249992 2010-09-03 12:28:46 +0000 Can't log in to IMAP server using non plain text auth mechanism 2012-02-15 16:23:12 +0000 1 1 3 Frameworks and Libraries Akonadi IMAP resource 1.4.0 Compiled Sources Linux RESOLVED FIXED NOR normal --- 1 bero ervin alexxy bjo bugs devel dirk.heinrichs ismail kde+bugs kde Klaus.Weidenbach mr ol+kde pim-bugs-null vkrause winter 80 oldest_to_newest 1013679 0 bero 2010-09-03 12:28:46 +0000 Version: 1.4.0 (using KDE 4.5.0) OS: Linux When trying to set up an account on a IMAP server running dovecot 2.0.1, akonadi (run from kmail) complains The server refused the supplied username and password. Do you want to go to settings, have another attempt at logging in, or do nothing? SASL(0): successful result: The login actually succeeded (if I type the password again in the dialog, I get "IMAP session in the wrong state for authentication" because I'm already logged in), but kmail/akonadi thinks it didn't. The SASL version in use is cyrus-sasl 2.1.24-rc1. Reproducible: Always Steps to Reproduce: Try to configure an IMAP account on a dovecot 2.0.1 server with kmail from the 4.5 branch in SVN Actual Results: Fails with SASL(0): successful result: Expected Results: Succeeds 1060337 1 bero 2010-12-17 11:00:23 +0000 I can't reproduce this anymore with 4.6.0-beta2, assuming it's fixed 1089689 2 alexxy 2011-02-20 16:19:35 +0000 this bug seems still valid at least with dovecot-2.0.9 and kdepim buld from git master or with latest kdepim-4.6.x beta 1106713 3 christophe 2011-04-11 15:15:55 +0000 *** Bug 270635 has been marked as a duplicate of this bug. *** 1113070 4 bugs 2011-04-30 12:52:34 +0000 I've just experienced this bug and it doesn't seem to occur with the cleartext login method (it does with both CRAM-MD5 and PLAIN). 1136157 5 Klaus.Weidenbach 2011-06-27 20:04:56 +0000 The problem still exists with dovecot-2.0.13 and KDE 4.6.4. The autocheck function selects SSL/TLS and PLAIN, but it is not working. If I select cleartext I can access the IMAP account. 1141525 6 mr 2011-07-13 21:47:36 +0000 Yes, bug is still valid. I can confirm it witch kontakt 4.6.0 and dovecot 2.0.13. This issue is caused by this change in dovecot: http://dovecot.org/list/dovecot/2010-April/048147.html Other clients works like a charm, but kmail fails. 1156095 7 kde 2011-08-22 18:41:14 +0000 Patch against kdepimlibs that fixes this bug for me: --- kimap/loginjob.cpp.orig 2011-08-22 20:27:30.526267893 +0200 +++ kimap/loginjob.cpp 2011-08-22 20:38:11.555674184 +0200 @@ -324,7 +324,9 @@ } } else if ( response.content.size() >= 2 ) { if ( d->authState == LoginJobPrivate::Authenticate ) { - if (!d->answerChallenge(QByteArray::fromBase64(response.content[1].toString()))) { + //if we're receiving post-login capabilities, ignore them here + //capabilities are being set by capabilitiesjob after + if (response.content[1].toString()!="CAPABILITY" && !d->answerChallenge(QByteArray::fromBase64(response.content[1].toString()))) { emitResult(); //error, we're done } } else if ( response.content[1].toString()=="CAPABILITY" ) { Please test and let me know if it works and doesn't cause regressions. 