Fedora Linux Support Community & Resources Center

Go Back   FedoraForum.org > Fedora 17/18 > Using Fedora
FedoraForum Search

Forgot Password? Join Us!

Using Fedora General support for current versions. Ask questions about Fedora and it's software that do not belong in any other forum.

Reply
 
Thread Tools Search this Thread Display Modes
  #1  
Old 17th August 2011, 09:06 AM
springintel Offline
Registered User
 
Join Date: Aug 2011
Posts: 9
windows_xp_2003ie
Dovecot ERR

hi,
Need someone help.

FC15,Dovecot start is ok,when test,just error:

telnet 192.168.1.20 110
+OK Dovecot ready.
user test
-ERR Plaintext authentication disallowed on non-secure <SSL/TLS> connections.
Reply With Quote
  #2  
Old 18th August 2011, 03:47 AM
springintel Offline
Registered User
 
Join Date: Aug 2011
Posts: 9
windows_xp_2003ie
Re: Dovecot ERR

Up

Can anyone konw how to solve?
Reply With Quote
  #3  
Old 18th August 2011, 11:58 AM
lystor's Avatar
lystor Offline
Registered User
 
Join Date: May 2006
Location: Ukraine, Donetsk
Age: 29
Posts: 64
linuxfirefox
Re: Dovecot ERR

Quote:
Originally Posted by springintel View Post
hi,
-ERR Plaintext authentication disallowed on non-secure <SSL/TLS> connections.
Hi
Please show your dovecot configuration file.
Reply With Quote
  #4  
Old 19th August 2011, 12:45 AM
springintel Offline
Registered User
 
Join Date: Aug 2011
Posts: 9
windows_xp_2003ie
Re: Dovecot ERR

## Dovecot configuration file

# If you're in a hurry, see http://wiki2.dovecot.org/QuickConfiguration

# "doveconf -n" command gives a clean output of the changed settings. Use it
# instead of copy&pasting files when posting to the Dovecot mailing list.

# '#' character and everything after it is treated as comments. Extra spaces
# and tabs are ignored. If you want to use either of these explicitly, put the
# value inside quotes, eg.: key = "# char and trailing whitespace "

# Default values are shown for each setting, it's not required to uncomment
# those. These are exceptions to this though: No sections (e.g. namespace {})
# or plugin settings are added by default, they're listed only as examples.
# Paths are also just examples with the real defaults being based on configure
# options. The paths listed here are for configure --prefix=/usr
# --sysconfdir=/etc --localstatedir=/var

# Protocols we want to be serving.
#protocols = imap pop3 lmtp
protocols = pop3

# A comma separated list of IPs or hosts where to listen in for connections.
# "*" listens in all IPv4 interfaces, "::" listens in all IPv6 interfaces.
# If you want to specify non-default ports or anything more complex,
# edit conf.d/master.conf.
#listen = *, ::

# Base directory where to store runtime data.
#base_dir = /var/run/dovecot/

# Greeting message for clients.
#login_greeting = Dovecot ready.

# Space separated list of trusted network ranges. Connections from these
# IPs are allowed to override their IP addresses and ports (for logging and
# for authentication checks). disable_plaintext_auth is also ignored for
# these networks. Typically you'd specify your IMAP proxy servers here.
#login_trusted_networks =


# Sepace separated list of login access check sockets (e.g. tcpwrap)
#login_access_sockets =

# Show more verbose process titles (in ps). Currently shows user name and
# IP address. Useful for seeing who are actually using the IMAP processes
# (eg. shared mailboxes or if same uid is used for multiple accounts).
#verbose_proctitle = no

# Should all processes be killed when Dovecot master process shuts down.
# Setting this to "no" means that Dovecot can be upgraded without
# forcing existing client connections to close (although that could also be
# a problem if the upgrade is e.g. because of a security fix).
#shutdown_clients = yes

# If non-zero, run mail commands via this many connections to doveadm server,
# instead of running them directly in the same process.
#doveadm_worker_count = 0
# UNIX socket or hostort used for connecting to doveadm server
#doveadm_socket_path = doveadm-server

# Space separated list of environment variables that are preserved on Dovecot
# startup and passed down to all of its child processes. You can also give
# key=value pairs to always set specific settings.
#import_environment = TZ

