Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have looked everywhere for a concise answer, but I am unable to find a solution (or one that I can understand). I'm certain that this is a configuration issue, but can't see where.

I have installed and configured OpenSSL/Postfix/Dovecot (in that order).

On the server itself, I can telnet localhost imap, get a connection, send a login and receive an OK.

From home, I get

2 login username password
2 NO Login failed.

I trust this has something to do with not accepting plaintext logins from remote clients. However, when attempting to login using Thunderbird, it tells me a generic "username or password incorrect".

The logs tell me

Mar  7 18:14:10 hostname postfix/smtpd[5372]: connect from <my home host>.comcast.net[ip]
Mar  7 18:14:10 hostname postfix/smtpd[5372]: improper command pipelining after EHLO from <my home host>.comcast.net[ip]
Mar  7 18:14:10 hostname postfix/smtpd[5372]: disconnect from <my home host>.comcast.net[ip]

postconf -n:

alias_database = hash:/etc/aliases
alias_maps = hash:/etc/aliases
broken_sasl_auth_clients = yes
command_directory = /usr/sbin
config_directory = /etc/postfix
daemon_directory = /usr/libexec/postfix
data_directory = /var/lib/postfix
debug_peer_level = 2
home_mailbox = Maildir/
html_directory = no
inet_interfaces = all
inet_protocols = all
mail_owner = postfix
mailq_path = /usr/bin/mailq.postfix
manpage_directory = /usr/share/man
mydestination = ffs-clan.com
myorigin = $mydomain
newaliases_path = /usr/bin/newaliases.postfix
queue_directory = /var/spool/postfix
readme_directory = /usr/share/doc/postfix-2.6.6/README_FILES
relayhost = dedrelay.secureserver.net
sample_directory = /usr/share/doc/postfix-2.6.6/samples
sendmail_path = /usr/sbin/sendmail.postfix
setgid_group = postdrop
smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, reject_unauth_destination, permit
smtpd_sasl_auth_enable = yes
smtpd_sasl_path = private/auth
smtpd_sasl_type = dovecot
smtpd_tls_auth_only = yes
smtpd_tls_cert_file = /etc/pki/CA/certs/ffs-clan.com.crt
smtpd_tls_key_file = /etc/pki/CA/private/ffs-clan.com.key
smtpd_tls_received_header = yes
smtpd_tls_security_level = may
smtpd_tls_session_cache_timeout = 3600s
smtpd_use_tls = yes
tls_random_source = dev:/dev/urandom
unknown_local_recipient_reject_code = 550

dovecot -n:

# 2.0.9: /etc/dovecot/dovecot.conf
# OS: Linux 2.6.18-028stab101.1 x86_64 CentOS release 6.3 (Final)
auth_mechanisms = plain login
disable_plaintext_auth = no
mail_location = maildir:~/Maildir
mbox_write_locks = fcntl
passdb {
  driver = passwd
service auth {
  unix_listener /var/spool/postfix/private/auth {
    group = postfix
    mode = 0666
    user = postfix
ssl_cert = </etc/pki/CA/certs/ffs-clan.com.crt
ssl_key = </etc/pki/CA/private/ffs-clan.com.key
userdb {
  driver = passwd
protocol pop3 {
  pop3_client_workarounds = outlook-no-nuls oe-ns-eoh
  pop3_uidl_format = %08Xu%08Xv

Thanks in advance and sorry if this is a very noob question. I posted on stack overflow, as well, I hope that doesn't count as cross-posting.

share|improve this question
Yes, it counts as cross-posting, and is a very bad idea. Especially when the two posts are completely different. –  Michael Hampton Mar 8 '13 at 5:07

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.