Re: No SMTP AUTH when TLS enabled

2010-01-03 Thread Patrick Ben Koetter
* froinds J : > What should I use keylength and digest when creating both the CA cert and > the smtpd cert? That's an invitation for long discussions... In Germany, the federal institution "BSI" (administration for security), recommends 4096 Bit for CA certificates and > 2048 for server certifica

Re: No SMTP AUTH when TLS enabled

2010-01-02 Thread froinds J
What should I use keylength and digest when creating both the CA cert and the smtpd cert? Should I leave the passwords blank? Thanks On Sat, Jan 2, 2010 at 6:04 PM, Patrick Ben Koetter wrote: > * froinds J : > > Ah you so were right. > > I set up postfix to use the certs that cyrus-imapd creates

Re: No SMTP AUTH when TLS enabled

2010-01-02 Thread Patrick Ben Koetter
* froinds J : > Ah you so were right. > I set up postfix to use the certs that cyrus-imapd creates by default and > everything works now. > What's weird is that cyrus-imapd was using the same certs postfix was using > and it didn't complain. I was able to receive email when I turned off TSL > for p

Re: No SMTP AUTH when TLS enabled

2010-01-02 Thread froinds J
Ah you so were right. I set up postfix to use the certs that cyrus-imapd creates by default and everything works now. What's weird is that cyrus-imapd was using the same certs postfix was using and it didn't complain. I was able to receive email when I turned off TSL for postfix. So I guess the pro

Re: No SMTP AUTH when TLS enabled

2010-01-02 Thread Patrick Ben Koetter
* froinds J : > Oops! I forgot to check SSL. > My client now seems to start a TLS session and still nothing. Here is the > log with the SSL error. TLS log. My favourite waste of time. Everything is layed out so clear... :/ There are two lines in your log that make me think (think, not know!) that

Re: No SMTP AUTH when TLS enabled

2010-01-02 Thread froinds J
Oops! I forgot to check SSL. My client now seems to start a TLS session and still nothing. Here is the log with the SSL error. Thanks. Jan 2 13:02:11 fedora postfix/smtpd[20531]: connection established Jan 2 13:02:11 fedora postfix/smtpd[20531]: master_notify: status 0 Jan 2 13:02:11 fedora p

Re: No SMTP AUTH when TLS enabled

2010-01-02 Thread Patrick Ben Koetter
* froinds J : > I made the changes you suggested and still can't authenticate. > Here is the log from maillog. Thanks You client does not start a TLS session. p...@rick > > Jan 2 10:14:41 fedora postfix/smtpd[17435]: connection established > > Jan 2 10:14:41 fedora postfix/smtpd[17435]: ma

Re: No SMTP AUTH when TLS enabled

2010-01-02 Thread froinds J
I made the changes you suggested and still can't authenticate. Here is the log from maillog. Thanks Jan 2 10:14:41 fedora postfix/smtpd[17435]: connection established Jan 2 10:14:41 fedora postfix/smtpd[17435]: master_notify: status 0 Jan 2 10:14:41 fedora postfix/smtpd[17435]: name_mask: res

Re: No SMTP AUTH when TLS enabled

2010-01-02 Thread Patrick Ben Koetter
* froinds J : > My problem is: if I allow TLS I cannot authenticate. Without TLS everything > works. Here is the output from saslfinger. > Thanks for your help. > > saslfinger - postfix Cyrus sasl configuration Sat Jan 2 02:12:49 EST 2010 > version: 1.0.2 > mode: server-side SMTP AUTH > > -

Re: No SMTP AUTH when TLS enabled

2010-01-02 Thread froinds J
On Sat, Jan 2, 2010 at 2:26 AM, Patrick Ben Koetter wrote: > * froinds J : > > Hello, > > I'm having a problem with postfix in F12. > > I used to have my email server setup with F10. My setup had TLS > > enabled (self signed certs) with SASL using pwcheck_method=auxprop and > > CRAM-MD5 DIGEST-MD

Re: No SMTP AUTH when TLS enabled

2010-01-01 Thread Patrick Ben Koetter
* froinds J : > Hello, > I'm having a problem with postfix in F12. > I used to have my email server setup with F10. My setup had TLS > enabled (self signed certs) with SASL using pwcheck_method=auxprop and > CRAM-MD5 DIGEST-MD5. I had virtual accounts. > Everything worked great until I installed F1

No SMTP AUTH when TLS enabled

2010-01-01 Thread froinds J
Hello, I'm having a problem with postfix in F12. I used to have my email server setup with F10. My setup had TLS enabled (self signed certs) with SASL using pwcheck_method=auxprop and CRAM-MD5 DIGEST-MD5. I had virtual accounts. Everything worked great until I installed F12. It was a clean install.