Re: self-signed certificates - was Re: Trouble adding sasl support via dovecot

2012-03-12 Thread Viktor Dukhovni
On Mon, Mar 12, 2012 at 01:15:01PM -0700, Richard Troy wrote: > "Public Internet MX hosts without certificates signed by a "reputable" CA > must generate, and be prepared to present to most clients, a self-signed > or private-CA signed certificate. The remote SMTP client will generally > not be ab

Re: self-signed certificates - was Re: Trouble adding sasl support via dovecot

2012-03-12 Thread Noel Jones
On 3/12/2012 3:15 PM, Richard Troy wrote: > > > Noel, > > this is not a big deal to me, but here's where I became concerned about > self-signed certs: > > On Mon, 12 Mar 2012, Noel Jones wrote: >> >> On 3/12/2012 12:14 PM, Richard Troy wrote: >>> The documentation found here: >>> >>> http://www

self-signed certificates - was Re: Trouble adding sasl support via dovecot

2012-03-12 Thread Richard Troy
Noel, this is not a big deal to me, but here's where I became concerned about self-signed certs: On Mon, 12 Mar 2012, Noel Jones wrote: > > On 3/12/2012 12:14 PM, Richard Troy wrote: > > The documentation found here: > > > > http://www.postfix.org/TLS_README.html > > > > claims (intimates) that

Re: FIXED! Re: Trouble adding sasl support via dovecot

2012-03-12 Thread Noel Jones
On 3/12/2012 1:46 PM, Richard Troy wrote: >> I'd be keen to know how I can, if I should, offload port 25; as I >> > indicated I'm using port 25 because I didn't stumble over any other course >> > of action. Please feel free to point me at what I _should_ be doing! >> > -smile- > >...I'd still

Re: FIXED! Re: Trouble adding sasl support via dovecot

2012-03-12 Thread Larry Stone
On Mon, 12 Mar 2012, Richard Troy wrote: ...None of the reject_* things seemed to apply, but then, well, CLEARLY at least one of them did... Sure would be nice if the log contained the reason for rejection, however, I'm not complaining; this community has provided me with GREAT software for a LO

Re: Trouble adding sasl support via dovecot

2012-03-12 Thread Noel Jones
On 3/12/2012 12:14 PM, Richard Troy wrote: > The documentation found here: > > http://www.postfix.org/TLS_README.html > > claims (intimates) that it's not possible to run a site on a self-signed > certificate, however, there's ZERO budget for a signed certificate, so > unless I can get one for te

Re: Trouble adding sasl support via dovecot

2012-03-12 Thread Richard Troy
On Mon, 12 Mar 2012, Wietse Venema wrote: > > You're supposed to share the result, not say "looks correct". As > the reporter of a problem, you are in the worst position to say > that things are correct, because if you were able to see your > mistake, then you would not be posting on this mailin

FIXED! Re: Trouble adding sasl support via dovecot

2012-03-12 Thread Richard Troy
> On Mon, 12 Mar 2012, Larry Stone wrote: > > > It's not clear if you're trying to do this on port 25 or port 587 > > (submission). > > I'd be keen to know how I can, if I should, offload port 25; as I > indicated I'm using port 25 because I didn't stumble over any other course > of action. Pleas

Re: Trouble adding sasl support via dovecot

2012-03-12 Thread Wietse Venema
Richard Troy: > > On Mon, 12 Mar 2012, Wietse Venema wrote: > > > Output from the "postconf -n" command is preferred here. If this > > output differs from what you expect, then that it a possible > > contributor to the problem. > > Yes, already checked: high fidelity, no discrepancies. You're s

Re: Trouble adding sasl support via dovecot

2012-03-12 Thread Richard Troy
On Mon, 12 Mar 2012, Larry Stone wrote: > > I haven't seen any followups with the request postconf -n output but: > Um, nobody asked for it; Wietse only said it was preferred over sharing the values individually. -smile- However, I'll take your statement as an implicit request - it's below. > It

Re: Trouble adding sasl support via dovecot

2012-03-12 Thread Richard Troy
On Mon, 12 Mar 2012, Wietse Venema wrote: > Output from the "postconf -n" command is preferred here. If this > output differs from what you expect, then that it a possible > contributor to the problem. Yes, already checked: high fidelity, no discrepancies. > TO REPORT A PROBLEM see http://www.p

Re: Trouble adding sasl support via dovecot

2012-03-12 Thread Larry Stone
On Mon, 12 Mar 2012, Richard Troy wrote: My problem statement is simply, "it should be working", but doesn't, and I don't get any announcement of "auth" when testing connections to Postfix as per directions here: http://www.postfix.org/SASL_README.html#server_test I haven't seen any followu

Re: Trouble adding sasl support via dovecot

2012-03-12 Thread Reindl Harald
Am 12.03.2012 18:44, schrieb Richard Troy: >> with dovecot 2.x the follwoing in "dovecot.conf" is > > Using 1.2.8 this is really old >> the mode/owner/group > No, not missed, however: > >> unix_listener /var/spool/postfix/private/auth { > > My code reads: > path = /var/spool/postfix/privat

Re: Trouble adding sasl support via dovecot

2012-03-12 Thread Richard Troy
Herr Harald, > please describe you problem a little shorter Ja, klein. > with dovecot 2.x the follwoing in "dovecot.conf" is Using 1.2.8. > the mode/owner/group No, not missed, however: > unix_listener /var/spool/postfix/private/auth { My code reads: path = /var/spool/postfix/private/au

Re: Trouble adding sasl support via dovecot

2012-03-12 Thread Wietse Venema
Richard Troy: > My problem statement is simply, "it should be working", but doesn't, and I > don't get any announcement of "auth" when testing connections to Postfix > as per directions here: ... > smtpd_sasl_type = dovecot > smtpd_sasl_path = private/auth > smtpd_sasl_auth_enable = yes > broken_sa

Re: Trouble adding sasl support via dovecot

2012-03-12 Thread Reindl Harald
Am 12.03.2012 18:14, schrieb Richard Troy: please describe you problem a little shorter with dovecot 2.x the follwoing in "dovecot.conf" is working like a charme, if i should guess you missed the mode/owner/group # configure backend for postfix sasl-auth service auth { unix_listener /var/s

Trouble adding sasl support via dovecot

2012-03-12 Thread Richard Troy
Hello Folks, I've been the admin of a site that uses Postfix with Dovecot on RedHat since, oh, gosh, maybe 1996? It's been a long time. I've never built it from source, though, just used the rpms (and I wonder if maybe that's my problem now). It just works, is reliable, and lets me be a very-part