with PLAIN authentication_mechanism, but I think I should change it to CRAM-MD5.

I'm not sure if I've understood this correctly though. Am I correct in thinking that this is not concerning the encryption used to store the user passwords (since that is SHA512 in my case, but it is only concerning the encryption used for communication between the client IMAP application and dovecot?

This is confusing me as some of the authentication types can be used in both, eg. CRAM-MD5.

If I've understood this correctly then, am I also correct in thinking that to change the authentication type/mechanism to CRAM-MD5 (leaving the passwords encrypted as SHA512), I need to set:

Code:
auth_mechanisms = cram-md5
in /etc/dovecot/conf.d/10-auth.conf and in Roundcube main.inc.php:
Code:
$rcmail_config['imap_auth_type'] = 'CRAM-MD5';
If so, then something's still wrong because I can no longer login using mutt using:
Code:
mutt -f imap://peter@localhost
which I was able to do before and also login to Roundcube now fails, saying:
Code:
IMAP Error in /usr/share/roundcubemail/program/include/rcube_imap.php (205): Login failed for peter from 112.201.185.47. AUTHENTICATE CRAM-MD5: A0001 NO [AUTHENTICATIONFAILED] Authentication failed.
I'm wondering what I've missed (or missunderstood!).

Here's my dovecot -n output
Code:
# OS: Linux 2.6.32-279.2.1.el6.x86_64 x86_64 CentOS release 6.3 (Final) ext4
auth_mechanisms = cram-md5
disable_plaintext_auth = no
last_valid_gid = 1000
mail_gid = 502
mail_location = maildir:/var/mail/%n/Maildir
mail_uid = 501
passdb {
  args = username_format=%u /etc/dovecot/users
  driver = passwd-file
}
ssl = no
userdb {
  args = username_format=%u /etc/dovecot/users
  driver = passwd-file
}
verbose_proctitle = yes
Many thanks,

Peter
 
Old 08-08-2012, 10:16 PM   #2
snowweb
Member
 
Registered: May 2008
Distribution: Ubuntu12, CentOS6
Posts: 61

Original Poster
Rep: Reputation: 0
Maybe someone know's how to do this? :-)
 
  


Reply

Tags
authentication, dovecot


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Imap folders missing after changing mail servers - Dovecot Problem asiri85 Linux - Server 1 02-22-2011 05:10 PM
Add cram-md5 to pam? jago25_98 Linux - Networking 3 12-29-2010 03:48 PM
Could qmail-ldap support SMTP-AUTH CRAM-MD5 authentication schema ? netocool Linux - Server 0 03-03-2009 09:27 PM
Postfix cram-md5 authentication to earthlink relay spiritwing Linux - Software 2 07-13-2005 09:19 PM
Cram-MD5 encryption pembo13 Linux - Security 5 04-30-2004 03:05 PM


All times are GMT -5. The time now is 01:25 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration