dovecot - Aug 2008 - SSL Certifcates

Hi anyone.

Can dovecot be configured to authenticate user using only SSL 
Certificates only and not ask for a password.

So far I've got it taking the username from the common name of the 
certificate but I like it to use the certificate in place of the password.

Is this possible and how?

--
Regards

Stephen.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3309 bytes
Desc: S/MIME Cryptographic Signature
URL:
<http://dovecot.org/pipermail/dovecot/attachments/20080807/4a513aff/attachment-0002.bin>

On Aug 7, 2008, at 2:49 PM, Stephen Feyrer wrote:
> Hi anyone.
>
> Can dovecot be configured to authenticate user using only SSL  
> Certificates only and not ask for a password.
>
> So far I've got it taking the username from the common name of the  
> certificate but I like it to use the certificate in place of the  
> password.
>
> Is this possible and how?

If you're that far, then you're already authenticating the user  
against the certificate. Or assuming you have  
ssl_require_client_cert=yes. Then just create a passdb that accepts  
any password as valid for the user (nopassword=yes extra field).

In theory there's also this EXTERNAL SASL mechanism that could be used  
to log in without user/pass, but Dovecot doesn't currrently support  
that and I'm not aware of any clients supporting it either.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: PGP.sig
Type: application/pgp-signature
Size: 194 bytes
Desc: This is a digitally signed message part
URL:
<http://dovecot.org/pipermail/dovecot/attachments/20080807/226e1d21/attachment-0002.bin>