From: CommuniGate Pro Discussions
[mailto:CGatePro@mail.stalker.com] On Behalf
Of Rob Rooken
Sent:
Thursday, January 01, 2009 2:54 PM
To: CommuniGate
Pro Discussions
Subject: Re: [CGP-Update] [*] CommuniGate
Pro 5.2.11 is released
We see this happening
on Outlook 12 (2007) only (IMAP). it first authenticates with the username only,
generates the error and than sccesfully in the user@domain format.
When we asked the
OL 2007 users to change the @ for an % the errors disappeared. so
user%domain will work the first time without an error.
From: CommuniGate Pro Discussions
[mailto:CGatePro@mail.stalker.com] On Behalf
Of John Souvestre
Sent: Thursday, January 01, 2009 9:19
PM
To: CommuniGate Pro Discussions
Subject: Re: [CGP-Update] [*] CommuniGate
Pro 5.2.11 is released
Hi
Nicolas.
The problem definitely
seems to be authentication related. We saw the problem on POP connections,
no MAPI.
From the log, as far as
I could see it seemed that an attempt to authenticate was done without the
domain name first, then with. For example (with actual domain name changed
to xxxxxx):
11:28:55.080 1
POP-000327([98.172.188.156]) failed to open 'kperry'. Connection from
[98.172.188.156]:3046. Error Code=unknown user
account
11:28:57.152 2
POP-000327([98.172.188.156]) 'kperry@xxxxxx.com' connected from
[98.172.188.156]:3046
The failed attempt
seemed to be followed by a valid one 2 seconds later, in
general.
In line with your
comment in the manual I see:
Note: Some
Microsoft products send incorrect credentials when they detect that the server
supports the NTLM SASL method. While those products then resend the correct
credentials, the failed login attempts produce Failure-level Log records and may
increase the "failed logins" counter too quicky, so the account becomes
"temporarily locked".
But we don’t have the
NTLM or MSN login methods enabled. Perhaps this is the problem – that ver
11 uses them regardless?
Thanks,
John
John Souvestre - Integrated
Data Systems - (504) 355-0609
From: CommuniGate Pro Discussions
[mailto:CGatePro@mail.stalker.com] On Behalf
Of Nicolas Hatier
Sent: Monday, December 29, 2008 11:47
AM
To: CommuniGate Pro Discussions
Subject: Re: [CGP-Update] [*] CommuniGate
Pro 5.2.11 is released
I think this is caused by a problem(?) of the newest
MAPI connector with NTLM authentication and Outlook 2007 - it's a change, but
I'm not sure it's a bug since I didn't experience/fully test it by myself. It
happens because something tries to authenticate the user of a sub-domain without
specifying the domain name, then retries with the domain name or something like
this, I don't have all the details.
Anyway, disabling NTLM and Cram-MD5
authentication fixed the problem, but maybe you can disable NTLM
only.
Regards,
Nicolas Hatier
John Souvestre wrote:
Hi.
We upgraded from 10 to 11 and started seeing problems with people sending. I
haven't done an analysis yet, but it seems that CGP was blocking them due to too
many login failures. We stepped back to 10 and the problem stopped.
Any idea what might be going on?
Thanks,
John
John Souvestre - Integrated Data Systems - (504) 355-0609
> -----Original Message-----
> From: CommuniGate Pro Discussions [mailto:CGatePro@mail.stalker.com] On
> Behalf Of Technical Support
> Sent: Friday, December 19, 2008 5:29 PM
> To: CommuniGate Pro Discussions