Hello, in our environment RedHat Enterpise Linux 6 running cyrus-imapd-2.3.16-13.el6_6.x86_64 from time to time and for a rather short time the log shows messages of the form cyrus/imap[28810]: badlogin: www.redaktion.tu-berlin.de [130.149.7.200] PLAIN [SASL(-5): bad protocol / cancel: Got more data than we were expecting in the PLAIN plugin www.redaktion.tu-berlin.de is the only host affected and this is the host running the horde (5.1.3) webmailer. The user gets an authentication error in this case. What's behind this? Any pointer to investigate further or solve it? Kind regards, Frank Elsner Postmaster Team TUBerlin/tubIT <Postmaster@xxxxxxxxxxxx> Birgit Lennartz / Frank Elsner +49 30 314 26191 / +49 30 314 23897 ---- Cyrus Home Page: http://www.cyrusimap.org/ List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ To Unsubscribe: https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus