<html><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">I have not been able to authenticate POP3 over SSL from thunderbird 2.0.0.12 to Cyrus POP3 v2.3.8 on a OS X Server 10.5.<br><br><br>I have narrowed down the cause to be a wrong set of supported authentication mechanism being advertised when thunderbird queried the POP3 server in AUTH.<br>For example, the server responded with CRAM-MD5 as a support mechanism in AUTH when it really has not been configured as such, not in POP3 anyway.<br><br><br>I would like to know if it is a configuration issue, is there something missing in the OS X configuration of the Cyrus server that is supposed to stop CRAM-MD5 and a list of other auth mechanism from being advertised as supported in the AUTH process? i.e. Apple messed up the configuration/build.<br><br>Or is this a "feature" of this version of the Cyrus server and resolved in a later version?<br><br>Or Thunderbird should have used the mechanism listed in CAPA response only as CRAM-MD5 only appeared in AUTH.<br><br><br><br>Thanks for your help.<br><br><br>Joshua<br><br>my system generated imapd.conf is as follows:<br><br>admins: cyrusimap<br>configdirectory: /var/imap<br>partition-default: /var/spool/imap<br>unixhierarchysep: yes<br>altnamespace: yes<br>servername: mailserver.abc.edu<br>sievedir: /usr/sieve<br>sendmail: /usr/sbin/sendmail<br>lmtp_downcase_rcpt: 1<br>unix_group_enable: 0<br>berkeley_txns_max: 400<br>berkeley_locks_max: 20000<br>berkeley_cachesize: 8192<br>berkeley_max_log_region: 2048<br>berkeley_max_log_file: 10240<br>berkeley_max_log_buffer: 2048<br>tls_key_file: /Volumes/system/etc/certificates/mail.abc.edu.key<br>quota_warn_frequency_days: 2<br>tls_cert_file: /Volumes/system/etc/certificates/mail.abc.edu.crt<br>enable_quota_warnings: yes<br>log_rolling_days_enabled: 0<br>log_rolling_days: 1<br>lmtp_over_quota_perm_failure: yes<br>imap_auth_plain: yes<div>imap_auth_md5: yes<br>lmtp_luser_relay: joshua<br>pop_auth_apop: yes<br>tls_server_options: use<br>tls_ca_file: /Volumes/system/etc/certificates/mail.abc.edu.ca-bundle<br><br><br><div>OS X POP3 Log</div><div><br class="webkit-block-placeholder"></div><div><div>Mar 20 10:42:47 webserver pop3[12181]: starttls: TLSv1 with cipher AES256-SHA (256/256 bits new) no authentication</div><div>Mar 20 10:43:31 webserver pop3[12261]: executed</div><div>Mar 20 10:43:31 webserver pop3[12261]: accepted connection</div><div>Mar 20 10:43:36 webserver pop3[12261]: badlogin: jt.abc.edu [10.10.1.123] CRAM-MD5 user not found</div><div><br class="webkit-block-placeholder"></div><div><br><br>This is a log of the Thunderbird POP3 process<br><br><br>-1604083808[1109db0]: RECV: +OK mailserver.abc.edu Cyrus POP3 v2.3.8-OS X Server 10.5:<span class="Apple-tab-span" style="white-space: pre; "> </span>9A562 server ready <<a href="mailto:1261331586.1205925688@mailserver.abc.edu">1261331586.1205925688@mailserver.abc.edu</a>><br>-1604083808[1109db0]: POP3: Entering state: 29<br>-1604083808[1109db0]: SEND: AUTH<br>-1604083808[1109db0]: Entering NET_ProcessPop3 159<br>-1604083808[1109db0]: POP3: Entering state: 3<br>-1604083808[1109db0]: RECV: +OK List of supported mechanisms follows<br>-1604083808[1109db0]: POP3: Entering state: 30<br>-1604083808[1109db0]: RECV: SMB-NTLMv2<br>-1604083808[1109db0]: POP3: