[Dovecot] [AUTH] Extra @ in user and empty passwd with CRAM-MD5

20 Feb 2010


      Hi,
I got problem whith CRAM-MD5 auth (works fine with PLAIN):

Feb 20 13:15:02 auth(default): Info: new auth connection: pid=5026
Feb 20 13:15:06 auth(default): Info: client in: AUTH 1 CRAM-MD5
service=imap secured lip=87.98.131.8 rip=82.245.64.126  lport=143 rport=1130
Feb 20 13:15:06 auth(default): Info: client out: CONT 1
PDI5NzIzNTE1MTI1MTA3NjAuMTI2NjY2ODEwNkBkZXY+
Feb 20 13:15:07 auth(default): Info: client in: CONT 1
dG9vcm9wQHJlc3B1YmxpY2EuZnIgOTczNjdjMzE3NWE1MWY2YzJhNDY0OTNlNDMzZGZhZDQ=
Feb 20 13:15:07 auth(default): Info:
vpopmail(toorop@domain.tld,82.245.64.126): lookup user=toorop
domain=domain.tld
Feb 20 13:15:07 auth(default): Info:
password(toorop@domain.tld,82.245.64.126): Generating CRAM-MD5 from user
'toorop@domain.tld@', password ''
Feb 20 13:15:07 auth(default): Info:
password(toorop@domain.tld,82.245.64.126): Credentials:
00747cf2ffaf11c5ea4a64979c3901fc1d20dee13f480bb598f7d8575b23e61b
Feb 20 13:15:07 auth(default): Info:
cram-md5(toorop@domain.tld,82.245.64.126): password mismatch
Feb 20 13:15:09 auth(default): Info: client out: FAIL 1
user=toorop@domain.tld
Feb 20 13:15:14 imap-login: Info: Aborted login (auth failed, 1
attempts): user=<toorop@domain.tld>, method=CRAM-MD5, rip=82.245.64.126,
lip=87.98.131.8, TLS
This line seems strange:
Feb 20 13:15:07 auth(default): Info:
password(toorop@domain.tld,82.245.64.126): Generating CRAM-MD5 from user
'toorop@domain.tld@', password ''
=> Why extra @ in user and empty password ??
Client: Thundebird 2.0.0.23
vpopmail version: 5.4.16
dovecot -n
1.2.6: /etc/dovecot/dovecot.conf
OS: Linux 2.6.24-8-pve i686 Gentoo Base System release 1.12.11.1
log_path: /var/log/dovecot.log
protocols: imap imaps pop3 pop3s
disable_plaintext_auth: no
login_dir: /var/run/dovecot/login
login_executable(default): /usr/libexec/dovecot/imap-login
login_executable(imap): /usr/libexec/dovecot/imap-login
login_executable(pop3): /usr/libexec/dovecot/pop3-login
mail_max_userip_connections(default): 5
mail_max_userip_connections(imap): 5
mail_max_userip_connections(pop3): 10
verbose_proctitle: yes
first_valid_uid: 89
last_valid_uid: 89
first_valid_gid: 89
last_valid_gid: 89
mail_location: maildir:~/.maildir
maildir_copy_preserve_filename: yes
mail_executable(default): /usr/libexec/dovecot/imap
mail_executable(imap): /usr/libexec/dovecot/imap
mail_executable(pop3): /usr/libexec/dovecot/pop3
mail_plugins(default): quota imap_quota
mail_plugins(imap): quota imap_quota
mail_plugins(pop3):
mail_plugin_dir(default): /usr/lib/dovecot/imap
mail_plugin_dir(imap): /usr/lib/dovecot/imap
mail_plugin_dir(pop3): /usr/lib/dovecot/pop3
lda:
postmaster_address: postmaster@domain.tld
hostname: dev.domain.eu
mail_plugin_dir: /usr/lib/dovecot/lda
mail_plugins: sieve
sendmail_path: /usr/lib/sendmail
auth_socket_path: /var/run/dovecot/auth-master
auth default:
mechanisms: plain login cram-md5
verbose: yes
debug: yes
debug_passwords: yes
passdb:
driver: vpopmail
userdb:
driver: vpopmail
socket:
type: listen
client:
path: /var/run/dovecot/auth-client
mode: 432
master:
path: /var/run/dovecot/auth-master
mode: 438
plugin:
sieve: ~/.dovecot.sieve
sieve_storage: ~/sieve
Thanks,
--
Toorop