The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Outgoing mail authentication repeatedly failing.

Discussion in 'E-mail Discussions' started by Toby, Dec 1, 2010.

  1. Toby

    Toby Member

    Joined:
    Jul 14, 2004
    Messages:
    6
    Likes Received:
    0
    Trophy Points:
    1
    Server has been 'forgetting' passwords for email checks over POP, IMAP nor is webmail allowed to login (not the cpanel, the actual mail account).

    exim fails under many, if not all, instances (example errors below).

    It is affects multiple users in multiple locations.

    The only way to get POP/IMAP logins working is to restart the services.

    Without doing anything on the client-end mail then will send for about 20 minutes before password prompts return.

    The datacenter has updated cpanel, repaired permissions, forced courier and pop installs, etc.

    Would appreciate any help

    Examples of failure messages:

    ===============================

    imap failed @ Tue Nov 30 13:37:07 2010. A restart was attempted automagically.
    Service Check Method: [tcp connect]

    Failure Reason: TCP Transaction Log: << * OK [CAPABILITY IMAP4rev1
    UIDPLUS CHILDREN NAMESPACE THREAD=ORDEREDSUBJECT THREAD=REFERENCES SORT QUOTA
    IDLE ACL ACL2=UNION STARTTLS] Courier-IMAP ready. Copyright 1998-2008 Double
    Precision, Inc. See COPYING for distribution information. A001 LOGIN
    __cpanel__service__auth__imap__ ((snip))
    << *
    BYE Temporary problem, please try again later imap: ** [* BYE Temporary
    problem, please try again later != A001 OK]


    ===============================
    exim failed @ Sat Nov 27 13:57:46 2010. A restart was attempted automagically.
    Service Check Method: [tcp connect]

    Failure Reason: TCP Transaction Log:
    << 220-host.dragonfly-media.net ESMTP Exim 4.69 #1 Sat, 27 Nov 2010 13:58:54 -0500
    <<
    <<
    EHLO localhost
    << 250-host.dragonfly-media.net Hello localhost [127.0.0.1]
    <<
    <<
    <<
    <<
    <<
    AUTH PLAIN
    ((snip))
    << 435 Unable to authenticate at present
    exim: ** [435 Unable to authenticate at present != 2]

    ===============================

    imap failed @ Sun Nov 28 12:42:21 2010. A restart was attempted automagically.
    Service Check Method: [tcp connect]

    Failure Reason: TCP Transaction Log:
    << * OK [CAPABILITY IMAP4rev1 UIDPLUS CHILDREN NAMESPACE THREAD=ORDEREDSUBJECT THREAD=REFERENCES SORT QUOTA IDLE ACL ACL2=UNION STARTTLS] Courier-IMAP ready. Copyright 1998-2008 Double Precision, Inc. See COPYING for distribution information.
    A001 LOGIN __cpanel__service__auth__imap___ ((snip))
    << * BYE Temporary problem, please try again later
    imap: ** [* BYE Temporary problem, please try again later != A001 OK]

    =====================


    imap failed @ Wed Nov 24 13:08:17 2010. A restart was attempted automagically.
    Service Check Method: [tcp connect]

    Failure Reason: TCP Transaction Log: << * OK [CAPABILITY IMAP4rev1
    UIDPLUS CHILDREN NAMESPACE THREAD=ORDEREDSUBJECT THREAD=REFERENCES SORT QUOTA
    IDLE ACL ACL2=UNION STARTTLS] Courier-IMAP ready. Copyright 1998-2008 Double
    Precision, Inc. See COPYING for distribution information. A001 LOGIN
    __cpanel__service__auth__imap__ ((snip))
    << *
    BYE Temporary problem, please try again later imap: ** [* BYE Temporary
    problem, please try again later != A001 OK]
     
  2. partsace

    partsace Active Member

    Joined:
    Jan 11, 2007
    Messages:
    38
    Likes Received:
    0
    Trophy Points:
    6
    Did you ever get this solved?

    Scott
     
  3. cPanelTristan

    cPanelTristan Quality Assurance Analyst
    Staff Member

    Joined:
    Oct 2, 2010
    Messages:
    7,623
    Likes Received:
    21
    Trophy Points:
    38
    Location:
    somewhere over the rainbow
    cPanel Access Level:
    Root Administrator
    Hello Scott,

    If you are having a similar issue, please try changing the IMAP and POP client in WHM > Mailserver Selection area. It is likely courier, so try changing to dovecot if that's the case. If that does not work, try increasing the settings for the authentication daemons in WHM > Mailserver Configuration area.

