Hello,

Xeams version:Version 10.5, build 6470

User source: [local Xeams users / Active Directory]

My SMTP server advertises AUTH LOGIN PLAIN CRAM-MD5 after STARTTLS on port 587. My mail client (eM Client) always picks the strongest offered method, CRAM-MD5, and authentication fails:

C --> AUTH CRAM-MD5
S <-- 535 5.7.3 Authentication unsuccessful.

At the same time the log shows:
WARN stagingserver.f - Unable to create SaslServer for CRAM-MD5

IMAP login with the same credentials works. I already set the SMTP HELO domain to a FQDN and restarted Xeams, without change. Adding smtp.allowed.auth.mechanisms=LOGIN,PLAIN had no effect either.

Questions:
1. How can I stop Xeams from advertising CRAM-MD5, so that clients use LOGIN/PLAIN?
2. Alternatively, what is needed for CRAM-MD5 to work (server name, password storage)?

Thank you,
Bogdan

Bogdan,

I am sorry to learn that you're running into this problem. Right before answering this question, I tried CRAM-MD5 with SMTP, and it worked. Besides, if it works with IMAP, it should also work with SMTP. 

Since you're okay with disabling CRAM-MD5, I am pasting those steps below. 

• Stop Xeams
• Open the $INSTALL_DIR\config\AppConfig.xml file in any editor, such as Notepad
• Search for the parameter called "configFlags". This is an 8-bit integer holding up to 64 boolean values. The flag to disable CRAM-MD5 is at bit number 3. You need to flip this bit to 1. 
• Save the file 
• Restart Xeams

If you're not sure how to perform bitwise operations, paste the value of this parameter, and I'll compute the final value and reply back.