IMAP Authentication Not working

[Bob]

piler 1.3.9, build 998
Working install, never upgraded. But imap auth never set up.

IMAP Auth config:

$config['ENABLE_IMAP_AUTH'] = 1;
$config['RESTORE_OVER_IMAP'] = 1;
$config['IMAP_RESTORE_FOLDER_INBOX'] = 'INBOX';
$config['IMAP_RESTORE_FOLDER_SENT'] = 'Sent';
$config['IMAP_HOST'] = '10.10.1.4';
$config['IMAP_PORT'] =  993;
$config['IMAP_SSL'] = true;

I restart piler with /etc/init.d/rc.piler restart

Unable to login with user. No indication that imap server is being reached.

[Janos SUTO]

I need some digging. Please run “ngrep -X -e port 993” then try logging in again. Also in case of a login failure show me the error message in the mail log.

[Bob]

Here’s ngrep output from a login attempt:

interface: enp0s25 (10.10.0.0/255.255.0.0)
filter: ( port 993 ) and ((ip || ip6) || (vlan && (ip || ip6)))
#
T 10.10.1.17:50776 -> 10.10.1.4:993 [S] #1
#
T 10.10.1.4:993 -> 10.10.1.17:50776 [AS] #2
#
T 10.10.1.17:50776 -> 10.10.1.4:993 [A] #3
#
T 10.10.1.17:50776 -> 10.10.1.4:993 [AP] #4
...........x........t.GA...@....b.Z.?.:y......./.+.0.,.........'.#.....(.$.....g.3.@.k.8.9.............2.....<./.........j.....=.5...
....].a.W.S.\.`.V.R.s.w.....r.v.........E.D.Q.P.......A.....C.........mail.edm-inc.com.........................#.............*.(.....
.....................................................................................................................................
......................................................................................................................
#
T 10.10.1.4:993 -> 10.10.1.17:50776 [A] #5
#
T 10.10.1.4:993 -> 10.10.1.17:50776 [AF] #6
#
T 10.10.1.17:50776 -> 10.10.1.4:993 [AF] #7
#
T 10.10.1.4:993 -> 10.10.1.17:50776 [A] #8

[Bob]

Here is IMAP log:

Sep  1 09:11:38 mail dovecot: imap-login: Disconnected: Connection closed: SSL_accept() failed: error:14209102:SSL routines:tls_early_post
_process_client_hello:unsupported protocol (disconnected before auth was ready, waited 0 secs): user=<>, rip=10.10.1.17, lip=10.10.1.4, TL
S handshaking: SSL_accept() failed: error:14209102:SSL routines:tls_early_post_process_client_hello:unsupported protocol, session=<19AFpe/
KXMYKCgER>

[chris]

I get the same output. It looks successful on the ngrep.

mail.log just shows a failure:

username=[e-mail], event='login failed', ipaddr=x.x.x.x

[chris]

running 1.3.11 build 1001

[Janos SUTO]

What does the imap sever syslog?

[Janos SUTO]

Also check the openssl versions on both piler and the imap server.

[chris]

piler is a new 1.1.1f on the newest ubuntu.

The target imap is a windows imap server which maybe older but it does support tls 1.2 and 1.1.

‌

[Janos SUTO]

Is this issue still present?

[Janos SUTO]

No update on this.