[SOLVED] Re: Cannot LOGIN using openssl s_client

[James B. Byrne]

On Fri, April 27, 2018 09:56, James B. Byrne wrote:
>
> openssl s_client \
>   -connect imap.hamilton.harte-lyne.ca:993 \
>   -CApath /usr/local/etc/pki/tls/certs
>
> Resulting in:
> . . .
>     Start Time: 1524836386
>     Timeout   : 300 (sec)
>     Verify return code: 19 (self signed certificate in certificate
> chain)
> ---
> * OK [CAPABILITY IMAP4 IMAP4rev1 LITERAL+ ID AUTH=PLAIN SASL-IR
> COMPRESS=DEFLATE] inet07.hamilton.harte-lyne.ca Cyrus IMAP
> v2.3.16-Fedora-RPM-2.3.16-15.el6 server ready
>
> LOGIN testusermb testuserpw
> LOGIN BAD Please login first
>
> According to the documentation the message LOGIN BAD means that the
> arguments to the LOGIN command are not understood.  But, as far as I
> can discover, the LOGIN command only takes two arguments: user name
> and password.
>
> I get the same results on both the new SM host and the old so the
> issue is with my employment of s_client.  How does one connect to a
> mailbox using s_client?
>
>

I discovered that one must first preface IMAP commands with an
arbitrary string.  So this works:

str LOGIN testusermb testuserpw
str OK [CAPABILITY IMAP4 IMAP4rev1 LITERAL+ ID LOGINDISABLED
AUTH=PLAIN COMPRESS=DEFLATE ACL RIGHTS=kxte QUOTA MAILBOX-REFERRALS
NAMESPACE UIDPLUS NO_ATOMIC_RENAME UNSELECT CHILDREN MULTIAPPEND
BINARY SORT SORT=MODSEQ THREAD=ORDEREDSUBJECT THREAD=REFERENCES
ANNOTATEMORE CATENATE CONDSTORE SCAN IDLE LISTEXT LIST-SUBSCRIBED
X-NETSCAPE URLAUTH] User logged in

-- 
***          e-Mail is NOT a SECURE channel          ***
        Do NOT transmit sensitive data via e-Mail
 Do NOT open attachments nor follow links sent by e-Mail

James B. Byrne                mailto:ByrneJB at Harte-Lyne.ca
Harte & Lyne Limited          http://www.harte-lyne.ca
9 Brockley Drive              vox: +1 905 561 1241
Hamilton, Ontario             fax: +1 905 561 0757
Canada  L8E 3C3