[SOLVED] IMAP/SSL,Plain Login

[jon.langland]

Hello -

I recently upgraded from version 5.0.2 to version 5.0.5.

After doing this all of my Thunderbird IMAP connections that were not set to TLS were unable to connect to receive mail.

Changing those to accept TLS was easy. It makes sense as this will connect to the server securely.

However, we have a Windows Mobile device that was using a clear text/plain login through imap. No matter what I set for the Global or Server settings (SSL on/off, clear text enabled or not with restarting the server between each setting) it will not accept the imap in clear text.

If I telnet to the imap proxy port 143 it says LOGINDISABLED (plus some other stuff). When I telnet to imap port 7143 it gives me the option for AUTH=PLAIN plus a number of other options (a lot more than 143).

My current settings are, under the GUI server tab, are set to: Enable IMAP service [checked], Enable SSL for IMAP service [checked] <-- (tried both on and off) and Enable clear text login [checked].

I also tried typing in zmprov ms mail.domainname.com zimbraImapCleartextLoginEnabled TRUE... which didn't work

I must be missing something, but can't seem to find it - any help would be appreciated.

BTW - I have tried to change the port for the Windows Mobile device to 7143 but I can't seem to get to function correctly so that is why I am back to working on the imap port 143.

[mmorse]

Welcome to the forums,
Could you post the output of:
zmprov gs server.domain.com | grep Imap

[jon.langland]

Sorry about that...

root@mail:~# su - zimbra
zimbra@mail:~$ zmprov gs server.domain.com |grep Imap
zimbraImapBindOnStartup: TRUE
zimbraImapBindPort: 7143
zimbraImapCleartextLoginEnabled: TRUE
zimbraImapNumThreads: 200
zimbraImapProxyBindPort: 143
zimbraImapSSLBindOnStartup: TRUE
zimbraImapSSLBindPort: 7993
zimbraImapSSLProxyBindPort: 993
zimbraImapSSLServerEnabled: TRUE
zimbraImapSaslGssapiEnabled: FALSE
zimbraImapServerEnabled: TRUE
zimbraReverseProxyImapSaslGssapiEnabled: FALSE
zimbraReverseProxyImapStartTlsMode: only

[mmorse]

If this is a single server install (& therefore shouldn't be running imap/pop proxy) run the following all on one line:

zmprov -l ms server.domain.com zimbraPop3BindPort 110 zimbraPop3SSLBindPort 995 zimbraPop3ProxyBindPort 7110 zimbraPop3SSLProxyBindPort 7995 zimbraImapBindPort 143 zimbraImapSSLBindPort 993 zimbraImapProxyBindPort 7143 zimbraImapSSLProxyBindPort 7993

Your putting a 7 in front of anything with proxy in it & correcting the ports (lowercase ell L at the front provisions via ldap).
Then:
zmcontrol stop
zmcontrol start

[jon.langland]

mmorse -

Thank you for helping on this! Would you suspect there could be something in my configuration to cause this to happen, or something I missed during the upgrade? I am just looking to make sure it isn't/wasn't something in my config that caused this to happen...

I was curious on the proxy information... but didn't want to change them because I did not remember intentionally setting them in either the GUI or command line.

Thanks again!

[mmorse]

All working now? (Don't forget to change the ports back to 143 or 993 on your thick-clients.)
I doubt it's anything you did, I seem to remember a bug somewhere - what was your global config set to? (zmprov gacf | grep Imap) Once you set server it overrides global anyways so it's a moot point, but just curious.

[jon.langland]

It is all working yes... For what it is worth - in Thunderbird I only had to change the Security Settings section of the Server Settings from "Never" to "TLS if available" (which I had thought I was selcecting when I setup the machines, but obviously not) and did not have to change port settings. The rest are either web clients or Outlook. The only reason it really became an issue was because of our Windows Mobile phone (the Blackberry's worked fine with their BIS package)

I ran the command you gave to list the global settings and it is showing this:

zimbra@mail:~$ zmprov gacf | grep Imap
zimbraImapBindOnStartup: TRUE
zimbraImapBindPort: 7143
zimbraImapCleartextLoginEnabled: TRUE
zimbraImapNumThreads: 200
zimbraImapProxyBindPort: 143
zimbraImapSSLBindOnStartup: TRUE
zimbraImapSSLBindPort: 7993
zimbraImapSSLProxyBindPort: 993
zimbraImapSSLServerEnabled: TRUE
zimbraImapSaslGssapiEnabled: FALSE
zimbraImapServerEnabled: TRUE
zimbraReverseProxyImapPortAttribute: zimbraImapBindPort
zimbraReverseProxyImapSSLPortAttribute: zimbraImapSSLBindPort
zimbraReverseProxyImapSaslGssapiEnabled: FALSE
zimbraReverseProxyImapStartTlsMode: only
zimbraReverseProxySendImapId: TRUE

I see that I need to change those also - I will do that.

Thanks again for your help - I still don't have the hang of all the zmprov options.

[holbor]

This resolved the above error with imapsync also on ZCS 5.08 on Fedora 7 - new install. Noted here to help someone else with same issue.

/rh