1157187 8 kde+bugs 2011-08-26 00:08:19 +0000 Patch works for me using kmail-4.7.0 and dovecot-2.0.13 with sasl. 1158042 9 christophe 2011-08-28 21:12:17 +0000 Rob, can you submit your patch to https://git.reviewboard.kde.org please (group 'kdepimlibs'). A small unit test would also help 1182597 10 academicsam 2011-11-07 23:12:05 +0000 Patch works for me as well. Using kmail 4.7.3 and dovecot-2.0.15. It would have been nice if this patch submitted in Aug. made it to at least 4.7.3. 1182599 11 65371 bero 2011-11-07 23:22:24 +0000 Created attachment 65371 Another variant of the fix The patch works for me too - but I wonder if just switching the if() statements wouldn't be a better fix (patch attached). 1182869 12 winter 2011-11-08 18:00:12 +0000 ervin, I would like to see this fix in the next bugfix release of KDE 4.7.x could you give the thumbs-up or down on this patch? 1215185 13 devel 2012-01-16 18:34:49 +0000 Bug still exists in Kontact/Kmail 4.8 rc2 (Kubuntu testing, 12.04/precise). Tested with latest auto built package of dovecot (2.0.17) running on debian. 1222314 14 ol+kde 2012-02-02 22:03:54 +0000 The patch provided in comment #11 fixes the problem only partially. Reordering if branches makes LOGIN authentication work, but other authentication methods get refused when SSL connection is used because the unsolicited untagged CAPABILITY response to AUTHENTICATE command does not contain "AUTH=" capabilities. It's interesting to note that everything works fine if unencrypted connection is used, because KIMAP::LoginJob does not send CAPABILITY command when connection is not encrypted, so Dovecot IMAP server does not send unsolicited untagged CAPABILITY response to AUTHENTICATE command later. Not sending CAPABILITY command when unencrypted connection is used can be considered as a separate bug. The logic in KIMAP::LoginJob::handleResponse() method is difficult to understand, do I've refactored it and made it more correct. Please take a look at the following review request: https://git.reviewboard.kde.org/r/103854/ The patch in this review request fixes this bug. 1225950 15 ervin 2012-02-12 11:17:43 +0000 *** Bug 267884 has been marked as a duplicate of this bug. *** 1225951 16 ervin 2012-02-12 11:19:58 +0000 Rewording the title a bit, it's more widespread than just dovecot, it's about AUTHENTICATE command. 1227039 17 ol+kde 2012-02-14 22:03:50 +0000 Git commit 07e337d8965fe5aa334bd60a5141031168b1ac62 by Oleg Girko. Committed on 14/02/2012 at 22:51. Pushed by girko into branch 'master'. Refactoring KIMAP::LoginJob::handleResponse() method for better correctness. Besides better readability, this makes handleResponse() method handle not only untagged response caused by CAPABILITY command, but also unsolicited untagged CAPABILITY response caused by AUTHENTICATE command which is returned by Dovecot IMAP server for compatibility with MS Outlook. This fixes bug #249992. REVIEW: 103854 M +136 -82 kimap/loginjob.cpp http://commits.kde.org/kdepimlibs/07e337d8965fe5aa334bd60a5141031168b1ac62 1227051 18 ol+kde 2012-02-14 22:43:18 +0000 Git commit b4809337d8bd1de9274f5aa7f9284f22c579fdcd by Oleg Girko. Committed