Re: [Dovecot] dovecot and postfix with tls and dovecot sasl issues for smtp clients

2008-10-22 Thread Timo Sirainen
On Oct 22, 2008, at 10:19 PM, Charles Marcus wrote: Wietse said: "Postfix passes the information in the SMTP client's AUTH command. This is how I got the Dovecot extension from Timo. If someone is willing to monitor his docs for changes, then they are welcome to do so. I won't." So... did he g

Re: [Dovecot] dovecot and postfix with tls and dovecot sasl issues for smtp clients

2008-10-22 Thread Charles Marcus
On 10/22/2008 2:54 PM, Harondel J. Sibble wrote: > > On 22 Oct 2008 at 21:01, Timo Sirainen wrote: > >> A quick look shows that Exim apparently sends the valid-client-cert >> parameter. Maybe it wouldn't be too difficult to modify Postfix's >> sources either. > I see there's been some discussio

Re: [Dovecot] dovecot and postfix with tls and dovecot sasl issues for smtp clients

2008-10-22 Thread Harondel J. Sibble
On 22 Oct 2008 at 21:01, Timo Sirainen wrote: > A quick look shows that Exim apparently sends the valid-client-cert > parameter. Maybe it wouldn't be too difficult to modify Postfix's > sources either. I see there's been some discussion about this a few years ago http://www.dovecot.org/list/d

Re: [Dovecot] dovecot and postfix with tls and dovecot sasl issues for smtp clients

2008-10-22 Thread Timo Sirainen
On Wed, 2008-10-22 at 10:57 -0700, Harondel J. Sibble wrote: > > On 22 Oct 2008 at 20:37, Timo Sirainen wrote: > > > I don't think Postfix ever sends the "valid-cert" parameter that's > > required for Dovecot to treat the authentication as valid. > > Bummer, any suggested workarounds or should I

Re: [Dovecot] dovecot and postfix with tls and dovecot sasl issues for smtp clients

2008-10-22 Thread Harondel J. Sibble
On 22 Oct 2008 at 20:37, Timo Sirainen wrote: > I don't think Postfix ever sends the "valid-cert" parameter that's > required for Dovecot to treat the authentication as valid. Bummer, any suggested workarounds or should I be looking at a different MTA that is known to work with Dovecot's SASL

Re: [Dovecot] dovecot and postfix with tls and dovecot sasl issues for smtp clients

2008-10-22 Thread Timo Sirainen
On Tue, 2008-10-21 at 17:18 -0700, Harondel J. Sibble wrote: > Using the same self created CA that generates and certifies the ssl client > certs in Postfix and using Dovecot SASL, I always get client didn't send > proper ssl cert when trying to do a tls based smtp connection from either the > e

Re: [Dovecot] dovecot and postfix with tls and dovecot sasl issues for smtp clients

2008-10-22 Thread Eduardo M KALINOWSKI
Harondel J. Sibble wrote: > dovecot -n > > # 1.1.4: /etc/dovecot.conf > protocols: imaps pop3s > ssl_listen(default): *:993 > ssl_listen(imap): *:993 > ssl_listen(pop3): *:995 > ssl_ca_file: /etc/openvpn/easy-rsa/keys/combined-ca-and-crl.crt > ssl_cert_file: /etc/pki/dovecot/certs/dovecot-chained.c

[Dovecot] dovecot and postfix with tls and dovecot sasl issues for smtp clients

2008-10-21 Thread Harondel J. Sibble
This issue is peripherally related to the following thread Re: [Dovecot] client certs with godaddy ssl cert This is running on CentOS 5.2 with latest Atrpms for Dovecot as of this weekend. # rpm -qa | grep dovecot dovecot-sieve-1.1.5-8.el5 dovecot-1.1.4-0_81.el5 With assistance from Rainer Fre