On 11/25/2014 10:26 AM, Jim Shupert wrote:
I have a new build on centos 6.6 64I am having some problems I *think it might have to do with SSL/TLS here is my dovecot -n dovecot -n # 2.2.7: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-504.1.3.el6.x86_64 x86_64 CentOS release 6.6 (Final) auth_cache_size = 32 M auth_mechanisms = plain login digest-md5 cram-md5 first_valid_gid = 89 first_valid_uid = 89 log_path = /var/log/dovecot.log login_greeting = Dovecot toaster ready. mail_plugins = " quota" namespace { inbox = yes location = prefix = separator = . type = private } passdb { args = cache_key=%u webmail=127.0.0.1 driver = vpopmail } plugin { quota = maildir:ignore=Trash quota_rule = ?:storage=0 } protocols = imap pop3 ssl_cert = </var/qmail/control/servercert.pem ssl_dh_parameters_length = 2048 ssl_key = </var/qmail/control/servercert.pem userdb { args = cache_key=%u quota_template=quota_rule=*:backend=%q driver = vpopmail } protocol imap { imap_client_workarounds = delay-newmail mail_plugins = " quota imap_quota" } protocol pop3 { pop3_client_workarounds = outlook-no-nuls oe-ns-eoh pop3_fast_size_lookups = yes pop3_lock_session = yes } =============================================== from an outside domain , on a pop3 tbird client upon attempt to "get mail" I have the following error Sending of username did not succeed. Mail server mailhost.data-wranglers.com responded: Plaintext authentication disallowed on non-secure (SSL/TLS) connections. ================================================================= here are some WhatZitDoen statements from the local machine pop3 , tbird I can send to anyone , outside domains I am getting mail from anyone from outside the server , not from local machine { a tbird client } It is not sending nor receiving , though "sent' mail does go to the client sent folder -- but never shows up thanks js
This is intentional. Clients should be configured to use STARTTLS. If that's not possible, they should use SSL. If that's not possible they can use an encrypted password, but support for that will probably be deprecated in the future, as encrypted passwords require passwords to be store in clear text, which isn't exactly secure either.
The only client I'm aware of that can't do STARTTLS these days is Outlook'03.
Thanks. -- -Eric 'shubes' --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
