> On Jan 8, 2019, at 5:17 PM, Bastian Schmidt <[hidden email]> wrote: > > I have an email client (K-9 on Android), which, when using TLS client > certificates insists on sending an auth external. However, postfix/SASL > does not advertise external auth, which causes the client to not being > able to use client certificates with postfix. > > As I see it, postfix is missing the external mechanism as specified in RFC > 2222 (SASL) completely. Thus, I have implemented this feature (for TLS CA > client certs) and I am currently successfully running this on a local > installation using cyrus sasl. > > I would be willing to provide a patch and would really like to see this > integrated in future versions of postfix.
I'm quite excited about seeing this feature added to Postfix. I have a similar configuration, and have been putting off making the proposed changes myself. I had previously posted on the Dovecot mailing list [1] to no avail. I'm happy to know that there are at least two of us out there who would benefit from this feature! Thanks, Matt [1] https://www.dovecot.org/list/dovecot/2017-February/106884.html -- Sent from: http://postfix.1071664.n5.nabble.com/Postfix-Users-f2.html