on 14/02/2012 at 22:51. Pushed by girko into branch 'KDE/4.8'. Refactoring KIMAP::LoginJob::handleResponse() method for better correctness. Besides better readability, this makes handleResponse() method handle not only untagged response caused by CAPABILITY command, but also unsolicited untagged CAPABILITY response caused by AUTHENTICATE command which is returned by Dovecot IMAP server for compatibility with MS Outlook. This fixes bug #249992. REVIEW: 103854 M +136 -82 kimap/loginjob.cpp http://commits.kde.org/kdepimlibs/b4809337d8bd1de9274f5aa7f9284f22c579fdcd 1227268 19 ol+kde 2012-02-15 16:23:12 +0000 Git commit 454bc5fe8603f358c414720d128c79dcd33c9776 by Oleg Girko. Committed on 14/02/2012 at 22:51. Pushed by girko into branch 'KDE/4.7'. Refactoring KIMAP::LoginJob::handleResponse() method for better correctness. Besides better readability, this makes handleResponse() method handle not only untagged response caused by CAPABILITY command, but also unsolicited untagged CAPABILITY response caused by AUTHENTICATE command which is returned by Dovecot IMAP server for compatibility with MS Outlook. This fixes bug #249992. REVIEW: 103854 M +136 -82 kimap/loginjob.cpp http://commits.kde.org/kdepimlibs/454bc5fe8603f358c414720d128c79dcd33c9776 65371 2011-11-07 23:22:24 +0000 2011-11-07 23:22:24 +0000 Another variant of the fix kdepimlibs-4.7.3-bug249992.patch text/plain 1286 bero LS0tIGtkZXBpbWxpYnMtNC43LjMva2ltYXAvbG9naW5qb2IuY3BwLmFyawkyMDExLTExLTA4IDAw OjE1OjIwLjMzOTMxNzg3MiArMDEwMAorKysga2RlcGltbGlicy00LjcuMy9raW1hcC9sb2dpbmpv Yi5jcHAJMjAxMS0xMS0wOCAwMDoxOTo1MS42ODU5NzQ3MDYgKzAxMDAKQEAgLTMyMywxMSArMzIz LDcgQEAgdm9pZCBMb2dpbkpvYjo6aGFuZGxlUmVzcG9uc2UoIGNvbnN0IE1lcwogICAgICAgfQog ICAgIH0KICAgfSBlbHNlIGlmICggcmVzcG9uc2UuY29udGVudC5zaXplKCkgPj0gMiApIHsKLSAg ICBpZiAoIGQtPmF1dGhTdGF0ZSA9PSBMb2dpbkpvYlByaXZhdGU6OkF1dGhlbnRpY2F0ZSApIHsK LSAgICAgIGlmICghZC0+YW5zd2VyQ2hhbGxlbmdlKFFCeXRlQXJyYXk6OmZyb21CYXNlNjQocmVz cG9uc2UuY29udGVudFsxXS50b1N0cmluZygpKSkpIHsKLSAgICAgICAgZW1pdFJlc3VsdCgpOyAv L2Vycm9yLCB3ZSdyZSBkb25lCi0gICAgICB9Ci0gICAgfSBlbHNlIGlmICggcmVzcG9uc2UuY29u dGVudFsxXS50b1N0cmluZygpPT0iQ0FQQUJJTElUWSIgKSB7CisgICAgaWYgKCByZXNwb25zZS5j b250ZW50WzFdLnRvU3RyaW5nKCk9PSJDQVBBQklMSVRZIiApIHsKICAgICAgIGJvb2wgYXV0aE1v ZGVTdXBwb3J0ZWQgPSBkLT5hdXRoTW9kZS5pc0VtcHR5KCk7CiAgICAgICBmb3IgKGludCBpID0g MjsgaSA8IHJlc3BvbnNlLmNvbnRlbnQuc2l6ZSgpOyArK2kpIHsKICAgICAgICAgUVN0cmluZyBj YXBhYmlsaXR5ID0gcmVzcG9uc2UuY29udGVudFtpXS50b1N0cmluZygpOwpAQCAtMzQ2LDYgKzM0 MiwxMCBAQCB2b2lkIExvZ2luSm9iOjpoYW5kbGVSZXNwb25zZSggY29uc3QgTWVzCiAgICAgICAg IHNldEVycm9yVGV4dCggaTE4bigiTG9naW4gZmFpbGVkLCBhdXRoZW50aWNhdGlvbiBtb2RlICUx IGlzIG5vdCBzdXBwb3J0ZWQgYnkgdGhlIHNlcnZlci4iLCBkLT5hdXRoTW9kZSkgKTsKICAgICAg ICAgZC0+YXV0aFN0YXRlID0gTG9naW5Kb2JQcml2YXRlOjpMb2dpbjsgLy9qdXN0IHRvIHRyZWF0 IHRoZSB1cGNvbWluZyBPSyBjb3JyZWN0bHkKICAgICAgIH0KKyAgICB9IGVsc2UgaWYgKCBkLT5h dXRoU3RhdGUgPT0gTG9naW5Kb2JQcml2YXRlOjpBdXRoZW50aWNhdGUgKSB7CisgICAgICBpZiAo IWQtPmFuc3dlckNoYWxsZW5nZShRQnl0ZUFycmF5Ojpmcm9tQmFzZTY0KHJlc3BvbnNlLmNvbnRl bnRbMV0udG9TdHJpbmcoKSkpKSB7CisgICAgICAgIGVtaXRSZXN1bHQoKTsgLy9lcnJvciwgd2Un cmUgZG9uZQorICAgICAgfQogICAgIH0KICAgfQogfQo=