Roundcube 220 Auth Failure

Discussion in 'Installation/Configuration' started by Gray Consulting, Feb 18, 2021.

  1. Gray Consulting

    Gray Consulting Member HowtoForge Supporter

    Greetings Till and team -

    We host ISPC 3.2 on Ubuntu 20.04/Apache2/MariaDB, on an AWS instance. Everything working smoothly, including postfix/dovecot, as evidenced by successful send & receives via a client SMTP app (Thunderbird). Except for roundcube. We can log in fine, but any attempts to send return
    Code:
    SMTP Error (220): Authentication Failed
    Critical settings in /etc/roundcube/config.inc.php:
    Code:
    $config['default_host'] = 'localhost';
    $config['smtp_server'] = 'tls://%h';
    $config['smtp_port'] = 587;
    $config['smtp_user'] = '%u';
    $config['smtp_pass'] = '%p';
    $config['support_url'] = '';
    $config['smtp_conn_options'] = array(
      'ssl' => array(
        'verify_peer'  => true,
        'verify_depth' => 3,
        'cafile'       => '/etc/ssl/certs/SectigoRSADomainValidationSecureServerCA.crt',
      ),
    );
    We have tried all the tweaks suggested (and a few not), but utterly stuck on the 220 error. Any suggestions?

    Thanks as always ~
     
  2. Th0m

    Th0m ISPConfig Developer Staff Member ISPConfig Developer

    The server has no valid cert for "localhost", but you are verifying the cert.

    If the smtp server is on localhost, remove tls:// from the hostname (%h) and use port 25 for sending.
    You can also use the hostname of your smtp server, if it has a valid cert, and keep using tls:// with port 587.
    Lastly, you could disable the verification of the cert (but I would not do this).
     
    Gray Consulting likes this.
  3. Gray Consulting

    Gray Consulting Member HowtoForge Supporter


    Nicely explained - that makes perfect sense. (e.g., that's why postfix works, because it's configured under our 'real' hostname, which has an associated tls cert. )

    Thanks so much!
     
  4. Th0m

    Th0m ISPConfig Developer Staff Member ISPConfig Developer

    No problem! :)
     

Share This Page