Is NTLM now dead? The Readme says:
2020-10-23 16:24:09 -0400 Josef 'Jeff' Sipek
<jeff.si...@open-xchange.com> (48d6f7282)
auth: Remove ntlm mechanism & the LANMAN and NTLM password schemes
M COPYING
M configure.ac
M src/Makefile.am
M src/auth/Makefile.am
D src/auth/mech-ntlm.c
M src/auth/mech.c
M src/auth/password-scheme.c
M src/auth/test-libpassword.c
M src/auth/test-mech.c
M src/doveadm/Makefile.am
D src/lib-ntlm/Makefile.am
D src/lib-ntlm/ntlm-des.c
D src/lib-ntlm/ntlm-des.h
D src/lib-ntlm/ntlm-encrypt.c
D src/lib-ntlm/ntlm-encrypt.h
D src/lib-ntlm/ntlm-flags.h
D src/lib-ntlm/ntlm-message.c
D src/lib-ntlm/ntlm-message.h
D src/lib-ntlm/ntlm-types.h
D src/lib-ntlm/ntlm.h
David
On 1/22/22 4:22 PM, David Koski wrote:
After upgrading Debian to 11 I found Dovecot at version 2.3.13
(89f716dc2). Now auth method NTLM fails and is not even listed:
# doveadm pw -l
SHA1 SSHA512 SCRAM-SHA-256 BLF-CRYPT PLAIN HMAC-MD5 OTP SHA512 SHA
DES-CRYPT CRYPT SSHA MD5-CRYPT PLAIN-MD4 PLAIN-MD5 SCRAM-SHA-1
SHA512-CRYPT CLEAR CLEARTEXT ARGON2I ARGON2ID SSHA256 MD5 PBKDF2
SHA256 CRAM-MD5 PLAIN-TRUNC SHA256-CRYPT SMD5 DIGEST-MD5 LDAP-MD5
/var/log/dovecot.log
Jan 22 16:20:32 auth: Fatal: Unknown authentication mechanism 'NTLM'
Jan 22 16:20:32 master: Error: service(auth): command startup failed,
throttling for 2.000 secs
Jan 22 16:20:34 auth: Fatal: Unknown authentication mechanism 'NTLM'
Jan 22 16:20:34 master: Error: service(auth): command startup failed,
throttling for 4.000 secs
Jan 22 16:20:38 auth: Fatal: Unknown authentication mechanism 'NTLM'
Jan 22 16:20:38 master: Error: service(auth): command startup failed,
throttling for 8.000 secs
Jan 22 16:20:46 auth: Fatal: Unknown authentication mechanism 'NTLM'
Jan 22 16:20:46 master: Error: service(auth): command startup failed,
throttling for 16.000 secs
# doveconf -n
# 2.3.13 (89f716dc2): /etc/dovecot/dovecot.conf
# Pigeonhole version 0.5.13 (cdd19fe3)
# OS: Linux 5.10.0-11-amd64 x86_64 Debian 11.2
# Hostname: imail.khmfdbyekekelj1rmytwnfh1bc.dx.internal.cloudapp.net
auth_mechanisms = plain login ntlm
debug_log_path = /var/log/dovecot-debug.log
info_log_path = /var/log/dovecot-info.log
log_path = /var/log/dovecot.log
maildir_stat_dirs = yes
managesieve_notify_capability = mailto
managesieve_sieve_capability = fileinto reject envelope
encoded-character vacation subaddress comparator-i;ascii-numeric
relational regex imap4flags copy include variables body enotify
environment mailbox date index ihave duplicate mime foreverypart
extracttext
namespace compat {
alias_for =
hidden = yes
inbox = no
list = no
location =
prefix = INBOX.
separator = .
}
namespace inbox {
inbox = yes
location =
mailbox Drafts {
special_use = \Drafts
}
mailbox Junk {
special_use = \Junk
}
mailbox Sent {
special_use = \Sent
}
mailbox "Sent Messages" {
special_use = \Sent
}
mailbox Trash {
special_use = \Trash
}
prefix =
separator = .
}
passdb {
args = /etc/dovecot/dovecot-sql.conf.ext
driver = sql
}
plugin {
mail_plugins = " quota trash sieve"
sieve = file:~/sieve;active=~/.dovecot.sieve
}
protocols = " imap sieve"
service auth {
unix_listener /var/spool/postfix/private/auth {
group = postfix
mode = 0666
user = postfix
}
unix_listener auth-client {
mode = 0660
}
}
service stats {
unix_listener stats-reader {
group = vmail
mode = 0660
user = vmail
}
unix_listener stats-writer {
group = vmail
mode = 0660
user = vmail
}
}
ssl_cert = </etc/letsencrypt/live/imail1.sutinen.com/fullchain.pem
ssl_client_ca_dir = /etc/ssl/certs
ssl_dh = # hidden, use -P to show it
ssl_key = # hidden, use -P to show it
userdb {
args = /etc/dovecot/dovecot-sql.conf.ext
driver = sql
}
protocol lmtp {
mail_plugins = " quota trash sieve"
postmaster_address = admin-kosmosisland....@kosmosisland.com
}
protocol lda {
mail_plugins = " quota trash sieve"
}
Regards,
David Koski
