search for: lusan

You've made this more difficult to understand, even :-) So the answer is: Set the following in 10-auth.conf 1. disable_plaintext_auth = no 2. auth_mechanisms = plain And yes, the encrypted passwords are stored in MySQL. On Thu, 20 Dec 2018 at 13:36, Nikolai Lusan <nikolai at lusan.id.au> wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA512 > > Greetings > On Thu, 2018-12-20 at 12:20 +0300, Odhiambo Washington wrote: > > I am using SHA512-CRYPT scheme for passwords. > > Yeah, there is a reason MD5 has been preferred to...

...ains and users. I have attached my current /etc/dovecot/conf.d/10-stats.conf so people can see what I have attempted so far. Based on that file the output I get is: # doveadm stats dump metric_name field count sum min max avg median stddev %95 imap_login_attempt_lusan.id.au duration 0 0 0 0 0.00 0 0.00 0 imap_login_lusan.id.au_failed duration 0 0 0 0 0.00 0 0.00 0 imap_login_lusan.id.au_success duration 0 0 0 0 0.00 0 0.00 0...

...; <div> You cannot use hashed passwords with digest-md5 mechanism. </div> <div> <br> </div> <div> Aki </div> <blockquote type="cite"> <div></div> <div> On Thu, 20 Dec 2018 at 13:36, Nikolai Lusan < <a href="mailto:nikolai@lusan.id.au">nikolai@lusan.id.au</a>> wrote: </div> <div> <br> </div> <blockquote type="cite"> <div> -----BEGIN PGP SIGNED MESSAGE----- </div> <div>...

...> than "Re: Contents of dovecot digest..." > > > Today's Topics: > > 1. Re: Panic: data stack: Out of memory when allocating bytes > (Josef 'Jeff' Sipek) > 2. Re: 777 permissions on mailbox, subfolders subfiles new > emails (Nikolai Lusan) > 3. Re: problem with lda (Stephan Bosch) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Wed, 24 Jan 2018 17:39:36 -0500 > From: Josef 'Jeff' Sipek <jeff.sipek at dovecot.fi> > To: Thomas Robers <ro...

I am using SHA512-CRYPT scheme for passwords. In my dovecot-sql.conf.ext, I have: default_pass_scheme = CRYPT In 10-auth.conf, I have: auth_mechanisms = plain login digest-md5 M$ Outlook is refusing to authenticate, with error: Requested DIGEST-MD5 scheme, but we have only CRYPT What an I missing?? I hate it that this has taken me round in circles :-) -- Best regards, Odhiambo WASHINGTON,

...word Nov 20 07:24:20 kiliya dovecot: auth: ldap(nikolai at test.maliuta.org,<remote_ip>,<1kW2C65BFI2WZbl8>): unknown user (given password: <correct_password>) Nov 20 07:24:22 kiliya dovecot: auth: Debug: client passdb out: FAIL#0111#011user=nikolai at test.maliuta.org -- Nikolai Lusan <nikolai at lusan.id.au> -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 833 bytes Desc: This is a digitally signed message part URL: <http://dovecot.org/pipermail/dovecot/attachments/20161120/c53870ff/...

I'm planning to upgrade my asterisk 1.4.4 to 1.4.6. usually for asterisk upgrade i delete modules directory and include, then compile the new version. Since i have couple of G729 Licenses on this server installed, would i need to call Digium to reactivate these Licenses? Is there any better and faster way of upgrade asterisk? Possibly without losing G729 License? Thanks!

...one that comes with the distribution? ssl_cert = < /etc/pki/dovecot/certs/dovecot.pem ssl_key = < /etc/pki/dovecot/private/dovecot.pem As I stated before, I am attempting to achieve the simplest installation possible which will be later tightened. Thanks! On 11/9/2020 11:52 PM, Nikolai Lusan wrote: > Greetings, > > On Mon, 2020-11-09 at 23:42 -0600, Raymond Herrera wrote: > > For several years I have been running the following in a Linux > > server. > > > Dovecot Version: 2.0.9 > > > *IMAP:* > > Connection Security: SSL/TLS > > Port: 9...

On 10/11/20 1:52 pm, Nikolai Lusan wrote: > Greetings, > > On Mon, 2020-11-09 at 23:42 -0600, Raymond Herrera wrote: > > For several years I have been running the following in a Linux > > server. > > > Dovecot Version: 2.0.9 > > > *IMAP:* > > Connection Security: SSL/TLS > > Port: 9...

...rab an IANA number for you, or your organisation, so that you don't trample on any other schema out there. I have a custom schema that I use for postfix/dovecot - it's simple, quick, and efficient without the DB overhead ... and I get the multi-master replication in OpenLDAP. - -- Nikolai Lusan Email: nikolai at lusan.id.au -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEVfd4GW6z4nsBxdLo4ZaDRV2VL6QFAmP2/+4ACgkQ4ZaDRV2V L6RRHxAAnSpKmYdg2+51CuSgxdQ8fHY65CRwflqQQzIEGIpApmgzh4fl5YkB8+qw utLe5ao6Qd8dIbWmENsLVEZIHeHr9fsmENXXhgF1DIcHwSH12rZHC5pt0zjKWh3j +dmmQ8/tlg/A3HbeEpMuFiVX02Zk3pddMW3D/ja7aAW...