    Thanks.
     
  4. gkgcpanel

    gkgcpanel Well-Known Member

    Joined:
    Jun 6, 2007
    Messages:
    217
    Likes Received:
    0
    Trophy Points:
    16
    cPanel Access Level:
    DataCenter Provider
    What else could it be??

    We have a customer who has a VPS and they are running Dovecot. They have about 80 email accounts on one domain and only from ONE SPECIFIC IP address does it fail... They can go to another location that has a different IP address and it works fine every single time.

    I thought it might be the IP itself, so they contacted their ISP and got a whole new IP address (it's not blacklisted either, I checked). Yet, from that specific location, they can connect only for about 20 or 30 minutes and then nothing. Then it starts failing with (auth failed).

    I have changed it from Dovecot to Courier, and still got the same issue, I have made sure the POP before SMTP settings were off, (thinking perhaps that the cached password times out after 20 or 30 minutes...

    Have been working on this for days and can not figure out why this is happening.
    Log entries:

    The IP address starting with 189, works fine every single time.
    Jun 19 12:28:34 web60 dovecot: pop3-login: Login: user=<con.xp5@cruzazulfc.com>, method=PLAIN, rip=189.xxx.nn.82, lip=nnn.180.xx.19
    Jun 19 12:28:34 web60 dovecot: POP3(con.xp5@cruzazulfc.com): Disconnected: Logged out top=0/0, retr=0/0, del=0/0, size=0, bytes=12/43

    The IP starting with 201 works for about 20 minutes and then starts failing:

    Jun 19 12:17:52 web60 dovecot: pop3-login: Disconnected (auth failed, 1 attempts): user=<ti2@xxxxxxxxxx.com>, method=PLAIN, rip=201.xxx.nn.203, lip=208.xx.xxx.19

    Jun 19 12:18:38 web60 dovecot: pop3-login: Login: user=<ti2@xxxxxxxxx.com>, method=PLAIN, rip=189.xxx.nnn.254, lip=208.xxx.nn.19
    Jun 19 12:18:39 web60 dovecot: POP3(ti2@xxxxxxxx.com): Disconnected: Logged out top=0/0, retr=1/75369, del=0/103, size=6833185, bytes=34/78743

    These people from IP address 201, can go to the other building and then log on just fine...

    So it just doesn't make sense. The IP address is not blocked either (I checked).

    Anyone ever seen this before?
     
  5. cPanelNick

    cPanelNick Administrator
    Staff Member

    Joined:
    Mar 9, 2015
    Messages:
    3,426
    Likes Received:
    2
    Trophy Points:
    38
    cPanel Access Level:
    DataCenter Provider
    What do you have your max logins per ip set to?

    Screen Shot 2012-06-19 at 8.07.27 AM.png Screen Shot 2012-06-19 at 8.07.35 AM.png
     
  6. gkgcpanel

    gkgcpanel Well-Known Member

    Joined:
    Jun 6, 2007
    Messages:
    217
    Likes Received:
    0
    Trophy Points:
    16
    cPanel Access Level:
    DataCenter Provider

    Maximum IMAP Connections Per IP: 80
    Maximum POP3 Connections per IP: 80
    Number of Spare Authentication Processes: 60
    Maximum Number of Authentication Processes: 80

    I've increased all of these from their defaults.

    Thanks.
     
  7. gkgcpanel

    gkgcpanel Well-Known Member

    Joined:
    Jun 6, 2007
    Messages:
    217
    Likes Received:
    0
    Trophy Points:
    16
    cPanel Access Level:
    DataCenter Provider
    Just submitted a support ticket # 2817418
     
  8. ipole

    ipole Member

    Joined:
    Jun 16, 2004
    Messages:
    8
    Likes Received:
    0
    Trophy Points:
    1
    I am facing the same problem.

    Did you get a resolution to this? I have seen many threads about ticket being opened, but nothing further.

    Regards,
    Ninad
     
  9. gkgcpanel

    gkgcpanel Well-Known Member

    Joined:
    Jun 6, 2007
    Messages:
    217
    Likes Received:
    0
    Trophy Points:
    16
    cPanel Access Level:
    DataCenter Provider
    Ninad,

    Yes, the problem was actually that cpHulkd was still enabled. I normally disable this in favor of running cxs. But on this particular VPS, I must have forgotten to disable it and it turned out the customers email kept getting blocked in there.
     
Loading...

Share This Page