imap/pop3 clients can't auth to solaris 10 imap/pop3 server

[calshopper]

I have a solaris 10 system listening on port 110 for pop3 and 143 for imap -- telnet confirm connection, as well verification via netstat. Users are not able to authenticate regardless of using valid username and passwords. (this is a small workgroup internal network and ssl is not a requirement)

 

How do I allow users to authenticate using pop3 and/or imap from their mail clients to this sol10 mail server?

[Geoff]

Firstly, turn the debugging up on your server and look at the log files while the clients attempt to connect.

 

Secondarily, sniff the connection with Wireshark. That might give you extra information above and beyond what the log files say.

 

However, I expect this is a problem with what authentication schemes are setup on the server. So start there.

[calshopper]

Hey, thanks for the quick response and suggestions. I’ll just work on pop3 for now. It appears from wireshark the error I need to investigate is…: “POP Response: -ERR Unknown AUTHORIZATION state command”

 

 

Here’s the complete sequence of communication between a XP windows client and a Solaris 10 mail server (pike) running the pop3 service listening on port 110.

 

TCP pop3 > 2205 [sYN, ACK] Seq=0 Ack=1 win=49640 Len=0 Mss=1460

 

TCP 2205 > pop3 [ACK] Seq=1 Ack=1 win=64240 len=0

 

POP response: +OK POP3 pike 2006e.96 Server ready

 

POP Request: USER cal

 

TCP pop3 > 2205 [Ack] Seqs=38 Ack=13 win=49640 Len=0

 

POP Response: -ERR Unknown AUTHORIZATION state command

 

 

As you can see, pike is listening on port 110 and acknowledges readiness for communication; however, the login fails with proven login and passwords.

 

Any insight into this error message…

 

“POP Response: -ERR Unknown AUTHORIZATION state command”

 

...other than an incorrect login/password being issued?

 

Thanks.

[Geoff]

The server has PLAIN auth disabled and the client is trying to use it. Either enable the PLAIN authentication method (ick) or configure your client(s) to use another authentication method.