##
## Dictionary server settings
##

# Dictionary can be used to store key=value lists. This is used by several
# plugins. The dictionary can be accessed either directly or though a
# dictionary server. The following dict block maps dictionary names to URIs
# when the server is used. These can then be referenced using URIs in format
# "proxy::<name>".

dict {
#quota = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext
#expire = sqlite:/etc/dovecot/dovecot-dict-sql.conf.ext
}

# Most of the actual configuration gets included below. The filenames are
# first sorted by their ASCII value and parsed in that order. The 00-prefixes
# in filenames are intended to make it easier to understand the ordering.
!include conf.d/*.conf

# A config file can also tried to be included without giving an error if
# it's not found:
!include_try local.conf
Reply With Quote
  #5  
Old 22nd August 2011, 08:13 AM
springintel Offline
Registered User
 
Join Date: Aug 2011
Posts: 9
windows_xp_2003ie
Re: Dovecot ERR

up again.

thanks for your help
Reply With Quote
  #6  
Old 22nd August 2011, 11:54 AM
marvin_ita Offline
Registered User
 
Join Date: Jun 2007
Location: Como - Italy
Posts: 248
windows_xp_2003firefox
Re: Dovecot ERR

Change
Code:
# A comma separated list of IPs or hosts where to listen in for connections.
# "*" listens in all IPv4 interfaces, "::" listens in all IPv6 interfaces.
# If you want to specify non-default ports or anything more complex,
# edit conf.d/master.conf.
#listen = *, ::
to
Code:
# A comma separated list of IPs or hosts where to listen in for connections.
# "*" listens in all IPv4 interfaces, "::" listens in all IPv6 interfaces.
# If you want to specify non-default ports or anything more complex,
# edit conf.d/master.conf.
listen = *, ::
to allow incoming connections to dovecot.
Reply With Quote
  #7  
Old 23rd August 2011, 12:33 AM
springintel Offline
Registered User
 
Join Date: Aug 2011
Posts: 9
windows_xp_2003ie
Re: Dovecot ERR

hi Marvin,

thank for your help,

just use you code,but the error still:

-ERR Plaintext authentication disallowed on non-secure <SSL/TLS> connections.

......did it have any way?
Reply With Quote
  #8  
Old 23rd August 2011, 07:51 AM
marvin_ita Offline
Registered User
 
Join Date: Jun 2007
Location: Como - Italy
Posts: 248
windows_xp_2003firefox
Re: Dovecot ERR

Strange, configuration file looks like mine, but for me it works... but I test it with
Code:
telnet localhost 110
instead of give the IP address.

Try to append the line
Code:
disable_plaintext_auth = no
in dovecot.conf, I found this solution in some other threads.
Reply With Quote
  #9  
Old 24th August 2011, 05:33 AM
springintel Offline
Registered User
 
Join Date: Aug 2011
Posts: 9
windows_xp_2003ie
Re: Dovecot ERR

Dear Marvin,

thank for your help.

when i use telnet localhost 110,the error still.

and then, use the code:
disable_plaintext_auth = no
setting in the dovecot.conf

when after input password it will auto exit telnet.

Still no fix....
Reply With Quote
  #10  
Old 24th August 2011, 09:33 AM
stevea's Avatar
stevea Offline
Registered User
 
Join Date: Apr 2006
Location: Ohio, USA
Posts: 8,298
linuxfedorafirefox
Re: Dovecot ERR

Quote:
user test
-ERR Plaintext authentication disallowed on non-secure <SSL/TLS> connections.
The error message says it all. Starting with F14 (I think) you cannot use plaintext authentication UNLESS it's on a SSL/TLS port. This prevents packet snoopers from seeing your authentication/password.

So no - you won't be able to telnet in and authenticate any more.
I believe it's hard-coded. You can't configure your way out of it.

Frankly is a good idea to use SSL for email service.
POP on SSL is at port 995
IMAP on SSL is at port 993

You need to do this as root to set up the security cert.

cd /etc/pki/dovecot
openssl genrsa -out ./private/dovecot.pem 1024
openssl req -new -x509 -key ./private/dovecot.pem -out ./certs/dovecot.pem -days 1600
<answer questions>
service dovecot restart


You can pick some other number of days for the cert to expite than 1600,
Asnswer the questions means fill in the cert self-signing fields. It's pretty obvious.


