outlook SPA問題
伺服器端是用postfix+dovecot+mysql+extmail+extman
客戶端用webmail訪問和管理都沒有問題
當客戶端用outlook並選中SPA(log on using Secure Password Authentication)時
出現登陸驗證框，也就是讓你填username/password/domain
不選SPA就可以正常登陸，並能發信，收信.
下面是maillog日誌中的內容,前兩行是不選SPA的日誌(正常)
第三行日誌是選中SPA的日誌(不正常),奇怪的是他的user和method
# more /var/log/maillog
Nov 21 02:27:48 mailtest dovecot: pop3-login: Login: user=<test2@test.hk>, method=PLAIN, rip=10.10
.119.250, lip=10.10.119.204
Nov 21 02:27:48 mailtest dovecot: POP3(test2@test.hk): Disconnected: Logged out top=0/0, retr=0/0,
del=0/0, size=0
Nov 21 02:28:08 mailtest dovecot: pop3-login: Disconnected: user=<test2>, method=NTLM, rip=10.10.1
19.250, lip=10.10.119.204
#
下面是相關截圖
《解決方案》
NND
原來是這樣
http://207.46.196.114/windowsserver/en/library/516ec61e-13d9-43c0-81a7-05b43070b3f71033.mspx?mfr=true
Configure Outlook Express for Secure Password Authentication
Updated: January 21, 2005
?
To configure Outlook Express for Secure Password Authentication
1.
Click Start, point to All Programs, and then click Outlook Express.
2.
On the Tools menu, click Accounts.
3.
In Internet Accounts, click the Mail tab, click the name of your POP3 e-mail account, and then click Properties.
4.
Click the Servers tab, and then click Log on using Secure Password Authentication.
5.
In Account name, type your POP3 service user name not including the domain. For example, if your e-mail address is someone@example.com, you would type:
someone
and then click OK. If a naming conflict occurred when the mailbox was created, the user name is the pre-Windows 2000 logon name. For more information about the pre-Windows 2000 logon name, see Notes.
Notes
? Secure Password Authentication (SPA) only supports Active Directory integrated authentication and local Windows accounts authentication.
? Be sure to update your e-mail client software and client operating system with the latest service pack available.
? If you are using an e-mail client other than Outlook Express, check your product documentation for information about how to configure your e-mail client to use Secure Password Authentication (SPA) (also known as NTLM Authentication).
? If a dialog box prompts you for your credentials after you configure Outlook Express for SPA, enter your credentials, as described in the following table:
Value Description
User Name
Your user name, not including the domain. For example, if your e-mail address is someone@example.com, you would type:
someone
If a naming conflict occurred when the mailbox was created, the user name is the pre-Windows 2000 logon name.
Password
Your password.
Domain
For Active Directory integrated authentication, this is the network basic input/output system (NetBIOS) name of the domain. For local Windows accounts authentication, this is the name of the local computer.
? If you are using Active Directory integrated authentication and Secure Password Authentication and a naming conflict occurred when the mailbox was created, the pre-Windows 2000 logon name must be used for e-mail client authentication. To determine the modified logon name, go to the Active Directory Users and Computers snap-in in Administrative Tools. Go to the Users folder, right-click the user account, and then click Properties. Click the Account tab and the modified account name will appear in User logon name (pre-Windows 2000). You must note the pre-Windows 2000 logon name and provide it to the user.
Information about functional differences
? Your server might function differently based on the version and edition of the operating system that is installed, your account permissions, and your menu settings. For more information, see Viewing Help on the Web.
