Displaying 20 results from an estimated 10000 matches similar to: "Catch all for dovecot authentication?"
2017 Jul 21
1
under some kind of attack
mj <lists at merit.unu.edu> wrote:
> - for external users, to ONLY be allowed to use an application specific
> password. (or username and password, fine as well)
>
> Step one: making ldap password authentication valid only from our
> internal network. I though: using allow_nets=192.168.1.0/24 for that passdb
>
> But I can't get that to work. :-( Unsure where exactly
2017 Jan 24
1
Log authentication attempts
On 24.01.2017 00:06, rej ex wrote:
> Because we are building some monitoring application, we will need to
> record all failed and successful login attempts. We need to record
> remote IP, entered password in plain text, and if possible whether auth
> request is for SMTP or IMAP session.
SMTP? Wouldn't that be handled by your MTA, not Dovecot?
AKi Tuomi wrote:
> Since
2017 Jul 24
1
under some kind of attack
>> As per my post: checkpassword. You can then use one password on Mondays,
>> Wednesdays, and Fridays, alternate passwords on Tuesdays and Thursday
>> fetched from a rot-13 database, and only from prime numbered IP addresses
>> on weekends, if that's what you want.
>
> Having read the wiki page on checkpassword, I am unsure how this would
> work with an ldap
2017 Jul 20
1
under some kind of attack
> I would like to create a fail2ban filer, that scans for these lines:
>
>> Jul 20 11:10:09 auth: Info: ldap(user1,60.166.35.162,<cDFXHbxUQgA8piOi>): invalid credentials (given password: password)
>> Jul 20 11:10:19 auth: Info: ldap(user2,61.53.66.4,<V+nyHbxU+wA9NUIE>): invalid credentials (given password: password)
>
> (as you can see, I have enabled
2017 Jul 25
0
under another kind of attack
"mourik jan c heupink" <lists at merit.unu.edu> writes:
> On 07/24/2017 04:51 AM, Joseph Tam wrote:> You are essentially writing your own backend by taking over
>> authentication. You'll be accepting user/password inputs into your
>> checkpassword executable, then use the LDAP API (or some other system...snip
>> and source address, which will be
2011 Jul 05
2
Converting from qpopper mbox to dovecot maildir
We have an older mail server using qpopper and the mbox format which we
need to update to dovecot and maildir format. I have read through the docs
on migrating from mbox to maildir, as well as a few nuggets on how to
migrate from qpopper to dovecot, and I was wondering if I could get some
suggestions on best practices for this specific migration. Would the built
in dovecot conversion plugin be a
2017 Dec 05
1
Recommended tool for migrating IMAP servers
On 04/12/17 23:15, Steve Litt wrote:
> On Mon, 4 Dec 2017 12:53:15 -0800 (PST)
> Joseph Tam <jtam.home at gmail.com> wrote:
>
>> "Davide Marchi" <danjde at msw.it> writes:
>>
>>>> UW-IMAP's mailutil, imapsync, YippieMove and Larch.
>>
>> Whatever you use, *don't* use UW-IMAP's mailutil unless you got lots
>> of
2018 Jun 25
1
upgrade 2.2 to 2.3, diffie-hellman, ssl_min_protocol
Thanks Joseph, Aki, but something missing from upgrade document, where
does the dh param file go? I located ssl-parameters.dat so I will put
it there.
Quoting Joseph Tam <jtam.home at gmail.com>:
> On Fri, 22 Jun 2018, Joseph Tam wrote:
>
>> However, recent advances make this condition obsolete [*] and not
>> really safer, so a much faster way to generate a DH key is
2013 Sep 09
1
Is dovecot locking properly?
Hello, I'm attempting to move form qpopper 4.1 to Dovecot 2.2.5 on
Linux. When a user checks POP mail qpopper seems to make a
.username.pop temporary file in the same /var/mail directory as the mbox
INBOX file. Watching what dovecot does I don't see this happening.
Is this .pop file a lock file or just a temporary file? If its a temp
file does dovecot do the same thing elsewhere?
2018 Dec 20
1
Authentication Problem
Nice to get to hear this. However, the password is not stored in clear text
here. How then does it work?
On Fri, Dec 21, 2018, 00:58 Joseph Tam <jtam.home at gmail.com wrote:
> On Thu, 20 Dec 2018, Odhiambo Washington wrote:
>
> > At the expense of sounding stupid, could you please expound on the
> > sequence? :)
>
> In a nutshell, during protocol handshake, the server
2019 Aug 07
1
Upgrading to v2.3.X breaks ssl san?