Entering state: 30<br>-1604083808[1109db0]: RECV: SMB-NT<br>-1604083808[1109db0]: POP3: Entering state: 30<br>-1604083808[1109db0]: RECV: SMB-LAN-MANAGER<br>-1604083808[1109db0]: POP3: Entering state: 30<br>-1604083808[1109db0]: RECV: MS-CHAPv2<br>-1604083808[1109db0]: POP3: Entering state: 30<br>-1604083808[1109db0]: RECV: PPS<br>-1604083808[1109db0]: POP3: Entering state: 30<br>-1604083808[1109db0]: RECV: OTP<br>-1604083808[1109db0]: POP3: Entering state: 30<br>-1604083808[1109db0]: RECV: GSSAPI<br>-1604083808[1109db0]: POP3: Entering state: 30<br>-1604083808[1109db0]: RECV: DIGEST-MD5<br>-1604083808[1109db0]: POP3: Entering state: 30<br>-1604083808[1109db0]: RECV: CRAM-MD5<br>-1604083808[1109db0]: POP3: Entering state: 30<br>-1604083808[1109db0]: RECV: WEBDAV-DIGEST<br>-1604083808[1109db0]: POP3: Entering state: 30<br>-1604083808[1109db0]: RECV: DHX<br>-1604083808[1109db0]: POP3: Entering state: 30<br>-1604083808[1109db0]: RECV: APOP<br>-1604083808[1109db0]: POP3: Entering state: 30<br>-1604083808[1109db0]: RECV: .<br>-1604083808[1109db0]: POP3: Entering state: 31<br>-1604083808[1109db0]: SEND: CAPA<br>-1604083808[1109db0]: Entering NET_ProcessPop3 206<br>-1604083808[1109db0]: POP3: Entering state: 3<br>-1604083808[1109db0]: RECV: +OK List of capabilities follows<br>-1604083808[1109db0]: POP3: Entering state: 32<br>-1604083808[1109db0]: RECV: SASL APOP<br>-1604083808[1109db0]: POP3: Entering state: 32<br>-1604083808[1109db0]: RECV: STLS<br>-1604083808[1109db0]: POP3: Entering state: 32<br>-1604083808[1109db0]: RECV: EXPIRE NEVER<br>-1604083808[1109db0]: POP3: Entering state: 32<br>-1604083808[1109db0]: RECV: LOGIN-DELAY 0<br>-1604083808[1109db0]: POP3: Entering state: 32<br>-1604083808[1109db0]: RECV: TOP<br>-1604083808[1109db0]: POP3: Entering state: 32<br>-1604083808[1109db0]: RECV: UIDL<br>-1604083808[1109db0]: POP3: Entering state: 32<br>-1604083808[1109db0]: RECV: PIPELINING<br>-1604083808[1109db0]: POP3: Entering state: 32<br>-1604083808[1109db0]: RECV: RESP-CODES<br>-1604083808[1109db0]: POP3: Entering state: 32<br>-1604083808[1109db0]: RECV: AUTH-RESP-CODE<br>-1604083808[1109db0]: POP3: Entering state: 32<br>-1604083808[1109db0]: RECV: USER<br>-1604083808[1109db0]: POP3: Entering state: 32<br>-1604083808[1109db0]: RECV: IMPLEMENTATION Cyrus POP3 server v2.3.8-OS X Server 10.5:<span class="Apple-tab-span" style="white-space: pre; "> </span>9A562<br>-1604083808[1109db0]: POP3: Entering state: 32<br>-1604083808[1109db0]: RECV: .<br>-1604083808[1109db0]: POP3: Entering state: 33<br>-1604083808[1109db0]: SEND: STLS<br>-1604083808[1109db0]: Entering NET_ProcessPop3 31<br>-1604083808[1109db0]: POP3: Entering state: 3<br>-1604083808[1109db0]: RECV: +OK Begin TLS negotiation now<br>-1604083808[1109db0]: POP3: Entering state: 45<br>-1604083808[1109db0]: POP3: Entering state: 29<br>-1604083808[1109db0]: SEND: AUTH<br>-1604083808[1109db0]: Entering NET_ProcessPop3 173<br>-1604083808[1109db0]: POP3: Entering state: 3<br>-1604083808[1109db0]: RECV: +OK List of supported mechanisms follows<br>-1604083808[1109db0]: POP3: Entering state: 30<br>-1604083808[1109db0]: RECV: SMB-NTLMv2<br>-1604083808[1109db0]: POP3: Entering state: 30<br>-1604083808[1109db0]: RECV: SMB-NT<br>-1604083808[1109db0]: POP3: Entering state: 30<br>-1604083808[1109db0]: