POP3 and IMAP authentication after Q303451

From: Robert Gosewehr (robert.gosewehr@lmiv.com)
Date: 10/23/01 

Subject: POP3 and IMAP authentication after Q303451
Date: Tue, 23 Oct 2001 01:29:48 -0500
Message-ID: <109CF3ABA252CB4DA96C9F71D325107C502A3D@CorpML1.indy.lmiv.com>
From: "Robert Gosewehr" <robert.gosewehr@lmiv.com>
To: <focus-ms@securityfocus.com>

It appears that applying patch Q303451 for Exchange 2000 changes the
authentication methods for POP3 and IMAP. This only happens when the
user logon name for the domain is different from the mailbox alias. If
the two are different there is a new convention for specifying a
username when using POP3 or IMAP to authenticate. The following is taken
from an email from a Microsoft support tech.

-------
ISSUE: POP3 and IMAP services would not authenticate.

RESOLUTION: We found that the reason POP3 authentication was failing was
because you have different logon and mailbox alias. This is most likely
due to the fact that the hotfix added a check before allowing POP3
authentication.

We solved this by changing the way you log on. By using the following
format we were able to successfully logon via POP3:
<DomainName>\<LogonName>\<MailboxAlias>.
-------

I couldn't find any links for more information on this issue. I didn't
even know this "check" before the POP3 authentication existed. Does
anyone have any links or further information?

thanks.
robert

Relevant Pages

  • AW: POP3 and IMAP authentication after Q303451
    ... Subject: AW: POP3 and IMAP authentication after Q303451 ... the patch Q303451 causes this POP3 authentication issue. ...
    (Focus-Microsoft)
  • Re: POP3 Problems
    ... in the POP3 account parameters specify that your outgoing email server ... > not on the network who connect through POP3. ... > and supports anonymous and the other is for the POP3 clients and only ... > SSPI authentication attempt from 192.168.1.5 has failed with error ...
    (microsoft.public.windows.server.sbs)
  • Re: IIS 6.0 POP3 Server wont accept SPA.
    ... SMTP and POP3 authentication are different, ... - SPA is basically a form of NTLM authentication. ... Basically the server sends a challenge, ...
    (microsoft.public.inetserver.iis.smtp_nntp)
  • Secure Password Authentication
    ... Security Layer on POP3 Exchange Virtual Server and users enabled Secure ... Password Authentication on their home Outlook clients. ...
    (microsoft.public.exchange.clients)
  • Re: IIS 6.0 POP3 Server wont accept SPA.
    ... SMTP and POP3 authentication are different, ... - SPA is basically a form of NTLM authentication. ... Basically the server sends a challenge, ...
    (microsoft.public.windows.server.security)