You still have to use an email client like thunderbird. Make server settings for POP or IMAP with SSL/TLS using ports 995 or 993 resp'. Set password to "normal". Then on the first connection t'bird will ask for the passwd and maybe a keyring passwd. It might ask you about accepting the self-signed cert the first time.
__________________
None are more hopelessly enslaved than those who falsely believe they are free.
Johann Wolfgang von Goethe

Last edited by stevea; 24th August 2011 at 09:46 AM.
Reply With Quote
  #11  
Old 25th August 2011, 01:47 AM
springintel Offline
Registered User
 
Join Date: Aug 2011
Posts: 9
windows_xp_2003ie
Re: Dovecot ERR

Dear Steved,

Thank for you so many good informatiom.

When i try use SSL(995) in email client, after accepting the self-signed cert ,it still show error .

I don't want to reinstall F13 to sovle.....
Reply With Quote
  #12  
Old 25th August 2011, 03:55 AM
stevea's Avatar
stevea Offline
Registered User
 
Join Date: Apr 2006
Location: Ohio, USA
Posts: 8,298
linuxfedorafirefox
Re: Dovecot ERR

I have a dovecot setup for IMAP, but I hadn't tried POP in a long time. So I did

I opened port 995 on the server.

I pulled up thunderbird on another system. Created a new POP account. Pointed it to the server at port 995.
I hit 'test configuration' nin the thunderbird account setup wizard.
This brought up a page about accepting and storing the self-signed cert.
After accepting the cert "Confirm security exception" the config was finished.
I selectd the new account "Inbox". Hit "Get Mail". I was prompted for the account password and to store it on the keyring.

All the emails then appeared.


So yeah - POP3 w/ SSL/TLS seems to work fine fromDovecot port 995.

====

You need to post more details. What error did you get after selecting the cert ? What email client are you using ?
__________________
None are more hopelessly enslaved than those who falsely believe they are free.
Johann Wolfgang von Goethe
Reply With Quote
  #13  
Old 25th August 2011, 06:05 AM
springintel Offline
Registered User
 
Join Date: Aug 2011
Posts: 9
windows_xp_2003ie
Re: Dovecot ERR

I use ther Outlook express .

after selected the cert, it show error code:0x800CCC0F
Reply With Quote
  #14  
Old 25th August 2011, 09:56 AM
stevea's Avatar
stevea Offline
Registered User
 
Join Date: Apr 2006
Location: Ohio, USA
Posts: 8,298
linuxfedorafirefox
Re: Dovecot ERR

I don't do Windows but this may help.

http://support.microsoft.com/kb/813514

I suggest you try thunderbird on the server.
Then, assuming the port is open you examine Outlook for problems.
__________________
None are more hopelessly enslaved than those who falsely believe they are free.
Johann Wolfgang von Goethe
Reply With Quote
  #15  
Old 25th August 2011, 11:22 AM
springintel Offline
Registered User
 
Join Date: Aug 2011
Posts: 9
windows_xp_2003ie
Re: Dovecot ERR

if i use fc6 for server

it's work ok.
Reply With Quote
Reply

Tags
dovecot, err

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
dovecot jodjesus Servers & Networking 5 22nd April 2006 02:20 PM
Dovecot namit Using Fedora 2 6th December 2005 08:05 PM
Dovecot & PAM simonsez Using Fedora 11 10th August 2005 03:30 PM
Dovecot and FC3 FabioYoshida Servers & Networking 8 13th May 2005 12:43 PM


Current GMT-time: 02:30 (Sunday, 19-05-2013)

TopSubscribe to XML RSS for all Threads in all ForumsFedoraForumDotOrg Archive
logo

All trademarks, and forum posts in this site are property of their respective owner(s).
FedoraForum.org is privately owned and is not directly sponsored by the Fedora Project or Red Hat, Inc.

Privacy Policy | Term of Use | Posting Guidelines | Archive | Contact Us | Founding Members

Powered by vBulletin® Copyright ©2000 - 2012, vBulletin Solutions, Inc.

FedoraForum is Powered by RedHat