Latest LQ Deal: Complete CCNA, CCNP & Red Hat Certification Training Bundle
Go Back > Forums > Linux Forums > Linux - Server
User Name
Linux - Server This forum is for the discussion of Linux Software used in a server related context.


  Search this Thread
Old 08-08-2012, 02:34 AM   #1
Registered: May 2008
Distribution: Ubuntu12, CentOS6
Posts: 61

Rep: Reputation: 0
Dovecot: Changing IMAP authentication from PLAIN to CRAM-MD5

I've just installed Dovecot 2.0.9 and roundcube.

I've got it working with PLAIN authentication_mechanism, but I think I should change it to CRAM-MD5.

I'm not sure if I've understood this correctly though. Am I correct in thinking that this is not concerning the encryption used to store the user passwords (since that is SHA512 in my case, but it is only concerning the encryption used for communication between the client IMAP application and dovecot?

This is confusing me as some of the authentication types can be used in both, eg. CRAM-MD5.

If I've understood this correctly then, am I also correct in thinking that to change the authentication type/mechanism to CRAM-MD5 (leaving the passwords encrypted as SHA512), I need to set:

auth_mechanisms = cram-md5
in /etc/dovecot/conf.d/10-auth.conf and in Roundcube
$rcmail_config['imap_auth_type'] = 'CRAM-MD5';
If so, then something's still wrong because I can no longer login using mutt using:
mutt -f imap://peter@localhost
which I was able to do before and also login to Roundcube now fails, saying:
IMAP Error in /usr/share/roundcubemail/program/include/rcube_imap.php (205): Login failed for peter from AUTHENTICATE CRAM-MD5: A0001 NO [AUTHENTICATIONFAILED] Authentication failed.
I'm wondering what I've missed (or missunderstood!).

Here's my dovecot -n output
# OS: Linux 2.6.32-279.2.1.el6.x86_64 x86_64 CentOS release 6.3 (Final) ext4
auth_mechanisms = cram-md5
disable_plaintext_auth = no
last_valid_gid = 1000
mail_gid = 502
mail_location = maildir:/var/mail/%n/Maildir
mail_uid = 501
passdb {
  args = username_format=%u /etc/dovecot/users
  driver = passwd-file
ssl = no
userdb {
  args = username_format=%u /etc/dovecot/users
  driver = passwd-file
verbose_proctitle = yes
Many thanks,

Old 08-08-2012, 10:16 PM   #2
Registered: May 2008
Distribution: Ubuntu12, CentOS6
Posts: 61

Original Poster
Rep: Reputation: 0
Maybe someone know's how to do this? :-)


authentication, dovecot

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
Imap folders missing after changing mail servers - Dovecot Problem asiri85 Linux - Server 1 02-22-2011 05:10 PM
Add cram-md5 to pam? jago25_98 Linux - Networking 3 12-29-2010 03:48 PM
Could qmail-ldap support SMTP-AUTH CRAM-MD5 authentication schema ? netocool Linux - Server 0 03-03-2009 09:27 PM
Postfix cram-md5 authentication to earthlink relay spiritwing Linux - Software 2 07-13-2005 09:19 PM
Cram-MD5 encryption pembo13 Linux - Security 5 04-30-2004 03:05 PM > Forums > Linux Forums > Linux - Server

All times are GMT -5. The time now is 07:32 PM.

Main Menu
Write for LQ is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration