AFP548 Changing the world one server at a time.

POP3 over SSL between Thunderbird and Leopard Server

Home › Forums › OS X Server and Client Discussion › Mail › POP3 over SSL between Thunderbird and Leopard Server

Viewing 2 posts - 1 through 2 (of 2 total)
  • Author
    Posts
  • #371991
    joshuatew
    Participant

    Wondering what does it take to make POP3 over SSL work between Thunderbird and Leopard’s Cyrus pop3 server. I’ve got it working for Apple mail and outlook but just not thunderbird.

    It does not work for both secure and non-secure authentication over SSL.

    When non-secure authentication is selected in thunderbird, PLAIN is used as the AUTH response from Leopard server included PLAIN (which is really not the case for POP3, it is supported in imap and smtp but not pop3.)

    So the authentication failed for non secure authentication using PLAIN.

    For Secure Authentication, Leopard server also claims support for cram-md5 authentication and a number of other unsupported mechs during AUTH of a pop3 process but they really only work for smtp/imap not pop3.

    So thunderbird uses cram-md5 and the authentication fails yet again.

    Is this a problem with cyrus pop3d or has Apple messed up the build/configuration of the pop3d?

    Can I remove cram-md5 lib from the sasl folder without breaking the other features like CalDav, wiki etc in the Leopard server?

    Appreciate any tips or directions to possible solutions.

    Thank you.

    Joshua

    Leopard OS X POP3 Log

    Mar 20 10:42:47 webserver pop3[12181]: starttls: TLSv1 with cipher AES256-SHA (256/256 bits new) no authentication
    Mar 20 10:43:31 webserver pop3[12261]: executed
    Mar 20 10:43:31 webserver pop3[12261]: accepted connection
    Mar 20 10:43:36 webserver pop3[12261]: badlogin: jt.abc.edu [10.10.1.123] CRAM-MD5 user not found

    This is a log of the Thunderbird POP3 process

    -1604083808[1109db0]: RECV: +OK mailserver.abc.edu Cyrus POP3 v2.3.8-OS X Server 10.5: 9A562 server ready <1261331586.1205925688@mailserver.abc.edu>
    -1604083808[1109db0]: POP3: Entering state: 29
    -1604083808[1109db0]: SEND: AUTH
    -1604083808[1109db0]: Entering NET_ProcessPop3 159
    -1604083808[1109db0]: POP3: Entering state: 3
    -1604083808[1109db0]: RECV: +OK List of supported mechanisms follows
    -1604083808[1109db0]: POP3: Entering state: 30
    -1604083808[1109db0]: RECV: SMB-NTLMv2
    -1604083808[1109db0]: POP3: Entering state: 30
    -1604083808[1109db0]: RECV: SMB-NT
    -1604083808[1109db0]: POP3: Entering state: 30
    -1604083808[1109db0]: RECV: SMB-LAN-MANAGER
    -1604083808[1109db0]: POP3: Entering state: 30
    -1604083808[1109db0]: RECV: MS-CHAPv2
    -1604083808[1109db0]: POP3: Entering state: 30
    -1604083808[1109db0]: RECV: PPS
    -1604083808[1109db0]: POP3: Entering state: 30
    -1604083808[1109db0]: RECV: OTP
    -1604083808[1109db0]: POP3: Entering state: 30
    -1604083808[1109db0]: RECV: GSSAPI
    -1604083808[1109db0]: POP3: Entering state: 30
    -1604083808[1109db0]: RECV: DIGEST-MD5
    -1604083808[1109db0]: POP3: Entering state: 30
    -1604083808[1109db0]: RECV: CRAM-MD5
    -1604083808[1109db0]: POP3: Entering state: 30
    -1604083808[1109db0]: RECV: WEBDAV-DIGEST
    -1604083808[1109db0]: POP3: Entering state: 30
    -1604083808[1109db0]: RECV: DHX
    -1604083808[1109db0]: POP3: Entering state: 30
    -1604083808[1109db0]: RECV: APOP
    -1604083808[1109db0]: POP3: Entering state: 30
    -1604083808[1109db0]: RECV: .
    -1604083808[1109db0]: POP3: Entering state: 31
    -1604083808[1109db0]: SEND: CAPA
    -1604083808[1109db0]: Entering NET_ProcessPop3 206
    -1604083808[1109db0]: POP3: Entering state: 3
    -1604083808[1109db0]: RECV: +OK List of capabilities follows
    -1604083808[1109db0]: POP3: Entering state: 32
    -1604083808[1109db0]: RECV: SASL APOP
    -1604083808[1109db0]: POP3: Entering state: 32
    -1604083808[1109db0]: RECV: STLS
    -1604083808[1109db0]: POP3: Entering state: 32
    -1604083808[1109db0]: RECV: EXPIRE NEVER
    -1604083808[1109db0]: POP3: Entering state: 32
    -1604083808[1109db0]: RECV: LOGIN-DELAY 0
    -1604083808[1109db0]: POP3: Entering state: 32
    -1604083808[1109db0]: RECV: TOP
    -1604083808[1109db0]: POP3: Entering state: 32
    -1604083808[1109db0]: RECV: UIDL
    -1604083808[1109db0]: POP3: Entering state: 32
    -1604083808[1109db0]: RECV: PIPELINING
    -1604083808[1109db0]: POP3: Entering state: 32
    -1604083808[1109db0]: RECV: RESP-CODES
    -1604083808[1109db0]: POP3: Entering state: 32
    -1604083808[1109db0]: RECV: AUTH-RESP-CODE
    -1604083808[1109db0]: POP3: Entering state: 32
    -1604083808[1109db0]: RECV: USER
    -1604083808[1109db0]: POP3: Entering state: 32
    -1604083808[1109db0]: RECV: IMPLEMENTATION Cyrus POP3 server v2.3.8-OS X Server 10.5: 9A562
    -1604083808[1109db0]: POP3: Entering state: 32
    -1604083808[1109db0]: RECV: .
    -1604083808[1109db0]: POP3: Entering state: 33
    -1604083808[1109db0]: SEND: STLS
    -1604083808[1109db0]: Entering NET_ProcessPop3 31
    -1604083808[1109db0]: POP3: Entering state: 3
    -1604083808[1109db0]: RECV: +OK Begin TLS negotiation now
    -1604083808[1109db0]: POP3: Entering state: 45
    -1604083808[1109db0]: POP3: Entering state: 29
    -1604083808[1109db0]: SEND: AUTH
    -1604083808[1109db0]: Entering NET_ProcessPop3 173
    -1604083808[1109db0]: POP3: Entering state: 3
    -1604083808[1109db0]: RECV: +OK List of supported mechanisms follows
    -1604083808[1109db0]: POP3: Entering state: 30
    -1604083808[1109db0]: RECV: SMB-NTLMv2
    -1604083808[1109db0]: POP3: Entering state: 30
    -1604083808[1109db0]: RECV: SMB-NT
    -1604083808[1109db0]: POP3: Entering state: 30
    -1604083808[1109db0]: RECV: SMB-LAN-MANAGER
    -1604083808[1109db0]: POP3: Entering state: 30
    -1604083808[1109db0]: RECV: MS-CHAPv2
    -1604083808[1109db0]: POP3: Entering state: 30
    -1604083808[1109db0]: RECV: PPS
    -1604083808[1109db0]: POP3: Entering state: 30
    -1604083808[1109db0]: RECV: PLAIN
    -1604083808[1109db0]: POP3: Entering state: 30
    -1604083808[1109db0]: RECV: OTP
    -1604083808[1109db0]: POP3: Entering state: 30
    -1604083808[1109db0]: RECV: LOGIN
    -1604083808[1109db0]: POP3: Entering state: 30
    -1604083808[1109db0]: RECV: GSSAPI
    -1604083808[1109db0]: POP3: Entering state: 30
    -1604083808[1109db0]: RECV: DIGEST-MD5
    -1604083808[1109db0]: POP3: Entering state: 30
    -1604083808[1109db0]: RECV: CRAM-MD5
    -1604083808[1109db0]: POP3: Entering state: 30
    -1604083808[1109db0]: RECV: WEBDAV-DIGEST
    -1604083808[1109db0]: POP3: Entering state: 30
    -1604083808[1109db0]: RECV: DHX
    -1604083808[1109db0]: POP3: Entering state: 30
    -1604083808[1109db0]: RECV: APOP
    -1604083808[1109db0]: POP3: Entering state: 30
    -1604083808[1109db0]: RECV: .
    -1604083808[1109db0]: POP3: Entering state: 31
    -1604083808[1109db0]: SEND: CAPA
    -1604083808[1109db0]: Entering NET_ProcessPop3 200
    -1604083808[1109db0]: POP3: Entering state: 3
    -1604083808[1109db0]: RECV: +OK List of capabilities follows
    -1604083808[1109db0]: POP3: Entering state: 32
    -1604083808[1109db0]: RECV: SASL APOP
    -1604083808[1109db0]: POP3: Entering state: 32
    -1604083808[1109db0]: RECV: EXPIRE NEVER
    -1604083808[1109db0]: POP3: Entering state: 32
    -1604083808[1109db0]: RECV: LOGIN-DELAY 0
    -1604083808[1109db0]: POP3: Entering state: 32
    -1604083808[1109db0]: RECV: TOP
    -1604083808[1109db0]: POP3: Entering state: 32
    -1604083808[1109db0]: RECV: UIDL
    -1604083808[1109db0]: POP3: Entering state: 32
    -1604083808[1109db0]: RECV: PIPELINING
    -1604083808[1109db0]: POP3: Entering state: 32
    -1604083808[1109db0]: RECV: RESP-CODES
    -1604083808[1109db0]: POP3: Entering state: 32
    -1604083808[1109db0]: RECV: AUTH-RESP-CODE
    -1604083808[1109db0]: POP3: Entering state: 32
    -1604083808[1109db0]: RECV: USER
    -1604083808[1109db0]: POP3: Entering state: 32
    -1604083808[1109db0]: RECV: IMPLEMENTATION Cyrus POP3 server v2.3.8-OS X Server 10.5: 9A562
    -1604083808[1109db0]: POP3: Entering state: 32
    -1604083808[1109db0]: RECV: .
    -1604083808[1109db0]: POP3: Entering state: 33
    -1604083808[1109db0]: POP3: Entering state: 46
    -1604083808[1109db0]: POP3: Entering state: 33
    -1604083808[1109db0]: POP3: Entering state: 5
    -1604083808[1109db0]: SEND: AUTH CRAM-MD5
    -1604083808[1109db0]: Entering NET_ProcessPop3 64
    -1604083808[1109db0]: POP3: Entering state: 3
    -1604083808[1109db0]: RECV: + PDExMzk5somerandomcharsforpublickey?MuZWR1LnNnPg==
    -1604083808[1109db0]: POP3: Entering state: 34
    -1604083808[1109db0]: POP3: Entering state: 6
    -1604083808[1109db0]: Logging suppressed for this command (it probably contained authentication information)
    -1604083808[1109db0]: Entering NET_ProcessPop3 52
    -1604083808[1109db0]: POP3: Entering state: 3
    -1604083808[1109db0]: RECV: -ERR [AUTH] authenticating: authentication failure

    #372026
    joshuatew
    Participant

    Found the solution that worked for me

    sasl_mech_list: APOP USER CRAM-MD5 DIGEST-MD5

    in imapd.conf

    Now pop3 over SSL works with non Secure Authentication for Thunderbird.

    Apple Mail and Outlook are working fine too.

    Joshua

Viewing 2 posts - 1 through 2 (of 2 total)
  • You must be logged in to reply to this topic.