IMAP will not authenticate even when using the correct password

Dvalin21

So I’m having issues trying to get everything working on a third party client. I didn’t have this issue before. I use Bluemail and etar for calendar. For some reason imap started not authenticating through any other third party app except through Bluemail. This was on the old 202502 and still on the 202503 update. I’m using the Third party App password as well. Trying to avoid just deleting the entire thing and starting over, but if I have to then I have. I have several different accounts on the server and they all do it except one. Not even sure why its not having a hard time. I haven’t done anything different or special with that account. Let me know what information I need to provided. Thanks.

04/21/2025, 10:28:51 AM info disconnect from unknown[81.30.107.94] ehlo=1 auth=0/1 rset=1 commands=⅔
04/21/2025, 10:28:51 AM info lost connection after AUTH from unknown[81.30.107.94]
04/21/2025, 10:28:51 AM warning warning: unknown[81.30.107.94]: SASL LOGIN authentication failed: (reason unavailable), sasl_username=hachisuka

Update: Im able to go to Webmail and do all calendar and email functions with out issue.

ETNyx

Hello, this seems your app initiate auth process but never finish it.

I would suggest to extend your logging capabilities on both ends, about your app I do not know, whit Dovecot you have several option, i would start whit rawlog_dir or pre-login process

service imap-login {
  executable = imap-login -R rawlogs
}

mkdir /var/run/dovecot/login/rawlogs
chown dovenull /var/run/dovecot/login/rawlogs
chmod 0700 /var/run/dovecot/login/rawlogs

Please consult Dovecot docs,…

juchzi

ETNyx
Hello, I have the same problem as @Dvalin21 described with a new installed 2025-03, but login fails on all mailbox users.
Mailclient error says: “username or password incorrect”. However, I can logon to SoGo with the same credentials.

I’m confused, because I run another server, installed in December 2024, upgraded since up to 2025-03, with similar system and mailbox configuration, it runs all fine!

Unfortunately, I don’t know yet where to add your proposed rawlogs options exactly, to get the detailled logs (I’m pretty much a mailcow-dockerized newbie).

What I tried:

I added to docker-compose.override.yml (properly formatted):
services:
dovecot-mailcow:
volumes:
- ./data/log/dovecot-rawlog:/var/log/dovecot-rawlog
and created the subdir: data/log/dovecot-rawlog
I added to data/conf/dovecot/extra.conf (properly formatted):
rawlog_dir = /var/log/dovecot-rawlog service imap-login { executable = imap-login -R rawlogs }
I reloaded dovecot-mailcow:
docker-compose up -d --force-recreate dovecot-mailcow

Tried again, but no logs are collected in data/logs/dovecot/ !?
Would you please tell me more to activate rawlogs properly?

Dvalin21

The only thing I’ve been able to use is ActiveSync and of course I’m really only able to use it on Bluemail. But I would like to get away from ActiveSync which I can’t until I can get imap fixed.

Dvalin21

Was there any update on this?

esackbauer

mailcow/mailcow-dockerized6503

Dvalin21

esackbauer So from what I get from this you posted its talking about the login page for our mail cow servers. I’m talking about logging into a third party app (using the app password) for imap setup and it just fails. I don’t think this applies as I’m fully able to access the admin and user pages.

esackbauer

Dvalin21 Its about the second part, if you have 2FA configured, you MUST use app passwords for IMAP now.

Dvalin21

esackbauer I don’t have 2FA configured

Dvalin21

esackbauer So i figured things out I think. I didnt have this issue before the last two updates 202504 and 202505. Use to I could use the app password without having 2FA on. Now, I have to use the original account password instead. When I do it connects right away. The only problem I have now is that every email app that has a integrated calendar says calendar is not supported with this account. I know the calendar settings always use activesync even when I setup the email via imap. Is there a way to fix this? And will this be updated on the next update?

Dvalin21

Reporting additional update. I’ve noticed that updating to the latest version of mail cow, some of the email accounts act as if 2FA is being enabled when its never been enabled before. Is it possible this is a case as I had “App Passwords” assigned before the updating to the latest versions?