529502 - GMX SMTP server "use secure authentication" is enabled by default

Status: RESOLVED INCOMPLETE

(Thunderbird :: Account Manager, defect)

Description

[Eric Moore]

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.1.5) Gecko/20091102 Firefox/3.5.5
Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9.1.5) Gecko/20091117 Thunderbird/3.0

I'm sharing a profile between Thunderbird 2.0.0.23, Shredder beta 4, the 11/13 Shredder nightly build and build 2 of 3.0 RC1. One of my IMAP accounts is for GMX. It uses a SSL connection via port 993 to imap.gmx.com and no secure authentication. Its SMTP server is set to mail.gmx.com using port 587 and "TLS if available". "Use name and password" is checked.

I can send messages from it with every version except build 2 of 3.0RC1. It complains that:

Sending of message failed.
An error occurred sending mail: Unable to authenticate to SMTP server mail.gmx.com. The server does not support any compatible secure authentication mechanism but you have chosen secure authentication. Try switching off secure authentication or contact your service provider.

This build added a "use secure authentication" setting to the SMTP server entry and enabled it by default. 

After unchecking "use secure authentication" I could send messages. I checked the other SMTP server entries (Fastmail, Gmail, Google Apps, AIM, Hotmail, webmail/localhost) and none of them had "use secure authentication" enabled by default.






Reproducible: Always

Comment 1

[Wayne Mery (:wsmwk)]

regression?

Comment 2

[Mark Banner (:standard8)]

(In reply to comment #1)
> regression?

Probably a dupe of one of David's bugs.

Comment 3

[rsx11m]

Sounds like bug 522633, but with the added twist of sharing a profile. That
SMTP server gives me an AUTH LOGIN PLAIN, thus should fail on trySecAuth and
fall back to plain authentication. Maybe that preference is somehow changed
when used with a 2.0 profile, but then it should be the same problem with the nightly builds.

Can you identify the server and provide the mail.smtpserver.smtp#.trySecAuth
and mail.smtpserver.smtp#.useSecAuth preference values?

If you reset both to force a retry, does it come up with the box checked again on the next message you try to send?

Comment 4

[Wayne Mery (:wsmwk)]

Eric, can you retest per comment 3 please?

Comment 5

[Joshua Cranmer [:jcranmer]]

RESOLVED INCOMPLETE due to lack of response to previous question. If you feel this change has been made in error, please respond to this bug with your reason why.