My Account email settings: SECURITY PROBLEM ... AUTH=PLAIN

[droptix]

When editing my user account settings for email I'm doing this:

EMAIL OPTIONS
Email address: mail@domain.tld
[…]

OUTBOUND EMAIL SETTINGS
Mail transfer agent: SMTP
SMTP Server: smtp.domain.tld
Use SMTP Authentication: yes
SMTP Port: 25

INBOUND EMAIL SETTINGS
Mail server address: imap.domain.tld
Mail server protocol: IMAP
Mail server port: 143
Status: Active
User Name: droptix
Password: ********
Monitored Folder: INBOX

Advanced options:
Use SSL :no
Leave messages on server: yes (hum, we're talking about IMAP, do we? )
Import only since last check: no

When pressing the button "Test Settings" the following error occurs:

SECURITY PROBLEM: insecure server advertised AUTH=PLAIN

1) Why and what to do now? My email client (Thunderbird) has no problems with these settings.
2) When using IMAP, what for is the option Leave messages on server? Does SugarCRM provide a real IMAP mail client or does it import emails from my IMAP account to the SugarCRM database?

[sanjaykatiyar1]

1.)
Mail server address: imap.domain.tld
Mail server protocol: IMAP
Mail server port: 143
Status: Active
User Name: droptix
Password: ********
Monitored Folder: INBOX

In the User Name : use the full mail id (like dropitx@.......tld)

2.) Leave Message On server means if you checked this mail will not be deleted from your mail server.
Yes sugar imports mails from the mail server and store in the database

[droptix]

In the User Name : use the full mail id)

As I expected this didn't work because the user name for authentication is just droptix and not the whole email address droptix@domain.tld. Error:

Can not authenticate to IMAP server: Authentication failed.

Any other ideas? It seems that SugarCRM doesn't want to establish an unsecured (non SSL) connection...

Yes sugar imports mails from the mail server and store in the database

Why that? Wouldn't it be better to use PHPs POP3 and IMAP libraries to create a real webmail client? v.T.i.g.e.r uses them as it should be...

[Blauwald]

SECURITY PROBLEM: insecure server advertised AUTH=PLAIN

I have the same problem. Any ideas? The login is correct. Is it possible to switch off this safety examination?

[moya]

I have the same problem. In my case it's related to using Dovecot as pop3 server. Dovecot assumes a connection is secure if remote_ip == local_ip (see explanation to disable_plaintext_auth in http://wiki.dovecot.org/MainConfig#h...bd09736f276b82).

The solution could be hacking modules/InboundEmail/InboundEmail.php to add another false positive case in function findOptimumSettings.

Regards,
maykel

[spithost]

Hi Maykel,

Shouldn't someone enter it as a "bug" for Sugar? Or a VERY wanted feature to be able to switch this "check" off?
It doesn't happen with POP3 only but also with an IMAP-connection to Dovecot

As I am moving my email from a very old pop3-only-server to a more versatile Dovecot IMAP/POP3 solution it would be nice to have a "solution" of some sort within not too long a period.

Bye,
Klaus

[sgandhi]

Hi All,
We are not able to reproduce this issue here. We tried witout ssl and with ssl, either ways it works. I also applied all the settings which moya mentioned.

If your mail server says that if you are coming from outside IP then you should be using ssl then what is wrong in not using ssl ?? Can one of you try with enable ssl and see it it works ??

Thanks
-Samir Gandhi

[alexei379]

I had the same issue with the combination of SugarCRM 5a and DoveCot 1.0.5 both installed on the same Gentoo 2007 server.
Tried to connect using IMAP without SSL.
Using SSL checkbox and enabling SSL (if it is disabled ) in Dovecot solved the problem.

[moff40]

I've tried different email account with simpler username/password,no help. Anybody have any idea how to fix this?

Sugar 4.5.1i
Trustix 2.2
Apache
PHP5

[tronics]

Hello!

This happens when you have the mailserver on a different IP and not using SSL (probably there are other cases as well)

Change line 2259 in modules/InboundEmail/InboundEmail.php
to:

if(!empty($retArray['good'])||1==1) {

Regards,
tronics