Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Connect » Thunderbird CRAM-MD5 not working with Kerio
  •  
flxkid

Messages: 11
Karma: 0
Send a private message to this user
There have been a few loose threads over the years on this problem. The symptoms are Thunderbird taking a minimum of about 5 secs to send an email (no matter the size or destination), and failed SMTP login messages in the security log of Kerio.

After turning on the debug logging, Thunderbird sees the CRAM-MD5 offer from Kerio and tries to authenticate via this. It fails. I don't know why (debug log says "{auth} CRAM-MD5 user onelson has incompatible password type"). Next it tries PLAIN which of course works just fine. Thankfully on my server I'm able to force encrypted connections so sending in plain isn't such a big deal. But if I couldn't do this (as many can't), it means that users are falling back to PLAIN authentication (when using thunderbird) which isn't good. I'm using the latest non-beta build of kerio (6.7.1 build 7762) and the latest release of thunderbird (2.0.0.22). I have experienced this behaviour for quite sometime though (just decided to investigate finally).

Anyone care to chime in?
  •  
Pavel Dobry (Kerio)

Messages: 5245
Karma: 251
Send a private message to this user
Read http://support.kerio.com/kb/430 - it is valid for all SMTP, POP3 and IMAP logins.
  •  
flxkid

Messages: 11
Karma: 0
Send a private message to this user
That post explains part of the issue. One of our domains has Kerberos domain authentication. But I was having the EXACT same symptoms on another domain that uses just the internal password database and DOES NOT have SHA passwords turned on. What I did fixed it for users in that domain also. I have even tried "rebreaking" it and sure enough, it causes the problem again on that non-kerberos domain without SHA.

Also, just in case anybody happens to try what I suggested, make sure you leave on the "LOGIN" authentication type (which I didn't). If this is not turned on along with "PLAIN", Outlook 2007 will not be able to authenticate to your SMTP server using "PLAIN" (probably an Outlook bug).

OLIVER
Previous Topic: contacts disappearing from GAL when created this way:
Next Topic: KOFF - Office 2007 - Search speed
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Thu Oct 19 09:12:23 CEST 2017

Total time taken to generate the page: 0.00412 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.