Outgoing mail authentication repeatedly failing.

Toby

Member
Jul 14, 2004
6
0
151
Server has been 'forgetting' passwords for email checks over POP, IMAP nor is webmail allowed to login (not the cpanel, the actual mail account).

exim fails under many, if not all, instances (example errors below).

It is affects multiple users in multiple locations.

The only way to get POP/IMAP logins working is to restart the services.

Without doing anything on the client-end mail then will send for about 20 minutes before password prompts return.

The datacenter has updated cpanel, repaired permissions, forced courier and pop installs, etc.

Would appreciate any help

Examples of failure messages:

===============================

imap failed @ Tue Nov 30 13:37:07 2010. A restart was attempted automagically.
Service Check Method: [tcp connect]

Failure Reason: TCP Transaction Log: << * OK [CAPABILITY IMAP4rev1
UIDPLUS CHILDREN NAMESPACE THREAD=ORDEREDSUBJECT THREAD=REFERENCES SORT QUOTA
IDLE ACL ACL2=UNION STARTTLS] Courier-IMAP ready. Copyright 1998-2008 Double
Precision, Inc. See COPYING for distribution information. A001 LOGIN
__cpanel__service__auth__imap__ ((snip))
<< *
BYE Temporary problem, please try again later imap: ** [* BYE Temporary
problem, please try again later != A001 OK]


===============================
exim failed @ Sat Nov 27 13:57:46 2010. A restart was attempted automagically.
Service Check Method: [tcp connect]

Failure Reason: TCP Transaction Log:
<< 220-host.dragonfly-media.net ESMTP Exim 4.69 #1 Sat, 27 Nov 2010 13:58:54 -0500
<<
<<
EHLO localhost
<< 250-host.dragonfly-media.net Hello localhost [127.0.0.1]
<<
<<
<<
<<
<<
AUTH PLAIN
((snip))
<< 435 Unable to authenticate at present
exim: ** [435 Unable to authenticate at present != 2]

===============================

imap failed @ Sun Nov 28 12:42:21 2010. A restart was attempted automagically.
Service Check Method: [tcp connect]

Failure Reason: TCP Transaction Log:
<< * OK [CAPABILITY IMAP4rev1 UIDPLUS CHILDREN NAMESPACE THREAD=ORDEREDSUBJECT THREAD=REFERENCES SORT QUOTA IDLE ACL ACL2=UNION STARTTLS] Courier-IMAP ready. Copyright 1998-2008 Double Precision, Inc. See COPYING for distribution information.
A001 LOGIN __cpanel__service__auth__imap___ ((snip))
<< * BYE Temporary problem, please try again later
imap: ** [* BYE Temporary problem, please try again later != A001 OK]

=====================


imap failed @ Wed Nov 24 13:08:17 2010. A restart was attempted automagically.
Service Check Method: [tcp connect]

Failure Reason: TCP Transaction Log: << * OK [CAPABILITY IMAP4rev1
UIDPLUS CHILDREN NAMESPACE THREAD=ORDEREDSUBJECT THREAD=REFERENCES SORT QUOTA
IDLE ACL ACL2=UNION STARTTLS] Courier-IMAP ready. Copyright 1998-2008 Double
Precision, Inc. See COPYING for distribution information. A001 LOGIN
__cpanel__service__auth__imap__ ((snip))
<< *
BYE Temporary problem, please try again later imap: ** [* BYE Temporary
problem, please try again later != A001 OK]
 

cPanelTristan

Quality Assurance Analyst
Staff member
Oct 2, 2010
7,607
41
348
somewhere over the rainbow
cPanel Access Level
Root Administrator
Hello Scott,

If you are having a similar issue, please try changing the IMAP and POP client in WHM > Mailserver Selection area. It is likely courier, so try changing to dovecot if that's the case. If that does not work, try increasing the settings for the authentication daemons in WHM > Mailserver Configuration area.

Thanks.
 

gkgcpanel

Well-Known Member
Jun 6, 2007
214
1
166
cPanel Access Level
DataCenter Provider
What else could it be??

We have a customer who has a VPS and they are running Dovecot. They have about 80 email accounts on one domain and only from ONE SPECIFIC IP address does it fail... They can go to another location that has a different IP address and it works fine every single time.

I thought it might be the IP itself, so they contacted their ISP and got a whole new IP address (it's not blacklisted either, I checked). Yet, from that specific location, they can connect only for about 20 or 30 minutes and then nothing. Then it starts failing with (auth failed).

I have changed it from Dovecot to Courier, and still got the same issue, I have made sure the POP before SMTP settings were off, (thinking perhaps that the cached password times out after 20 or 30 minutes...

Have been working on this for days and can not figure out why this is happening.
Log entries:

The IP address starting with 189, works fine every single time.
Jun 19 12:28:34 web60 dovecot: pop3-login: Login: user=<[email protected]>, method=PLAIN, rip=189.xxx.nn.82, lip=nnn.180.xx.19
Jun 19 12:28:34 web60 dovecot: POP3([email protected]): Disconnected: Logged out top=0/0, retr=0/0, del=0/0, size=0, bytes=12/43

The IP starting with 201 works for about 20 minutes and then starts failing:

Jun 19 12:17:52 web60 dovecot: pop3-login: Disconnected (auth failed, 1 attempts): user=<[email protected]>, method=PLAIN, rip=201.xxx.nn.203, lip=208.xx.xxx.19

Jun 19 12:18:38 web60 dovecot: pop3-login: Login: user=<[email protected]>, method=PLAIN, rip=189.xxx.nnn.254, lip=208.xxx.nn.19
Jun 19 12:18:39 web60 dovecot: POP3([email protected]): Disconnected: Logged out top=0/0, retr=1/75369, del=0/103, size=6833185, bytes=34/78743

These people from IP address 201, can go to the other building and then log on just fine...

So it just doesn't make sense. The IP address is not blocked either (I checked).

Anyone ever seen this before?
 

gkgcpanel

Well-Known Member
Jun 6, 2007
214
1
166
cPanel Access Level
DataCenter Provider
I am facing the same problem.

Did you get a resolution to this? I have seen many threads about ticket being opened, but nothing further.

Regards,
Ninad
Ninad,

Yes, the problem was actually that cpHulkd was still enabled. I normally disable this in favor of running cxs. But on this particular VPS, I must have forgotten to disable it and it turned out the customers email kept getting blocked in there.