Cannot connect with client using CRAM-MD5 with OpenLDAP auth

[skallen]

At work we are running several servers in different places running 11.1 enterprise and I'm running one community edition for my self. We are trying to figure out wich smartphones to use with Scalix and they all (newer Nokia & Sony-Ericsson) seem to work very well with IMAP, but not so well with SMTP. They work perfectly on the community edition using scalix for authentication, but at work where we are using OpenLDAP for authentication it dose not work with CRAM-MD5 which seems to be default for these phones.

Log from the community edition (which works):

Code: Select all

250-mail.mesoan.net Hello localhost.localdomain [127.0.0.1], pleased to meet you
250-AUTH CRAM-MD5 PLAIN GSSAPI DIGEST-MD5 LOGIN
250-AUTH=LOGIN
250-DSN
250 8BITMIME
[2007-07-02 16:32:00] Cli 7034/1 rcvd: 'AUTH CRAM-MD5'
[2007-07-02 16:32:00] Cli 7034/1 sent  :
334 PDM2g134891ufwerYYHjqwzBAbWFpbC5tZXNvYW4ubmV0Pg==
[2007-07-02 16:32:00] smtpd:sasl_canon_user: "anders" -> "anders"
[2007-07-02 16:32:00] Cli 7034/1 sent  :
235 Authentication successful
[2007-07-02 16:32:00] Cli 7034/1 rcvd: 'RSET'
[2007-07-02 16:32:00] Cli 7034/1 sent  :
250 mail.mesoan.net Reset state
[2007-07-02 16:32:00] Cli 7034/1 rcvd: 'MAIL FROM:<anders@mesoan.com>'
[2007-07-02 16:32:00] Cli 7034/1 sent  :
250 anders@mesoan.com... Sender ok
[2007-07-02 16:32:00] Cli 7034/1 rcvd: 'RCPT TO:<joakim.franzen@se.roxtec.com>'
[2007-07-02 16:32:00]   ... new process 7041
[2007-07-02 16:32:00] 7034: Allocate new unix.in process 7041
[2007-07-02 16:32:00] Cli 7034/1 rcvd U: '220 Scalix ESMTP Ready.'
[2007-07-02 16:32:00] Cli 7034/1 rcvd U: '250 Ok'
[2007-07-02 16:32:00] Cli 7034/1 sent U:
rcpt to: <joakim.franzen@se.roxtec.com>
[2007-07-02 16:32:00] Cli 7034/1 rcvd U: '250 Ok'
[2007-07-02 16:32:00] Cli 7034/1 sent  :
250 Ok
[2007-07-02 16:32:00] Cli 7034/1 rcvd: 'DATA'
[2007-07-02 16:32:00] Cli 7034/1 sent  :
354 Enter mail, end with "." on a line by itself (relay)
[2007-07-02 16:32:00] Cli 7034/1 sent U:
data
[2007-07-02 16:32:00] Cli 7034/1 rcvd U: '354 Enter mail, end with "." on a line by itself.'
[2007-07-02 16:32:00] Cli 7034/1 sent U:


Log from enterprise:

Code: Select all

250-se-ka-sr020.se-ka.roxtec.net Hello localhost.localdomain [127.0.0.1], pleased to meet you
250-AUTH PLAIN LOGIN GSSAPI DIGEST-MD5 CRAM-MD5
250-AUTH=LOGIN
250-DSN
250 8BITMIME
[2007-07-02 16:38:22] Cli 23161/1 rcvd: 'AUTH CRAM-MD5'
[2007-07-02 16:38:22] Cli 23161/1 sent  :
334 PDE4Nzc5MDUyOS44JKh87213huLXNyMDIwLnNlLWthLnJveHRlYy5uZXQ+
[2007-07-02 16:38:22] smtpd:sasl_canon_user: "se-karkar" -> "se-karkar"
[2007-07-02 16:38:22] SASL(FAIL): no secret in database
[2007-07-02 16:38:22] Cli 23161/1 sent  :
535 Incorrect authentication data
[2007-07-02 16:38:23] Cli 23161/1 rcvd: 'RSET'
[2007-07-02 16:38:23] Cli 23161/1 sent  :
250 se-ka-sr020.se-ka.roxtec.net Reset state
[2007-07-02 16:38:23] Cli 23161/1 rcvd: 'MAIL FROM:<a.karlsson@se.roxtec.com>'
[2007-07-02 16:38:23] Rejected anonymous submission from a.karlsson@se.roxtec.com at 127.0.0.1
[2007-07-02 16:38:23] Cli 23161/1 sent  :
530 Authentication required
[2007-07-02 16:38:24] Cli 23161/1 rcvd: 'RSET'
[2007-07-02 16:38:24] Cli 23161/1 sent  :
250 se-ka-sr020.se-ka.roxtec.net Reset state
[2007-07-02 16:38:30] Cli 23161/1 rcvd: 'MAIL FROM:<a.karlsson@se.roxtec.com>'
[2007-07-02 16:38:30] Rejected anonymous submission from a.karlsson@se.roxtec.com at 127.0.0.1
[2007-07-02 16:38:30] Cli 23161/1 sent  :
530 Authentication required
[2007-07-02 16:38:30] Cli 23161/1 rcvd: 'RSET'
[2007-07-02 16:38:30] Cli 23161/1 sent  :
250 se-ka-sr020.se-ka.roxtec.net Reset state
[2007-07-02 16:38:30] Cli 23161/1 rcvd: 'MAIL FROM:<a.karlsson@se.roxtec.com>'
[2007-07-02 16:38:30] Rejected anonymous submission from a.karlsson@se.roxtec.com at 127.0.0.1
[2007-07-02 16:38:30] Cli 23161/1 sent  :
530 Authentication required
[2007-07-02 16:38:30] Cli 23161/1 rcvd: 'QUIT'
[2007-07-02 16:38:30] Cli 23161/1 sent  :
221 se-ka-sr020.se-ka.roxtec.net closing connection


It works quite good with thundebird which fall backs to PLAIN when CRAM-MD5 does not work, but the phones does not.
Any hints?

/Anders Karlsson