Hello all: For several years I have been running the following in a Linux server. Dovecot Version: 2.0.9 *IMAP:* Connection Security: SSL/TLS Port: 993 Authentication Method: Normal Password *SMTP:* Connection Security: STARTTLS Port: 587 Authentication Method: Normal Password The E-mail client is Thunderbird on Windows. I am preparing a new server, with Dovecot 2.2.36 and would like to know

Nikolai Lusan <nikolai at lusan.id.au> writes: >> Just went through this one recently using CentOS with SendMail, Procmail >> and IMAP conversion from mbox to Maildir - I needed to make sure I could >> run both formats while I migrated users one-by-one. > > When I have migrated sol...

What I have to change, so dovecot on new email create, sets chmod 777 on Mailbox and all subfolders subfiles all new emails/sent emails etc. -------------- next part -------------- An HTML attachment was scrubbed... URL: <https://dovecot.org/pipermail/dovecot/attachments/20180125/276846fa/attachment.html>

...m to only use the plain method of auth (I would also be ensuring that you have TLS enforced in some way for this) then removal of the digest method is probably the best fix. If the plain and/or login methods are failing check your sql config includes the passdb and userdb sections. - -- Nikolai Lusan <nikolai at lusan.id.au> -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEVfd4GW6z4nsBxdLo4ZaDRV2VL6QFAlwbcFwACgkQ4ZaDRV2V L6T7IxAAjTQQfVngYU92oNfORwIeL6e9YZtvlLfo7V6d2PSgnzJ2Tdzyo2YA4AGy eApc9SoJra8IVzanv+s6yl0BJ/EXez/ugdZ5DEUzYTf7b1AVMnUYOKkCi4HeOzzx zttLF/Hd5ovwDRB1StNa5c1dsrN5lfwZy/cFwK+zOW...

...non-internal services, public mail servers, public web servers). Personally I use letsencrypt wildcards with domain based authentication for automatic certificate renewal (although distributing the certificates across servers can be an "interesting" problem to deal with). - -- Nikolai Lusan <nikolai at lusan.id.au> -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEVfd4GW6z4nsBxdLo4ZaDRV2VL6QFAlyKP/gACgkQ4ZaDRV2V L6TswQ/9ERKEwSyy0aN0rS9axIB8bd5oGKBr3UhYY/rdsHaKj/c2PzbPHSoeyGFp 89ZRDChzrkwMqdDJTSzxYVA0+C4Vak0OKf3SUvHwCGdX4O2MDfPHXw5+4YDftjgn oSaW2RmKmIQvfK8qKg4n8C+xDif54/20MwZaytSG/y...

On June 2, 2019 10:36:11 AM EDT, "@lbutlr via dovecot" <dovecot at dovecot.org> wrote: > >On Jun 2, 2019, at 8:23 AM, Nikolai Lusan via dovecot ><dovecot at dovecot.org> wrote: >> I have attached my current /etc/dovecot/conf.d/10-stats.conf > >The list does not allow attachments, so a link to the file somewhere >like pastern or dropbox or whatever is needed for people to see the >file. Or simply past...

Hi Sorry for my question... I use dovecot+ldap How realy works (in dovecot-2.2.x ) lists of LDAP hosts to use ? ------ dovecot.conf ---- hosts = ldap.domain.pl:389 ldap-slave.domain.pl:389 #uris = -------- This is simpe HA ? I mean if ldap.domain.pl have problem another request go to ldap-slave.domain.pl ?

...o the initial recieving of email, so everything auth related (and adress related) is in a multi-master LDAP server on each machine. Using Dovetcot-SASL for SMTP auth too. > The E-mail client is Thunderbird on Windows. I my experience pretty much any client works with this setup. - -- Nikolai Lusan <nikolai at lusan.id.au> -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEVfd4GW6z4nsBxdLo4ZaDRV2VL6QFAl+qKq4ACgkQ4ZaDRV2V L6TjxQ/+Kp2gNY3p9GdXEc0rc3cRH1ceEpenegg2JEHCQ31TRO/gchlKV3+peVZR VK6HNukNXq+bIWNMe/tN1ow/8gEn17TFtOe4+kVKnkFfAb2RpqaXEWVGm+NSyVZG yQQizq4t1c83oZV91v3+9A8MVOcKfRQ7nBgqiK1KrK...

...c certificate, and the ssl_key line is the key used to create the sign the initial certificate request (the CRL is later signed by an issuer, in the case of the snakeoil certs this is seperate private key). There are a bunch more things worth tweaking in the ssl.conf file though :) - -- Nikolai Lusan <nikolai at lusan.id.au> -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEVfd4GW6z4nsBxdLo4ZaDRV2VL6QFAl+qSDgACgkQ4ZaDRV2V L6T50g/8C04Q4w6jwdId3+97Q+a/hRo1nqDA1Eq206c1z+Fp+Q1gE9YLMOCLkDql DxqXRFjDWgb1+TTtkr3SW1ZC2kcDAa+kKyQvBscCTPI6+FnLSiypTCP8OMZl047C fmUjGBDJyVtIuI99r3Bq4mZ4AEsEkhnktptEHicoEB...

I don't even get what the advatages are of doing this with sql. If you use local replicated ldap and use local credential caching then your master ldap can go down without issues, even the local caching handle some local slapd issues. I guess the local caching is also faster. Afaik were databases not designed for this purpose and a better fit is ldap. > > If I understand open source