ME 6.0: IMAP Authentication unusable with Perdition proxy

Raise/discuss any potential issues with MailEnable for consideration in project issue register.
Post Reply
adi
Posts: 3
Joined: Wed Jul 18, 2012 1:16 am
Location: Melbourne, Australia

ME 6.0: IMAP Authentication unusable with Perdition proxy

Post by adi »

Hi, I'm trying to get Mailenable 6.0 (comes with Plesk for Windows 10.4.4) to work behind Perdition proxy server (http://horms.net/projects/perdition/)
What I think I've found is that Mailenable doesn't correctly handle the authentication as described in http://tools.ietf.org/html/rfc3501#section-7.5
The are two IMAP login scenarios:
1. IMAP authentication works when the login is done like this:
blah LOGIN user password
2. IMAP authentication doesn't work when the IMAP client uses this:
blah LOGIN {username_length}
. go ahead (ME response)
blah username {password_length}
blah BAD LOGIN- Invalid username or password. (ME response)

Is this a known issue with ME and if it is, is it fixed in a more recent version? Following is the complete (but edited) IP traffic capture between the Perdition IMAP proxy (imapClientIP) and ME server (imapDstIP) saved as csv

"No.","Time","Source","Destination","Protocol","Lenght","Bytes Total","Info"
"1","2012-07-18 10:04:13.787767","imapClientIP","imapDstIP","TCP","76","76","54396 > imap [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=512882156 TSecr=0 WS=128"
"2","2012-07-18 10:04:13.790068","imapDstIP","imapClientIP","TCP","76","152","imap > 54396 [SYN, ACK] Seq=0 Ack=1 Win=8192 Len=0 MSS=1460 WS=256 SACK_PERM=1 TSval=4256816 TSecr=512882156"
"3","2012-07-18 10:04:13.790098","imapClientIP","imapDstIP","TCP","68","220","54396 > imap [ACK] Seq=1 Ack=1 Win=14720 Len=0 TSval=512882158 TSecr=4256816"
"4","2012-07-18 10:04:13.791751","imapDstIP","imapClientIP","IMAP","118","338","Response: * OK IMAP4rev1 server ready at 07/18/12 10:04:13"
"5","2012-07-18 10:04:13.791775","imapClientIP","imapDstIP","TCP","68","406","54396 > imap [ACK] Seq=1 Ack=51 Win=14720 Len=0 TSval=512882160 TSecr=4256816"
"6","2012-07-18 10:04:13.792037","imapClientIP","imapDstIP","IMAP","87","493","Request: flim07 CAPABILITY"
"7","2012-07-18 10:04:13.792527","imapDstIP","imapClientIP","IMAP","169","662","Response: * CAPABILITY IMAP4rev1 IMAP4 AUTH=LOGIN AUTH=CRAM-MD5 IDLE CHILDREN"
"8","2012-07-18 10:04:13.792742","imapClientIP","imapDstIP","IMAP","87","749","Request: flim08 LOGIN {25}"
"9","2012-07-18 10:04:13.793553","imapDstIP","imapClientIP","IMAP","80","829","Response: + go ahead"
"10","2012-07-18 10:04:13.793742","imapClientIP","imapDstIP","IMAP","100","929","Request: user@aditestingwin.com.au {12}"
"11","2012-07-18 10:04:13.795187","imapDstIP","imapClientIP","IMAP","117","1046","Response: flim08 BAD LOGIN- Invalid username or password."
"12","2012-07-18 10:04:13.795366","imapClientIP","imapDstIP","IMAP","82","1128","Request: 123qweasdzxc"
"13","2012-07-18 10:04:13.796245","imapDstIP","imapClientIP","IMAP","104","1232","Response: 123qweasdzxc"
"14","2012-07-18 10:04:13.796671","imapClientIP","imapDstIP","TCP","68","1300","54396 > imap [FIN, ACK] Seq=85 Ack=249 Win=14720 Len=0 TSval=512882165 TSecr=4256817"
"15","2012-07-18 10:04:13.797292","imapDstIP","imapClientIP","TCP","68","1368","imap > 54396 [ACK] Seq=249 Ack=86 Win=66304 Len=0 TSval=4256817 TSecr=512882165"
"16","2012-07-18 10:04:13.797397","imapDstIP","imapClientIP","TCP","68","1436","imap > 54396 [FIN, ACK] Seq=249 Ack=86 Win=66304 Len=0 TSval=4256817 TSecr=512882165"
"17","2012-07-18 10:04:13.797418","imapClientIP","imapDstIP","TCP","68","1504","54396 > imap [ACK] Seq=86 Ack=250 Win=14720 Len=0 TSval=512882166 TSecr=4256817"

adi
Posts: 3
Joined: Wed Jul 18, 2012 1:16 am
Location: Melbourne, Australia

Re: ME 6.0: IMAP Authentication unusable with Perdition prox

Post by adi »

Just as a side note, I don't see in the release notes from http://www.mailenable.com/Standard-ReleaseNotes.txt any reference to an IMAP login problem whose description may resemble to what I'm experiencing, so I'll assume the problem still exists in the most current version.

adi
Posts: 3
Joined: Wed Jul 18, 2012 1:16 am
Location: Melbourne, Australia

Re: ME 6.0: IMAP Authentication unusable with Perdition prox

Post by adi »

Three weeks on and no reply. Any ideas?

MailEnable
Site Admin
Posts: 4441
Joined: Tue Jun 25, 2002 3:03 am
Location: Melbourne, Victoria Australia

Re: ME 6.0: IMAP Authentication unusable with Perdition prox

Post by MailEnable »

I believe there were some changes made to command contination in recent weeks (although I too notice that there is nothing noted in the release notes).
I did check the source module and the change was labelled to be included in 6.57.

Here is a test that i did with the current release:

* OK IMAP4rev1 server ready at 08/31/12 00:15:55
01 login {9}
+ go ahead
emptytest {4}
+ go ahead
pass01 OK LOGIN completed
* OK Sleepy?

I used windows telnet (from Windows 7 desktop) and pasted the commands in.
From the logs, it would seem that what I pasted in matches the requests tot he proxy.
Notably though, when I tested from an Windows XP telnet client, the buffering to the server was different and I had trouble with command contination.
Regards, Andrew

Post Reply