Windows Phone 7 mail clients can't login

[Sebastian Hagedorn]

Hi,

--On 9. Dezember 2010 08:52:24 -0600 Dan White <dwhite at olp.net> wrote:

>> When SSL is turned off on the phone, the NTLM error is a little more
>> explicit:
>>
>> Dec  9 14:59:10 lvr13 imap[786]: badlogin:[redacted] NTLM [SASL(0):
>> successful result: security flags do not match required]
>
> Are you offering digest-md5?

yes, but it's not used by Windows Phone 7 clients.

> What are your sasl and allowplaintext
> settings in imapd.conf?

allowplaintext: no
sasl_mech_list: DIGEST-MD5 CRAM-MD5 PLAIN NTLM LOGIN

>> My guess is that the phone tries to use NTLMv2, but of course the
>> SASL plug-in only supports NTLMv1. The worst part is that there
>> doesn't seem to be a client-side option to use another mechanism
>> instead. I'm hesitant to disable NTLM server-side, because a few of
>> our users use it successfully.
>
> What version of imapd and sasl are you using?

imapd is 2.3.14, SASL is 2.1.20.

Thanks, Sebastian
-- 
     .:.Sebastian Hagedorn - RZKR-R1 (Gebäude 52), Zimmer 18.:.
                 .:.Regionales Rechenzentrum (RRZK).:.
.:.Universität zu Köln / Cologne University - ✆ +49-221-478-5587.:.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pkcs7-signature
Size: 5292 bytes
Desc: not available
Url : http://lists.andrew.cmu.edu/pipermail/info-cyrus/attachments/20101209/ca565eff/attachment.bin