similar to: system encryption question

I am now investigating encrypting our IMAP user spool files. Does anyone have experience with handling encrypted data stores using either or both of the subject methods and would care tio share their observations? Which is the preferred method (I know: it depends, but on what?)? What administrative pain does each cause? Our IMAP host is a KVM guest so spinning up a duplicate and simply

Hello all, I posted the whole disk encryption instructions in the forum that has been briefly discussed on the list. I joined the list per Ned's post on the thread. http://www.centos.org/modules/newbb/viewtopic.php?viewmode=flat&topic_id=15923&forum=42 I have a couple of questions about the process of creating a wiki. 1. How does the peer-review process work? 2. Is there a place

Hi everyone, I added a page under the HowTos for Encryption, and then added a guide for encrypting /tmp /swap and /home using cryptsetup and LUKS keys on LVM, when you already have partitions setup. http://wiki.centos.org/HowTos/EncryptTmpSwapHome Regards, Max

it's been a while since i've played with filesystem encryption so, on centos 5.4 (and other linux distros), is dm-crypt/LUKS considered to be the state of the art WRT encryption? i remember other solutions like loop-aes and others, but what's considered the gold standard these days? rday -- ======================================================================== Robert P. J. Day

Hi Chris, thanks for your answer. It is the first time I decided to encrypt my lvm. I choosed to encrypt the volume group, not every logical volume itself, because in case of doing lvm snapshots in that group they will be encrypted too? And how do I create a new encrypted volume group? Regards Tim Am 6. M?rz 2015 01:58:23 MEZ, schrieb Chris Murphy <lists at colorremedies.com>: >On

I have just come to the realization that password encryption using the crypt function in linux, ONLY USES THE FIRST 8 CHARS. I have written routines using crypt allowing 16+ chars, and find that anything past 8 is ignored. Wow. Is there a way around this that can be used in dovecot, as well as encryption routines for an email front end? (not system users). It's the integration with

I am using a FreeBSD 11-2 amd/64 system with dovecot version 2.3.4 installed. I was playing around with different encryption schemes. doveadm pw -l SHA1 SSHA512 BLF-CRYPT PLAIN HMAC-MD5 OTP SHA512 SHA RPA DES-CRYPT CRYPT SSHA MD5-CRYPT SKEY PLAIN-MD4 PLAIN-MD5 SCRAM-SHA-1 LANMAN SHA512-CRYPT CLEAR CLEARTEXT SSHA256 NTLM MD5 PBKDF2 SHA256 CRAM-MD5 PLAIN-TRUNC SHA256-CRYPT SMD5 DIGEST-MD5

Anyone got any experience/suggestions for a way to store a directory of sensitive information on a CentOS box? This directory contains many scripts and output files, I need it backed up but not unencrypted and don't want to store it in a tar file type archive as when it needs to be accessed and have scripts executed/data generated, it needs to be untarred/unencrypted and I don't know the

Just upgrading to 1.0.0 and I'm trying to switch from PAM (using pam-mysql) to a direct mysql query from dovecot, and I've got both md5crypt and crypt passwords in a password db. http://wiki.dovecot.org/Authentication/PasswordSchemes seems to indicate that I have to pick 1, but that is per auth-worker, right? So, I created 2 auth workers using 2 dovecot-sql config files specifying

Hello out there, everybody! I was actually expecting to find several (hundred) threads with this subject being discussed. To my surprise I didn't find a single one either on these mailing lists or in the newsgroups - at least not in a language I understand. :-) I realize that gbde and geli are not designed to be better than the other but that both fit different needs and different tastes.

On 12/4/18, 1:14 AM, "dovecot on behalf of Aki Tuomi" <dovecot-bounces at dovecot.org on behalf of aki.tuomi at open-xchange.com> wrote: On 3.12.2018 22.24, Jerry wrote: > I am using a FreeBSD 11-2 amd/64 system with dovecot version 2.3.4 installed. > I was playing around with different encryption schemes. > > doveadm pw -l > SHA1

OS: CentOS 5.0 x86. In the past while I was using SL 4.x. I was using BestCrypt. Now in CentOS 5.0, neither BestCrypt nor TrueCrypt seem to work. Is there any volume encryption or full HDD encryption that works with CentOS 5.0 out there (preferably in single-user mode)?

I am switching from a fedora/postfix/mysql/couriermail/squirrelmail to Centos/.../dovecot/roundcubemail and adding postfixadmin to the mix. My tutorial before was an earlier version (on F14) of: http://www.howtoforge.com/virtual-users-and-domains-with-postfix-courier-mysql-and-squirrelmail-centos-6.2-x86_64 Now I am using

Has there been any updates to support encrypting the whole disk in 5.2? If not, Is anyone doing this and can point me to some good documentation? Thanks Dean

hello, centos 7 If the system (wired static IP#) is powered down and stayed powered down for some period: let say 48 hours or so .... when it is rebooted again it can not establish a network connectivity for some time: 7 to 15 minutes and then everything network wise is fine... I am unable to spot any errors in various system logs. If you think this is on the OS/system side .... where do you

I was reading through Dovecot mail-crypt plugin documentation and I'm wondering what is the benefit of turning the encryption on if private and public keys are both stored on the server? What are the benefits and how the key can be protected (apart from file permissions). Cheers, Chris -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type:

Hello, I have a question about the "mail-crypt-plugin". If each user is having its own mail encryption key, is there a way to encrypt the key with the user password, and to decrypt it when the user logs in? I want to, if this is possible, to prevent any user, even root, to access another user's emails. Thanks, Andr?

Dave Gutteridge <dave at tokyocomedy.com> wrote: > Date: Mon, 03 Oct 2005 23:41:57 +0900 <snip> > >>> ---- >>> useradd -p PASSWORD -m roger >>> ^ needs a ^ >>> space | >>> | what are you trying to accomplish here? > > >The web page where I got the command said I needed it. Said

Hi, I have a small server at home. I like to put it 'online' and secure it as good as possible. The counterside of putting your personal backups on a server is that it might get hacked... and you don't want have to have your personal docs online... Do you think encryption is needed? How to use encryption with rsync? Thanks in advance, ~D

Hi to all I was looking at protonmail.com Is possible to implement and end-to-end encryption with dovecot, where server-side there is no private key to decrypt messages? If I understood properly, on protonmail the private key is encrypted with user's password, so that only an user is able to decrypt the mailbox. Anything similiar ?