<!doctype html>
<html>
<head>
<meta charset="UTF-8">
</head>
<body>
<div>
<br>
</div>
<blockquote type="cite">
<div>
On 07/08/2019 00:37 Joseph Tam via dovecot <
<a href="mailto:dovecot@dovecot.org">dovecot@dovecot.org</a>> wrote:
</div>
2018 Nov 29
1
Best way of merging mbox files
aside from cat?
On Thu, Nov 29, 2018 at 03:07:58PM -0800, Joseph Tam wrote:
> On Thu, 29 Nov 2018, Marc Roos wrote:
>
> >When concatenating mbox files like described here
> >https://xaizek.github.io/2013-03-30/merge-mbox-mailboxes/. You will end
> >up with an 'unsorted' mbox file. Is this going to be a problem
> >esspecially when they are large >2GB's
2012 Mar 30
1
Proxying Authentication on both sides
I've recently set up a director proxy environment on my test servers, with
the intention of deploying on our cluster soon.
One thing I found confusing in the proxying documentation [1] was the
first bit about their being two ways to do the authentication...either you
have the proxy forward the auth to the real server for authentication, or
you have the proxy authenticate it and then login
2018 Dec 20
1
Authentication Problem
On Thu, 20 Dec 2018, Joseph Tam wrote:
>> At the expense of sounding stupid, could you please expound on the
>> sequence? :)
If you want the nitty details
(Starting at bottom of page 18)
https://tools.ietf.org/html/rfc2831
Joseph Tam <jtam.home at gmail.com>
2017 Dec 04
2
Recommended tool for migrating IMAP servers
"Davide Marchi" <danjde at msw.it> writes:
>> UW-IMAP's mailutil, imapsync, YippieMove and Larch.
Whatever you use, *don't* use UW-IMAP's mailutil unless you got lots
of time to kill. It is dreadfully slow -- I used it to export some of
my users' mailboxes to Gmail or other remote mail servers, and I could
almost cut&paste the messages faster.
Like Aki
2015 Jan 29
0
Indexing Mail faster
Hey Joseph
Thanks. Strace seems like a very useful tool
Only problem is that I dont think it is maintained on ubuntu.
Tried to run:-
apt-get install strace but could not download it.
Might need to download and build it. Do you know any other way of getting
it?
Thanks
Kevin A.
On Thu, Jan 29, 2015 at 3:34 PM, Joseph Tam <jtam.home at gmail.com> wrote:
> Kevin writes:
>
>
2015 Jan 29
0
Indexing Mail faster
Dear Joseph,
Just to clarify, the pid you are referring to is of dovecot?
Correct?
Thanks
Kevin
On Thu, Jan 29, 2015 at 3:34 PM, Joseph Tam <jtam.home at gmail.com> wrote:
> Kevin writes:
>
> Appreciate if you could help with this. I have been trying to address this
>> "slow search" issue for a while with very limited success(I was trying to
>> implement
2016 Dec 05
0
v2.2.27 released
> On December 5, 2016 at 9:55 PM Joseph Tam <jtam.home at gmail.com> wrote:
>
>
>
> Timo announced:
>
> > https://dovecot.org/releases/2.2/dovecot-2.2.27.tar.gz
> > https://dovecot.org/releases/2.2/dovecot-2.2.27.tar.gz.sig
> >
> > Note that the download URLs are now https with a certificate from Let's Encrypt.
>
> wget complained
2017 Jun 01
0
Retrieving mail from read-only mdbox
> On June 1, 2017 at 4:05 AM Joseph Tam <jtam.home at gmail.com> wrote:
>
>
>
> > I've tried using IMAP with mail_location pointed at the snapshot, but,
> > though I can get a listing of emails in the mailbox, the fetch fails when
> > dovecot can't write-lock dovecot.index.log.
>
> I've thought about doing this someday (adding snapshots to
2017 Aug 10
0
Certificate cache on iOS with sending mail
I deleted the certificate already, but I think it only uses that for imap/dovecot. I don't think it actually stores one for smtps (or am I not talking sense here).
Sent from my iPhone
> On 10 Aug 2017, at 23:25, Joseph Tam <jtam.home at gmail.com> wrote:
>
>
>> On Thu, 10 Aug 2017, Larry Rosenman wrote:
>>
>> Which mail client on iOS?
>
> Sorry,