Displaying 20 results from an estimated 20000 matches similar to: "Dovecot, Postfix, and SASL AUTH EXTERNAL"
2019 Nov 13
2
SASL AUTH with postfix
Hi,
I just moved from Cyrus SASL to Dovecot SASL, with postfix.
Works great, and no issue with non-ascii chars, has i had with Cyrus.
With Cyrus i was getting the username/passwd via SQL, with this:
sql_select: select password from smtp_auth_users where username='%u@%r' and
status='true'
worked ok for users with email addresses, and i had some special users that
were just a
2017 Sep 27
3
Securing postfix to dovecot (SASL) auth
On 27/09/17 20:35, Thomas Bauer wrote:
> service auth {
> inet_listener{
> address=192.0.0.1
> port=10001
> ssl=yes
> }
> }
ssl=yes is not documented to work for the auth service and it's highly
likely that it is simply ignored.
> -o smtpd_tls_security_level=encrypt
This definitely does not do what you think it does. This setting is for
the smtpd
2020 Aug 20
0
dovecot-SASL for Postfix: EXTERNAL does not work.
<!doctype html>
<html>
<head>
<meta charset="UTF-8">
</head>
<body>
<div>
</div>
<blockquote type="cite">
<div>
On 20/08/2020 17:28 Steffen Nurpmeso <<a href="mailto:steffen@sdaoden.eu">steffen@sdaoden.eu</a>> wrote:
</div>
<div>
2015 Mar 27
1
postfix sasl -> haproxy -> dovecot auth
Gedalya skrev den 2015-03-27 14:48:
>> is it possible to configure configure haproxy to work with postfix
>> sasl and dovecot auth like this:
>> clients -> 25:postfix -> 20025:haproxy -> 20025:auth-backend-1,
>> 20025:auth-backend-2
> Why don't you set up a dovecot locally (with only auth service) on
> each postfix box?
cyrus-sasl is still needed, and
2015 Mar 27
4
postfix sasl -> haproxy -> dovecot auth
I will install cyrus-sasl and see how it goes.
Anyway, it would be nice to have same features (authentication agains imap) in dovecot.
On 27 Mar 2015, at 16:27, Benny Pedersen <me at junc.eu> wrote:
> Edgaras Luko?evi?ius skrev den 2015-03-27 14:58:
>
>> I don?t want to allow public network facing servers to be able to
>> reach passwords database. And I want to
2015 Mar 27
2
postfix sasl -> haproxy -> dovecot auth
I don?t want to allow public network facing servers to be able to reach passwords database. And I want to segregate roles of the servers.
If I will setup dovecot locally I will still have to provide it access to database (eg. /etc/dovecot/dovecot-sql.conf.ext).
On 27 Mar 2015, at 15:49, Benny Pedersen <me at junc.eu> wrote:
> Edgaras Luko?evi?ius skrev den 2015-03-27 14:34:
>>
2020 Aug 21
0
[EXT] Re: dovecot-SASL for Postfix: EXTERNAL does not work.
> On 21/08/2020 17:56 Steffen Nurpmeso <steffen at sdaoden.eu> wrote:
>
>
> Aki Tuomi wrote in
> <1907575568.4364.1597984769802 at appsuite-dev-gw1.open-xchange.com>:
> |> On 21/08/2020 02:17 Steffen Nurpmeso <steffen at sdaoden.eu> wrote:
> ...
> |> Wietse Venema wrote in
> |> <4BXSTk189nzJrP3 at spike.porcupine.org>:
>
2015 Mar 27
1
postfix sasl -> haproxy -> dovecot auth
Are you a cyrus developer ir what? :D
2015 kov. 27 17:10 "Benny Pedersen" <me at junc.eu> ra??:
> Edgaras Luko?evi?ius skrev den 2015-03-27 16:00:
>
>> I will install cyrus-sasl and see how it goes.
>>
>
> +1
>
> Anyway, it would be nice to have same features (authentication agains
>> imap) in dovecot.
>>
>
> read more docs in
2019 Nov 13
2
SASL AUTH with postfix
Jorge Bastos via dovecot skrev den 2019-11-13 22:00:
> How can i have the same with dovecot SASL?
> Thanks in advanced,
https://wiki2.dovecot.org/HowTo/PostfixAndDovecotSASL
Hi benny,
Thanks,
That's exactly what i have in postfix:
smtpd_sasl_type = dovecot
smtpd_sasl_path = private/auth
smtpd_sasl_auth_enable = yes
plus:
smtpd_sasl_local_domain = fastmail
but the user that i have
2007 Mar 08
1
dovecot sasl auth (pam) + postfix doesn't work...
hello,
i tried to use the "dovecot sasl" with postfix using pam as backend
(actually pam_krb5) but it doesn't work.
dovecot runs well as pop3 server authenticating with the pam_krb5
module with the config below, but it doesn't even connect with the
kerberos server (a remote AD 2003) when it's called from postfix.
