auth-deny : from file to LDAP

2015-01-08 Thread hummel
Hello Timo, I want to deny access to some users. For now I'm doing it using 2 passdb's and listing users in a text file. !include auth-deny.conf.ext -> passwd-file driver !include auth-ldap.conf.ext -> ldap driver I want to do the same using only LDAP. I'm not quite sure how to do it : a) shou

Re: auth-deny : from file to LDAP

2015-01-08 Thread Thomas HUMMEL
On Thu, Jan 08, 2015 at 02:48:47PM +0100, hum...@pasteur.fr wrote: > Hello Timo, > a) should I > > . change the driver of the first passdb from passwd-file to ldap > . for user to be rejected, add an LDAP attribute named "foo" with a value of > "yes" and map it with something like this : > >

replication hangs

2015-01-08 Thread Laszlo Toth
Hi, I have 2 Dovecot servers (2.2.10) which are replicating each other. Replication works fine except for one user. [root@dovecot2 ~]# doveadm -D sync -u username dovecot1 doveadm(root): Debug: Loading modules from directory: /usr/lib64/dovecot doveadm(root): Debug: Module loaded: /usr/lib64/

Dovecot replication - notify not working

2015-01-08 Thread Jonas Plitt
Dear Dovecot-Admins, I've set up a pair of Dovecot Servers, please find config of server one attached. They are configured to replicate changes over a tcp connection using port 12345, set up as described in http://wiki2.dovecot.org/Replication article page. Adding the user postboxes to replicatio

dovecot on wheezy, best ssl configuration ?

2015-01-08 Thread ml
Hi all, when hardening dovecot against the POODLE vulnerability, we followed the advise to disable SSL2 and SSL3 but this is giving problems with some email clients (claws-mail). ssl_protocols = !SSLv2 !SSLv3 results in the following error: dovecot: pop3-login: Disconnected (no auth attempts in

Re: dovecot on wheezy, best ssl configuration ?

2015-01-08 Thread Charles Marcus
doveconf -n output? On 1/9/2015 2:07 AM, m...@ruggedinbox.com wrote: > Hi all, when hardening dovecot against the POODLE vulnerability, > we followed the advise to disable SSL2 and SSL3 > but this is giving problems with some email clients (claws-mail). > > ssl_protocols = !SSLv2 !SSLv3 > > resul

Re: dovecot on wheezy, best ssl configuration ?

2015-01-08 Thread ml
Hi thanks for your help, follows the doveconf -n output: # 2.1.7: /etc/dovecot/dovecot.conf # OS: Linux 2.6.32-042stab094.7 x86_64 Debian 7.7 simfs auth_mechanisms = plain login auth_verbose = yes debug_log_path = /var/log/dovecot/debug.log default_client_limit = 8192 default_process_limit = 204

Re: dovecot on wheezy, best ssl configuration ?

2015-01-08 Thread Philipp Resch
Am 09.01.2015 um 08:07 schrieb m...@ruggedinbox.com: > Hi all, when hardening dovecot against the POODLE vulnerability, > we followed the advise to disable SSL2 and SSL3 > but this is giving problems with some email clients (claws-mail). > > ssl_protocols = !SSLv2 !SSLv3 > > results in the follow

Re: dovecot on wheezy, best ssl configuration ?

2015-01-08 Thread ml
Hi thanks for your help! Trying to set your same parameters, when restarting dovecot, gives the error: doveconf: Fatal: Error in configuration file /etc/dovecot/dovecot.conf line 136: Unknown setting: ssl_prefer_server_ciphers doveconf: Error: managesieve-login: dump-capability process return