[exim] Re: Recipient verification and user .forward files

2024-05-16 Thread Jeremy Harris via Exim-users
On 16/05/2024 22:32, Ian Z via Exim-users wrote: But my question is about verification, and in particular about the situation where a RCPT stage ACL will have verify = recipient. The filter can't be evaluated at that stage. Verification consists of running the routing process; the same router c

[exim] Re: Recipient verification and user .forward files

2024-05-16 Thread Ian Z via Exim-users
On Thu, May 16, 2024 at 10:16:42PM GMT, Jeremy Harris via Exim-users wrote: > > But what about forwarding resulting from rules in user .forward > > files in either exim filter or sieve format? > It will be a redirect router acessing those files or filters. I understand that a redirect router wil

[exim] Re: Recipient verification and user .forward files

2024-05-16 Thread Jeremy Harris via Exim-users
On 16/05/2024 22:02, Ian Z via Exim-users wrote: But what about forwarding resulting from rules in user .forward files in either exim filter or sieve format? It will be a redirect router acessing those files or filters. -- Cheers, Jeremy -- ## subscription configuration (requires account):

[exim] Recipient verification and user .forward files

2024-05-16 Thread Ian Z via Exim-users
The thread about adding forwarding headers makes me think about how verification is done in the context of forwarding. I'm looking at section 44.25 of the spec where it talks about "generated child addresses" and how it is decided if these are also recursively verified. It doesn't say but it sounds

[exim] Re: MySQL connection with SSL

2024-05-16 Thread Jeremy Harris via Exim-users
On 16/05/2024 21:28, Gandalf Corvotempesta via Exim-users wrote: # strace exim -be 2>&1 | grep my.cnf ${lookup mysql{SELECT password AS password}} access("/etc/my.cnf", R_OK) = -1 ENOENT (No such file or directory) access("/etc/mysql/my.cnf", R_OK) = 0 openat(AT_FDCWD, "/etc/my

[exim] Re: MySQL connection with SSL

2024-05-16 Thread Gandalf Corvotempesta via Exim-users
# strace exim -be 2>&1 | grep my.cnf ${lookup mysql{SELECT password AS password}} access("/etc/my.cnf", R_OK) = -1 ENOENT (No such file or directory) access("/etc/mysql/my.cnf", R_OK) = 0 openat(AT_FDCWD, "/etc/mysql/my.cnf", O_RDONLY) = 3 access("/etc/mysql/conf.d//my.cnf", R_OK

[exim] Re: MySQL connection with SSL

2024-05-16 Thread Gandalf Corvotempesta via Exim-users
Il giorno gio 16 mag 2024 alle ore 22:21 Jeremy Harris ha scritto: > If my.cnf is beaing read, but does not contain the actual conn spec > you want used, then there's something wrong with your "include" setup. > > That configuration can't get read by magic. The config is read, and it's the standa

[exim] Re: MySQL connection with SSL

2024-05-16 Thread Jeremy Harris via Exim-users
On 16/05/2024 21:12, Gandalf Corvotempesta wrote: Not read because that file is included from my.cnf and my.cnf is read. If my.cnf is beaing read, but does not contain the actual conn spec you want used, then there's something wrong with your "include" setup. That configuration can't get read

[exim] Re: MySQL connection with SSL

2024-05-16 Thread Gandalf Corvotempesta via Exim-users
Il giorno gio 16 mag 2024 alle ore 16:52 Jeremy Harris via Exim-users ha scritto: > Run a test using "exim -be" of a mysql expansion, under strace. > Is that file accessed? Not read because that file is included from my.cnf and my.cnf is read. But seems that the [exim] node is ignored (or the ss

[exim] Re: Blowfish auth

2024-05-16 Thread Gandalf Corvotempesta via Exim-users
Il giorno gio 16 mag 2024 alle ore 19:32 Jeremy Harris via Exim-users ha scritto: > Calling a ${perl } expansion in an authenticator's server_condition option > (thanks, Kai!) sounds like the best bet. Looks like you need > both Crypt::Blocwfish and Crypt::CBC though. Is what' i'm trying but see

[exim] Re: Blowfish auth

2024-05-16 Thread Jeremy Harris via Exim-users
On 16/05/2024 18:03, Andreas Metzler via Exim-users wrote: On 2024-05-16 Slavko via Exim-users wrote: [...] Anyway, would be great, if exim can use system's crypto library, to support all system's password hash formats. crypteq should already do that. Unfortunately it does not. There is sp

[exim] Re: Blowfish auth

2024-05-16 Thread Andreas Metzler via Exim-users
On 2024-05-16 Slavko via Exim-users wrote: [...] > Anyway, would be great, if exim can use system's crypto library, > to support all system's password hash formats. crypteq should already do that. cu Andreas -- ## subscription configuration (requires account): ## https://lists.exim.org/mailm

[exim] Re: MySQL connection with SSL

2024-05-16 Thread Jeremy Harris via Exim-users
On 16/05/2024 15:41, Gandalf Corvotempesta via Exim-users wrote: hide mysql_servers = 10.23.105.2[exim]/mail/username/dsHg*Qw!eNt6n%nH # cat /etc/mysql/mariadb.conf.d/99-exim.cnf [exim] ssl-mode=REQUIRED Run a test using "exim -be" of a mysql expansion, under strace. Is that file accessed?

