Ryfujk

I am configuring a brand new postfix/dovecot server but my brain cells are melting, I can't rembeber how to do this. All is working, postfix has the starttls enabled ( I see it in thunderbird configuration) but dovecot doesn't.
I try to change disable_plaintext_auth to yes and Thunderbird tells me that I have to change the authentication method to STARTTLS but when I do none working anymore.

I have no errors but can't receive or send email (the emails are correctly sended but not copied to the sent folder).

In the log I see this every time I try to access Thunderbird folder
mail dovecot: imap-login: Disconnected (no auth attempts in 0 secs): user=<>

I think it's just a normal variable to set but I can't find it.

dovecot:

# 2.2.22 (fe789d2): /etc/dovecot/dovecot.conf

# Pigeonhole version 0.4.13 (7b14904)

# OS: Linux 4.4.0-47-generic x86_64 Ubuntu 16.04.1 LTS ext4

auth_mechanisms = plain login

disable_plaintext_auth = no

mail_location = mbox:/var/mail/%u

mail_privileged_group = mail

namespace inbox {

  inbox = yes

  location =

  mailbox Drafts {

    special_use = Drafts

  }

  mailbox Junk {

    special_use = Junk

  }

  mailbox Sent {

    special_use = Sent

  }

  mailbox "Sent Messages" {

    special_use = Sent

  }

  mailbox Trash {

    special_use = Trash

  }

  prefix =

}

passdb {

  driver = pam

}

protocols = " imap pop3"

service auth {

  unix_listener /var/spool/postfix/private/auth {

    group = postfix

    mode = 0660

    user = postfix

  }

}

ssl = no

userdb {

  driver = passwd

}

main.cf postfix

smtpd_banner = $myhostname ESMTP $mail_name (Ubuntu)

biff = no



# appending .domain is the MUA's job.

append_dot_mydomain = no



# Uncomment the next line to generate "delayed mail" warnings

#delay_warning_time = 4h



readme_directory = no



# TLS parameters

#smtpd_tls_cert_file = /etc/ssl/certs/ssl-cert-snakeoil.pem

#smtpd_tls_key_file = /etc/ssl/certs/ssl-cert-snakeoil.pem

smtpd_tls_cert_file = /etc/ssl/certs/server.crt

smtpd_tls_key_file = /etc/ssl/private/server.key

smtpd_use_tls=yes

smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache

smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache

smtpd_sasl_type = dovecot

smtpd_sasl_path = private/auth

#smtpd_sasl_local_domain =

smtpd_sasl_security_options = noanonymous

broken_sasl_auth_clients = yes

smtpd_sasl_auth_enable = yes

smtp_tls_security_level = may

smtpd_tls_security_level = may

smtp_tls_note_starttls_offer = yes

smtpd_tls_loglevel = 1

smtpd_tls_received_header = yes

smtpd_tls_protocols = !SSLv2, !SSLv3

smtpd_sasl_authenticated_header = yes



smtpd_relay_restrictions = permit_sasl_authenticated, defer_unauth_destination,permit_mynetworks

myhostname = mail.example.it

alias_maps = hash:/etc/aliases

alias_database = hash:/etc/aliases

myorigin = /etc/mailname

mydestination = $myhostname,example.it, mail.example.it, localhost.localdomain,localhost

#relayhost =

mynetworks = 127.0.0.0/8 192.168.100.0/24 xx.xx.211.70/32

#mailbox_command =

mailbox_size_limit = 0

recipient_delimiter = +

inet_interfaces = all

inet_protocols = all

mailbox_command = /usr/lib/dovecot/deliver

compatibility_level = 2

mail_spool_directory = /var/mail/

master.cf

submission inet n       -       y       -       -       smtpd

  -o syslog_name=postfix/submission

  -o smtpd_tls_security_level=may

  -o smtpd_sasl_auth_enable=yes

  -o smtpd_relay_restrictions=permit_sasl_authenticated,reject

  -o milter_macro_daemon_name=ORIGINATING

dovecot10-auth.conf

disable_plaintext_auth = no

auth_mechanisms = plain login

You need to configure SSL/TLS. These are the options from my coniguration:

ssl_cert = </etc/dovecot/dovecot.pem

ssl_key = </etc/dovecot/private/dovecot.pem

ssl_cipher_list = HIGH:!3DES:!EXP:!aNULL:!eNULL

ssl_dh_parameters_length = 2048

ssl_prefer_server_ciphers = yes

ssl_protocols = !SSLv3,!SSLv2