Dovecot + Roundcube 3.0-stable + Managesieve Plugin not working with CRAM-MD5

[_wayne]

Hi Roundcube-Team,

today I've noticed a weird behavior: the RC-Plugin Managesieve does not work when CRAM-MD5 is (also) configured as mechanism:

Sep  7 06:56:24 debian dovecot: managesieve-login: Disconnected: Shutting down: method=DIGEST-MD5, rip=127.0.0.1, lip=127.0.0.1, secured
Sep  7 06:56:24 debian dovecot: managesieve-login: Disconnected: Shutting down:
Sep  7 06:56:24 debian dovecot: Panic: managesieve-login: file client-common.c: line 25 (client_unlink): assertion failed: (clients_count > 0)

If I do change the machanism and only set "plain login" in dovecot.conf everything is working as expected. But - I do want to offer my "normal" Clients secure AUTH mechanisms so using "plain login" in combination with TLS is "just a workaround to make the managesieve-plugin work".

dovecot-common                    1:1.1.13-2~bpo50+1
dovecot-dev                       1:1.1.13-2~bpo50+1
dovecot-imapd                     1:1.1.13-2~bpo50+1
roundcubemail-0.3-stable

mechanisms = plain login digest-md5 digest-md5 <-- does not work
mechanisms = plain login <-- does work with managesieve-plugin.

CRAM-MD5 is working in general without problems.

Please, do not hesitate to contact me if you do need any further information for resolving this issue.

Thank you,
Werner Detter

[_wayne]

Hi everybody,

Problem fixed. I've Changed the following in $RCDIR/plugins/managesieve/lib/Net/Sieve.php

Code: [Select]


var $supportedAuthMethods=array('DIGEST-MD5', 'CRAM-MD5', 'EXTERNAL', 'PLAIN' , 'LOGIN');


Changed to:

Code: [Select]


var $supportedAuthMethods=array( 'PLAIN' , 'LOGIN');


Thanks you,
Werner