dovecot - Oct 2009 - Two passwords: One for Dovecot IMAP and One for Dovecot SASL? Is it possible?

Greetings,

Can Dovecot can handle separate authentication for receiving mail  
(IMAPS) and sending mail (SMTPS)?  In the past, we used Dovecot IMAP  
for the receiving part and Cyrus SASL for the sending part.  This  
allowed us to use two passwords with mail.  Cyrus has grown too old  
and isn't useful anymore.  Can Dovecot give us this functionality:   
two passwords, one for IMAP authentication and one for SASL  
authentication?

If so, could you point me in the right direction to get this working?

Thanks in advance,

A

On Qua, 14 Out 2009, Art Gray - Razorpoint wrote:
> Can Dovecot can handle separate authentication for receiving mail  
> (IMAPS) and sending mail (SMTPS)?  In the past, we used Dovecot IMAP  
> for the receiving part and Cyrus SASL for the sending part.  This  
> allowed us to use two passwords with mail.  Cyrus has grown too old  
> and isn't useful anymore.  Can Dovecot give us this functionality:   
> two passwords, one for IMAP authentication and one for SASL  
> authentication?
Dovecot is only an IMAP server, it does not support SMTP and is not  
used while sending e-mail.

Some SMTP servers can use Dovecot to authenticate users, but if you do  
not want that, just configure your SMTP accordingly.


-- 
Not for human consumption.

Eduardo M KALINOWSKI
eduardo at kalinowski.com.br

On Wed, Oct 14, 2009 at 03:18:12PM -0400, Art Gray - Razorpoint
wrote:
> Greetings,
> 
> Can Dovecot can handle separate authentication for receiving mail (IMAPS)
> and sending mail (SMTPS)?  In the past, we used Dovecot IMAP for the
> receiving part and Cyrus SASL for the sending part.  This allowed us to
> use two passwords with mail.  Cyrus has grown too old and isn't useful
> anymore.  Can Dovecot give us this functionality: two passwords, one for
> IMAP authentication and one for SASL authentication?
> 
> If so, could you point me in the right direction to get this working?

If your authentication method supports multiple passwords (eg. LDAP with
authentication binding) AND you allow your users to use either password
for either server (ie. you're just providing backwards compatibility, not
enforcing to use different passwords), it could work just like that.

Otherwise I think you'd have to setup separate dovecot instances.


	Geert


-- 
Geert Hendrickx  -=-  ghen at telenet.be  -=-  PGP: 0xC4BB9E9F
This e-mail was composed using 100% recycled spam messages!

* Art Gray - Razorpoint [2009-10-14 15:18]:
>Greetings,
>
>Can Dovecot can handle separate authentication for receiving mail 
>(IMAPS) and sending mail (SMTPS)?  In the past, we used Dovecot IMAP 
>for the receiving part and Cyrus SASL for the sending part.  This 
>allowed us to use two passwords with mail.  Cyrus has grown too old 
>and isn't useful anymore.  Can Dovecot give us this functionality:  
>two passwords, one for IMAP authentication and one for SASL 
>authentication?
>
>If so, could you point me in the right direction to get this working?
What kind of server software do you use to send out messages? Do you
want to use dovecot as the authentication server with that sending
server? Do you want to allow your users to use both passwords for IMAP
and SMTP or the passwords shall be tied to the particular service?

Please take a look at following pages

     http://wiki.dovecot.org/Authentication/MultipleDatabases
     http://wiki.dovecot.org/AuthDatabase/SQL
     http://wiki.dovecot.org/Variables

Dovecot can use multiple sources for authentication. In your case you
could just have one database for IMAP and one for SMTP. You will see
that there is a variable named %s. It will expand itself to the service
(imap, pop3, smtp).

Good luck.

-- 
     -- Kirill Miazine <km at krot.org>