--------dovecot.conf---------
protocols = pop3 pop3s imap
2015 Mar 27
0
postfix sasl -> haproxy -> dovecot auth
Edgaras Luko?evi?ius skrev den 2015-03-27 12:21:
> is it possible to configure configure haproxy to work with postfix
> sasl and dovecot auth like this:
>
> clients -> 25:postfix -> 20025:haproxy -> 20025:auth-backend-1,
> 20025:auth-backend-2
configure cyrus-sasl as a remote imap client is more simple
if imap hostname is dns round robin it would be ha-avail already
2015 Mar 27
0
postfix sasl -> haproxy -> dovecot auth
Edgaras Luko?evi?ius skrev den 2015-03-27 14:34:
> Can?t dovecot authenticate against imap?
will it be trusted ?
> What I need is to make smtp authentication balanced and keep
> everything in backend (private network)
dovecot is not a smtp server, thats why i say cyrus-sasl
yes cyrus-sasl is ha-awail with rimap, but there is a minor problem with
it, haproxy and rimap have both the
2015 Mar 27
0
postfix sasl -> haproxy -> dovecot auth
Edgaras Luko?evi?ius skrev den 2015-03-27 16:00:
> I will install cyrus-sasl and see how it goes.
+1
> Anyway, it would be nice to have same features (authentication agains
> imap) in dovecot.
read more docs in cyrus-sasl, did i say rimap ? :=)
2017 Sep 27
0
Securing postfix to dovecot (SASL) auth
Hi,
Am 27.09.2017 um 01:07 schrieb Raymond Sellars:
> Is it possible to secure the Dovecot SASL auth provider for postfix?
>
I'm using this configuration, which you've suggested.
> Has anyone managed to implement a secure internal approach they can share? I'm wondering if Postfix with Cyrus against IMAP using STARTTLS is my best alternative.
>
My config is:
On the
2010 Sep 26
2
Postfix SASL Auth
Hello,
i use Postfix (2.7.1) and Dovecot (1.2.14) on my FreeBSD Server. I use
Postfixadmin and Virtuell User. The login going without problems, but
the SASL Auth want not work.
Have someone a Idea?
Regards
Silvio
#postconf -a
dovecot
# postconf -n
alias_maps = hash:/etc/aliases
allow_percent_hack = no
biff = no
command_directory = /usr/sbin
config_directory = /etc/postfix
content_filter =
2015 Mar 27
5
postfix sasl -> haproxy -> dovecot auth
Hello,
is it possible to configure configure haproxy to work with postfix sasl and dovecot auth like this:
clients -> 25:postfix -> 20025:haproxy -> 20025:auth-backend-1, 20025:auth-backend-2
The configuration I have now gives me this error randomly:
535 5.7.8 Error: authentication failed: Connection lost to authentication server
This is probably because haproxy change servers while
2017 Sep 26
4
Securing postfix to dovecot (SASL) auth
Hi
Is it possible to secure the Dovecot SASL auth provider for postfix?
https://wiki2.dovecot.org/HowTo/PostfixAndDovecotSASL
I'm currently using the inet option to provide SASL auth to postfix for dovecot. Both installs are on different hosts hence the use of inet rather than unix socket.
I'm looking for the best way to secure this channel (rather than just assuming the VLAN is secure
2015 Mar 27
4
postfix sasl -> haproxy -> dovecot auth
Can?t dovecot authenticate against imap?
What I need is to make smtp authentication balanced and keep everything in backend (private network)
On 27 Mar 2015, at 13:29, Benny Pedersen <me at junc.eu> wrote:
> Edgaras Luko?evi?ius skrev den 2015-03-27 12:21:
>
>> is it possible to configure configure haproxy to work with postfix
>> sasl and dovecot auth like this:
2004 May 30
1
Postfix SASL AUTH from Dovecot
Again today got annoyed at Cyrus SASL. Upgrading it to newer version had
broken PAM support. Trying to login as "user at domain" resulted it only
asking for "user" from PAM. Well, got it patched and working again, but
I'd rather not go through it all the time..
So I finally did what I had been thinking about a year or so, change
Postfix to use dovecot-auth directly. This
2020 Aug 21
0
[EXT] Re: dovecot-SASL for Postfix: EXTERNAL does not work.
> On 21/08/2020 02:17 Steffen Nurpmeso <steffen at sdaoden.eu> wrote:
>
>
> Hello and good evening.
>
> Sorry for responding so late, it is midsummer and i spend as much
> time as possible on the outside (bicycle, mostly). (Just one more
> day, then 10 degrees colder!!)
>
> I Cc: Wietse Venema, because i quote a message of him.
> (this is "set