On 27.2.2012, at 12.50, Mark Davies wrote: > On 02/27/12 23:32, Timo Sirainen wrote: >> Looks like kmail is sending some kind of garbage to Dovecot. Set >> auth_debug_passwords=yes to make Dovecot log the auth traffic. > > Yeah, I did a network trace and it seems kmail is not sending the > full authentication request before trying to carry on.
>> 8 0.043625 130.195.5.88 130.195.5.13 IMAP 898 >> Request: 1 AUTHENTICATE GSSAPI >> YIICWgYJKoZIhvcSAQICAQBuggJJMI[...]jLyNiRZFsc9zFxpdwrZAB/WXRRS1zsM4SlDfE59CW1xfKAkqe It uses SASL-IR to send the first seponse. >> 9 0.044919 130.195.5.13 130.195.5.88 IMAP 70 >> Response: + Dovecot says "OK, give me more". >> 10 0.045413 130.195.5.88 130.195.5.13 IMAP 80 >> Request: 2 LIST "" "" kmail thinks the authentication is done and sends LIST command, even though it should finish the authentication. Clearly a kmail bug. You could try what happens if you remove SASL-IR from Dovecot's imap_capability list. Maybe kmail is buggy only with SASL-IR.