Hello, > You're trying to use "proxy authentication". That only works with some > SASL mechanisms, not all of them. Yes, I know, we use "PLAIN" which does support that. > Perhaps try the same with imtest and > observe what mechanism is used? imtest is much more verbose than sieveshell. > Thank you very much - I did not know of these tools. In the end debugging with sivtest yielded results: Since the upgrade my groupware (SOGo) did not want to talk TLS with cyrus (gnutls vs. openssl problem most likely) and so I added plain listeners on the internal mailcluster network. However: sieve login works but cyrus refuses to proxy authenticate with an ssf of 0. I ended up using perdition as sort of TLS upgrade proxy. Works fine and removes the need for a second imapd.conf that I would need to keep in sync. Thanks again, rupi ---- Cyrus Home Page: http://www.cyrusimap.org/ List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ To Unsubscribe: https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus