Re: client certificate handling with TLS + sasl

2010-02-25 Thread Victor Duchovni
On Thu, Feb 25, 2010 at 01:42:27PM -0500, zhong ming wu wrote: > > Postfix does not implement the "external" SASL mechanism for > > authenticating users via TLS client certs. > > So it sends user/password to dovecot socket and get yes/no answer? Postfix copies SASL protocol requests between the

Re: client certificate handling with TLS + sasl

2010-02-25 Thread zhong ming wu
On Thu, Feb 25, 2010 at 12:48 AM, Victor Duchovni wrote: > Postfix does not implement the "external" SASL mechanism for > authenticating users via TLS client certs. So it sends user/password to dovecot socket and get yes/no answer? > > TLS is hop-by-hop, not end to end. With TLS the client auth

Re: client certificate handling with TLS + sasl

2010-02-24 Thread Victor Duchovni
On Wed, Feb 24, 2010 at 11:46:10PM -0500, zhong ming wu wrote: > With dovecot I can have my mail client send a certificate and make > dovecote use CN field of the cert as username > to authenticate. If I enable that feature in dovecot, postfix > authentication does not work despite the fact that