IMAP auth failure for iCloud — AUTHENTICATE PLAIN rejected though LOGIN works #24

New Issue

MrUnknownDE · 2026-04-05T16:16:11+02:00

MrUnknownDE commented

2026-04-05 16:16:11 +02:00

Originally created by @frederiknolte on 2/27/2026

I’m attempting to register an iCloud account (you@icloud.com) and open-archiver (ImapFlow) fails with:

NO [AUTHENTICATIONFAILED] Authentication Failed
executedCommand: "1 AUTHENTICATE PLAIN"

However, a manual test succeeds:

openssl s_client -connect imap.mail.me.com:993 -crlf
--> after banner:
A1 LOGIN "you@icloud.com" "APP-SPECIFIC-PASSWORD"
A1 OK

That indicates the server accepts LOGIN but rejects the AUTHENTICATE PLAIN exchange ImapFlow sends (or rejects a non-empty authzid). Please:

Add an option to force LOGIN (ImapFlow client option loginMethod: 'LOGIN') or make the SASL PLAIN exchange send an empty authzid.
Or, if you already have such an option, explain how to set it via the web UI.

Thanks.

*Originally created by @frederiknolte on 2/27/2026* I’m attempting to register an iCloud account (you@icloud.com) and open-archiver (ImapFlow) fails with: ``` NO [AUTHENTICATIONFAILED] Authentication Failed executedCommand: "1 AUTHENTICATE PLAIN" ``` However, a manual test succeeds: ``` openssl s_client -connect imap.mail.me.com:993 -crlf --> after banner: A1 LOGIN "you@icloud.com" "APP-SPECIFIC-PASSWORD" A1 OK ``` That indicates the server accepts LOGIN but rejects the AUTHENTICATE PLAIN exchange ImapFlow sends (or rejects a non-empty authzid). Please: 1. Add an option to force LOGIN (ImapFlow client option loginMethod: 'LOGIN') or make the SASL PLAIN exchange send an empty authzid. 2. Or, if you already have such an option, explain how to set it via the web UI. Thanks.

MrUnknownDE closed this issue

2026-04-05 16:16:11 +02:00

MrUnknownDE added the bug bug bug bug bug bug bug bug labels 2026-04-05 16:16:12 +02:00

MrUnknownDE referenced this issue

2026-04-05 16:17:21 +02:00

Migrate to DB users, implement IAM & add PST/EML importers #307

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: github/OpenArchiver#24