RECV: SMB-LAN-MANAGER<br>-1604083808[1109db0]: POP3: Entering state: 30<br>-1604083808[1109db0]: RECV: MS-CHAPv2<br>-1604083808[1109db0]: POP3: Entering state: 30<br>-1604083808[1109db0]: RECV: PPS<br>-1604083808[1109db0]: POP3: Entering state: 30<br>-1604083808[1109db0]: RECV: PLAIN<br>-1604083808[1109db0]: POP3: Entering state: 30<br>-1604083808[1109db0]: RECV: OTP<br>-1604083808[1109db0]: POP3: Entering state: 30<br>-1604083808[1109db0]: RECV: LOGIN<br>-1604083808[1109db0]: POP3: Entering state: 30<br>-1604083808[1109db0]: RECV: GSSAPI<br>-1604083808[1109db0]: POP3: Entering state: 30<br>-1604083808[1109db0]: RECV: DIGEST-MD5<br>-1604083808[1109db0]: POP3: Entering state: 30<br>-1604083808[1109db0]: RECV: CRAM-MD5<br>-1604083808[1109db0]: POP3: Entering state: 30<br>-1604083808[1109db0]: RECV: WEBDAV-DIGEST<br>-1604083808[1109db0]: POP3: Entering state: 30<br>-1604083808[1109db0]: RECV: DHX<br>-1604083808[1109db0]: POP3: Entering state: 30<br>-1604083808[1109db0]: RECV: APOP<br>-1604083808[1109db0]: POP3: Entering state: 30<br>-1604083808[1109db0]: RECV: .<br>-1604083808[1109db0]: POP3: Entering state: 31<br>-1604083808[1109db0]: SEND: CAPA<br>-1604083808[1109db0]: Entering NET_ProcessPop3 200<br>-1604083808[1109db0]: POP3: Entering state: 3<br>-1604083808[1109db0]: RECV: +OK List of capabilities follows<br>-1604083808[1109db0]: POP3: Entering state: 32<br>-1604083808[1109db0]: RECV: SASL APOP<br>-1604083808[1109db0]: POP3: Entering state: 32<br>-1604083808[1109db0]: RECV: EXPIRE NEVER<br>-1604083808[1109db0]: POP3: Entering state: 32<br>-1604083808[1109db0]: RECV: LOGIN-DELAY 0<br>-1604083808[1109db0]: POP3: Entering state: 32<br>-1604083808[1109db0]: RECV: TOP<br>-1604083808[1109db0]: POP3: Entering state: 32<br>-1604083808[1109db0]: RECV: UIDL<br>-1604083808[1109db0]: POP3: Entering state: 32<br>-1604083808[1109db0]: RECV: PIPELINING<br>-1604083808[1109db0]: POP3: Entering state: 32<br>-1604083808[1109db0]: RECV: RESP-CODES<br>-1604083808[1109db0]: POP3: Entering state: 32<br>-1604083808[1109db0]: RECV: AUTH-RESP-CODE<br>-1604083808[1109db0]: POP3: Entering state: 32<br>-1604083808[1109db0]: RECV: USER<br>-1604083808[1109db0]: POP3: Entering state: 32<br>-1604083808[1109db0]: RECV: IMPLEMENTATION Cyrus POP3 server v2.3.8-OS X Server 10.5:<span class="Apple-tab-span" style="white-space: pre; "> </span>9A562<br>-1604083808[1109db0]: POP3: Entering state: 32<br>-1604083808[1109db0]: RECV: .<br>-1604083808[1109db0]: POP3: Entering state: 33<br>-1604083808[1109db0]: POP3: Entering state: 46<br>-1604083808[1109db0]: POP3: Entering state: 33<br>-1604083808[1109db0]: POP3: Entering state: 5<br>-1604083808[1109db0]: SEND: AUTH CRAM-MD5<br>-1604083808[1109db0]: Entering NET_ProcessPop3 64<br>-1604083808[1109db0]: POP3: Entering state: 3<br>-1604083808[1109db0]: RECV: + PDExMzk5somerandomcharsforpublickey?MuZWR1LnNnPg==<br>-1604083808[1109db0]: POP3: Entering state: 34<br>-1604083808[1109db0]: POP3: Entering state: 6<br>-1604083808[1109db0]: Logging suppressed for this command (it probably contained authentication information)<br>-1604083808[1109db0]: Entering NET_ProcessPop3 52<br>-1604083808[1109db0]: POP3: Entering state: 3<br>-1604083808[1109db0]: RECV: -ERR [AUTH] authenticating: authentication failure</div></div></div></body></html>