similar to: DSA support for TLS?

Hi Is there known advices on how to favor PFS with dovecot? In Apache, I use the following directives, with cause all modern browsers to adopt 256 bit PFS ciphers, while keeping backward compatibility with older browsers and avoiding BEAST attack: SSLProtocol all -SSLv2 SSLHonorCipherOrder On SSLCipherSuite ECDHE at STRENGTH:ECDH at STRENGTH:DH at STRENGTH:HIGH:-SSLv3-SHA1:-TLSv10

http://dovecot.procontrol.fi/test/ I should have released 0.99.10 already I think.. There's just two annoying problems that I think should be fixed first: - PAM: If user gives a wrong password, dovecot-auth process sleeps for two seconds, blocking everyone else who are trying to authenticate at the time. So using PAM isn't very good idea at the moment. - OpenSSL problems. Are they

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 hi all, i'm using dovecot --version 1.0.alpha3 dovecot --build-options Build options: ioloop=poll openssl postgresql Passdb: checkpassword pam passwd passwd-file sql Userdb: checkpassword passdb passwd passwd-file sql static on OSX 10.4.2. i've set up for maildir: format PLAIN text AUTH, w/ "disable_plaintext_auth =

I have a windows 2003 AD domain and a server joined to that domain. Winbind is being used as an idmap. Most everything seems to work fine. Winbind gets user info correctly: [root@samba ~]# wbinfo -u TESTDOMAIN\administrator TESTDOMAIN\guest TESTDOMAIN\support_388945a0 TESTDOMAIN\krbtgt TESTDOMAIN\swhaley TESTDOMAIN\test [root@samba ~]# wbinfo -g BUILTIN\administrators BUILTIN\users

Hi, Iam trying to setup Samba version 3.2.3 on Redhat (RHEL5) server to use Active Directory for authentication. I followed the instructions from article in following website: http://technet.microsoft.com/en-au/magazine/dd228986.aspx Setup Winbind + Samba + Kerberos and it seems to work fine. I can see the users in Active Directory through winbind as well as authenticate users using NTLM

Hi , I have set up a 2-node CTDB cluster serving NFS and CIFS authenticating Windows and Linux users via Active Directory. The setup works fine, except only one server in the CTDB-cluster is able to join the AD domain at a given instance. If you manually add the other server into AD, the already connected server gets disconnected. There is no specific error message logged in /var/log/message or

On Mon, 16 Jul 2018 08:03:22 +0000 (UTC) Taner Tas <taner76 at gmail.com> wrote: > > Hi all, > > > > We have a Samba AD DC service running on Ubuntu 16.0.4 with Samba > > 4.3.11. We are planning to upgrade it to a recent version, probably > > 4.8.3. > > > > I think that I have two options: > > > > a) Package upgrade via 3rd party

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 hi, i've Dovecot 10branch head built on on OSX 10.4.7. i've also exim 4.63 configured for use with dovecot's AUTH. on local delivery via exim -> dovecot LDA, i see two errors: (1) dovecot_lda transport output: dyld: Library not loaded: /usr/local/ssl/lib/libssl.0.9.8.dylib (2) Child process of dovecot_lda transport (running

> Hi all, > > We have a Samba AD DC service running on Ubuntu 16.0.4 with Samba > 4.3.11. We are planning to upgrade it to a recent version, probably > 4.8.3. > > I think that I have two options: > > a) Package upgrade via 3rd party repositories (Louis Van Belle's repo) > by following wiki. > > b) A fresh install of 4.8.3 on another VM then join it to

I am running Samba ver 3.0.33 on Solaris 10 (sparc) as a PDC with LDAP for the backend for both samba and unix accounts. I have also set up a trust with an Windows domain- lets call it WINDOMAIN- (the PDC for the Windows domain is Win 2003 but is in mixed mode for backwards compat.) The SAMBA domain trusts the WINDOWS domain, not not vice versa. I had also tried setting up trusts with

Hi, I'm trying to join a Samba 4.9.1 Debian Strech installation (also tested with 4.8.6) to a Windows 2012 R2 Server which runs in 2008-R2 functional level. This is a production system and it is going to be first Samba DC in domain. There is currently two Windows DC's in domain. All FSMO roles hold by DC1. It seems there's something going on with Widows DC's bu I'm not able

Hello Everyone, I must extend my THANK YOU for such fantastic work!, as well as this great resource. I've tried fiddling with AD and samba 3.0 alpha23 as well as a CVS checkout dated APR-16-03. Below are the relevant(Hopefully:)) items of my config. Once I can get a tgt and initial ticket I think I'll be O.K. I was hoping someone on this list could point out a gotcha :). TIA, Jesse.

Red Hat Enterprise Linux Server release 5.2 (Tikanga) - x86_64 Samba - 3.0.28-0.el5.8 Objective: To have samba authenticate against AD and utilize the values set for the AD rfc2307 schema. Problem: Values stored in AD are not being used. The samba server has successfully joined the AD, but when I do a getent passwd | grep <user> the uid, none of the values returned match what is stored in

On 4/14/15, J. Echter <j.echter at echter-kuechen-elektro.de> wrote: > Am 14.04.2015 um 14:04 schrieb J. Echter: >> Hi, >> >> we're using thunderbird as our client, it has the functionality to >> sort spamassassin tagged mails in a folder called 'Junk'. >> >> I have this folder on my dovecot server and i'd like to use the >>

Hi, I'm using dovecot with a passdb-file . When I login using : test at testdomain.com I notice dovecot strips off the domainname and looks up everything in front of the @ in his passdb-file... So I went on to configure the following in my dovecot.conf : auth_username_format = %u@%d restarted dovecot, but he still strips of the @ and the domainname ... LOG (sorry for f* up format) :

Am 14.04.2015 um 14:04 schrieb J. Echter: > Hi, > > we're using thunderbird as our client, it has the functionality to > sort spamassassin tagged mails in a folder called 'Junk'. > > I have this folder on my dovecot server and i'd like to use the > recipient_delimiter feature to get my spam/junk mails directly to this > folder. > > what i have done

Am 14.04.2015 um 15:28 schrieb Edwardo Garcia: > Should not need to alter flags, eg: > dovecot unix - n n - - pipe > flags=DRhu user=vmail:vmail argv=/usr/libexec/dovecot/dovecot-lda > -f ${sender} -e -d ${user}@${nexthop} > > works perfectly good. Hi Edwardo, here it doesn't. If i use your settings i get this: Apr 14 15:47:34 mule

Geoffrey Scott wrote: > Geoffrey Scott wrote: >> Question: >> How can I stop users from being prompted for a password? This was when they accessed their own homes share. I found that when the user accessed other shares everything was fine. So this morning I finally realized that it had to be my home shares stanza. It *seems* that valid users = %S is not enough that it has to be

Hi, list. I'm running samba-3.5.4 + winbind on a RHEL 5 server. I'm trying to allow ssh logins to users in a particular Active Directory group in the TESTDOMAIN domain. My problem is that group membership seems to be updated when the user logs in. So, if a remove a user from the allowed group, the first login attempt is successful. This is my samba/winbind configuration: [global]

Hi, I'm trying to find out consequences of overlapped idmap settings that used with 4.3.11 DC's. I'm about to upgrade these DC's to 4.8 version. Before deploying new DCs, I want to make sure that any side effects regarding id map settings will be left behind. # ldbsearch -H /var/lib/samba/private/idmap.ldb | grep xidNumber \ | cut -d' ' -f2 | sort 0 100 3000000