Author Topic: After upgrading from 0.5.1 to 0.5.3, I cannot log in anymore (Read 3911 times)

LonelyPixel · « **on:** July 07, 2011, 04:29:17 PM »

I have upgraded a Roundcube setup from version 0.5.1 which was running just fine to 0.5.3 and now I cannot log in anymore. I have no idea what do do. I could revert to a backup of the old version with some work.

Where can I get additional error information? I haven't found an application log or something.

JohnDoh · « **Reply #1 on:** July 07, 2011, 04:55:11 PM »

Quote

now I cannot log in anymore

please provide some details. what happens when you try and login? if there anything in the error log? ([rc root]/logs/errors - make sure the webserver user can write to the logs dir)

LonelyPixel · « **Reply #2 on:** July 08, 2011, 01:27:31 AM »

Okay, there's the error log. I didn't see it in my FTP client.

The errors file ends on 28 Jan 2011. There are no current entries in it. When I want to log in, it takes a few seconds and then simply says that authentication failed and I'm back at the login form. No more information.

PHP 5.3 on Ubuntu Linux, fully compatible with Roundcube 0.5.1 but not so much with 0.5.3.

alec · « **Reply #3 on:** July 08, 2011, 02:40:38 AM »

Check imap_auth_type setting. Enable imap_debug and check the log.

LonelyPixel · « **Reply #4 on:** July 08, 2011, 09:46:23 AM »

OK, here's what the log says:

[08-Jul-2011 15:42:08 +0200]: S: * OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE STARTTLS AUTH=PLAIN AUTH=LOGIN AUTH=DIGEST-MD5 AUTH=CRAM-MD5] Dovecot ready.
[08-Jul-2011 15:42:08 +0200]: C: A0001 ID ("name" "Roundcube Webmail" "version" "0.5.3" "php" "5.3.2-1ubuntu4.9" "os" "Linux" "command" "/webmail/")
[08-Jul-2011 15:42:08 +0200]: S: * ID NIL
[08-Jul-2011 15:42:08 +0200]: S: A0001 OK ID completed.
[08-Jul-2011 15:42:08 +0200]: C: A0002 AUTHENTICATE DIGEST-MD5
[08-Jul-2011 15:42:08 +0200]: S: + cmVhbG09IiIsb(...)xnb3JpdGhtPSJtZDUtc2VzcyI=
[08-Jul-2011 15:42:08 +0200]: C: dXNlcm5hbWU9I(...)hidWY9NjU1MzY=
[08-Jul-2011 15:42:10 +0200]: S: A0002 NO [AUTHENTICATIONFAILED] Authentication failed.
[08-Jul-2011 15:42:10 +0200]: C: A0003 LOGOUT
[08-Jul-2011 15:42:15 +0200]: S: * BYE Logging out
[08-Jul-2011 15:42:15 +0200]: S: A0003 OK Logout completed.

It seems Roundcube is no longer capable of sending correct authentication data. (I have entered my password correctly and tried with several accounts!)

Update: If I set the following main config setting, then the login works:

$rcmail_config['imap_auth_type'] = 'LOGIN'; // was: NULL

alec · « **Reply #5 on:** July 10, 2011, 07:32:32 AM »

Most likely your IMAP server is not configured properly to use DIGEST-MD5 method.

LonelyPixel · « **Reply #6 on:** July 10, 2011, 08:01:28 AM »

Is the Digest MD5 method new in Roundcube 0.5.3?

alec · « **Reply #7 on:** July 10, 2011, 01:18:10 PM »

It's not new, but there was a bug in previous 0.5.x versions causing that LOGIN (or PLAIN) method was used instead.

LonelyPixel · « **Reply #8 on:** July 10, 2011, 05:07:32 PM »

I believe that I have setup my Dovecot IMAP server correctly to support DIGEST-MD5 authentication. Is there another way to test it? Like another IMAP client that supports this method? Thunderbird's account settings are too abstract to know what they really do. (I use SSL over the internet anyway.)