[exim] Re: MySQL connection with SSL

2024-05-16 Thread Gandalf Corvotempesta via Exim-users
Il giorno gio 16 mag 2024 alle ore 15:39 Gandalf Corvotempesta ha scritto: > EXACTLY THAT ! > thank you .. but it doesnt' work hide mysql_servers = 10.23.105.2[exim]/mail/username/dsHg*Qw!eNt6n%nH # cat /etc/mysql/mariadb.conf.d/99-exim.cnf [exim] ssl-mode=REQUIRED (ssl-mode default's

[exim] Re: MySQL connection with SSL

2024-05-16 Thread Gandalf Corvotempesta via Exim-users
Il giorno gio 16 mag 2024 alle ore 13:01 Jeremy Harris via Exim-users ha scritto: > Use a Mysql option file giving the required connection specifications. > > See > https://exim.org/exim-html-current/doc/html/spec_html/ch-file_and_database_lookups.html#SECTsql > on "option group name". EXACTLY

[exim] Re: Blowfish auth

2024-05-16 Thread Gandalf Corvotempesta via Exim-users
Il giorno gio 16 mag 2024 alle ore 12:59 Kai Bojens via Exim-users ha scritto: > Everything is possible with Exim+Perl: > > https://www.exim.org/exim-html-current/doc/html/spec_html/ch-embedded_perl.html Do you have an example how to use perl for smtp auth ? I've never used perl in my Exim config

[exim] Re: Blowfish auth

2024-05-16 Thread Gandalf Corvotempesta via Exim-users
Il giorno gio 16 mag 2024 alle ore 14:32 Mike Tubby G8TIC via Exim-users ha scritto: > > As Kai says... everything is possible with Exim+PERL. > > I store user authentication details in salted SHA256 in a MySQL backend > and have Exim call a PERL shim that performs a web-services call to > localho

[exim] Re: Blowfish auth

2024-05-16 Thread Gandalf Corvotempesta via Exim-users
Il giorno gio 16 mag 2024 alle ore 14:39 Odhiambo Washington ha scritto: > I think you could do proxy authentication with a local instance of Dovecot > running on your Exim server. > https://fuerstnet.de/post/2021-07-30-proxy-imap-pop-smtp-using-dovecot-and-postfix/ I prefere to not add additio

[exim] Re: Blowfish auth

2024-05-16 Thread Slavko via Exim-users
Dňa 16. mája 2024 12:39:02 UTC používateľ Odhiambo Washington via Exim-users napísal: > I think you could do proxy authentication with a local instance of Dovecot >running on your Exim server. >https://fuerstnet.de/post/2021-07-30-proxy-imap-pop-smtp-using-dovecot-and-postfix/ Or do UDS -> soca

[exim] Re: Blowfish auth

2024-05-16 Thread Jan Ingvoldstad via Exim-users
On Thu, May 16, 2024 at 2:40 PM Odhiambo Washington via Exim-users < exim-users@lists.exim.org> wrote: > > > I think you could do proxy authentication with a local instance of Dovecot > running on your Exim server. > > https://fuerstnet.de/post/2021-07-30-proxy-imap-pop-smtp-using-dovecot-and-pos

[exim] Re: Blowfish auth

2024-05-16 Thread Odhiambo Washington via Exim-users
On Thu, May 16, 2024 at 12:33 PM Gandalf Corvotempesta via Exim-users < exim-users@lists.exim.org> wrote: > Hi guys > is possible to use blowfish password scheme in exim? > I have some users stored on a DB with a blowfish crypted password, > used by Dovecot > The dovecot server is on a different s

[exim] Re: Blowfish auth

2024-05-16 Thread Mike Tubby G8TIC via Exim-users
As Kai says... everything is possible with Exim+PERL. I store user authentication details in salted SHA256 in a MySQL backend and have Exim call a PERL shim that performs a web-services call to localhost:8080 where Nginx runs my authenticator (written in PHP).  The authenticator receives a POS

[exim] Re: MySQL connection with SSL

2024-05-16 Thread Jeremy Harris via Exim-users
On 16/05/2024 11:11, Gandalf Corvotempesta via Exim-users wrote: another question: a new mysql server i've created has SSL required for all connections. How can I setup exim to use an SSL connection to mysql server ? Use a Mysql option file giving the required connection specifications. See h

[exim] Re: Blowfish auth

2024-05-16 Thread Kai Bojens via Exim-users
Am 16.05.24 um 11:30 schrieb Gandalf Corvotempesta via Exim-users: is possible to use blowfish password scheme in exim? Everything is possible with Exim+Perl: https://www.exim.org/exim-html-current/doc/html/spec_html/ch-embedded_perl.html -- ## subscription configuration (requires account):

[exim] Re: Blowfish auth

2024-05-16 Thread Gandalf Corvotempesta via Exim-users
Il giorno gio 16 mag 2024 alle ore 12:36 Andrew C Aitchison ha scritto: > Is PAM authentication a sensible option in your case ? It could be... as long i'm able to autheticate to users stored on mysql -- ## subscription configuration (requires account): ## https://lists.exim.org/mailman3/post

[exim] Re: Blowfish auth

2024-05-16 Thread Andrew C Aitchison via Exim-users
On Thu, 16 May 2024, Gandalf Corvotempesta via Exim-users wrote: Hi guys is possible to use blowfish password scheme in exim? I have some users stored on a DB with a blowfish crypted password, used by Dovecot The dovecot server is on a different server than the exim one so i can't use sockets an

[exim] MySQL connection with SSL

2024-05-16 Thread Gandalf Corvotempesta via Exim-users
Hi all another question: a new mysql server i've created has SSL required for all connections. How can I setup exim to use an SSL connection to mysql server ? (no, using external tunnels is not a solution, it would add a SPOF and an additional layer to maintain). Is SSL supported by exim ? -- #

[exim] Blowfish auth

2024-05-16 Thread Gandalf Corvotempesta via Exim-users
Hi guys is possible to use blowfish password scheme in exim? I have some users stored on a DB with a blowfish crypted password, used by Dovecot The dovecot server is on a different server than the exim one so i can't use sockets and native dovecot auth in exim (AFAIK, is not possible to use a remov