Re: [Dovecot] Dovecot 2.2rc3 Client Cert Auth and Webmail -> auth_ssl_require_client_cert problem [solved]

2013-03-31 Thread Christian Felsing
Thank you, works now with 'Y' as nopassword :-) best regards Christian Am 31.03.2013 17:16, schrieb Timo Sirainen: > On 31.3.2013, at 17.38, Christian Felsing wrote: > >> There were log entries regarding that problem: > > Ah, you were using PostgreSQL and I tested MySQL. They are handled somew

Re: [Dovecot] Dovecot 2.2rc3 Client Cert Auth and Webmail -> auth_ssl_require_client_cert problem

2013-03-31 Thread Jake Johnson
unsubscribe On Wed, Mar 27, 2013 at 1:49 AM, Christian Felsing < hostmas...@taunusstein.net> wrote: > Hello, > > I would like to set up a Dovecot based mail system which uses X.509 > Client Certificates for authentication. A webmail system based on Horde5 > should use Dovecot as backend. > > For

Re: [Dovecot] Dovecot 2.2rc3 Client Cert Auth and Webmail -> auth_ssl_require_client_cert problem

2013-03-31 Thread Timo Sirainen
On 31.3.2013, at 17.38, Christian Felsing wrote: > There were log entries regarding that problem: Ah, you were using PostgreSQL and I tested MySQL. They are handled somewhat differently. This should fix it: http://hg.dovecot.org/dovecot-2.2/rev/37cd62516b37 > > > Mar 25 11:05:21 dovecot dov

Re: [Dovecot] Dovecot 2.2rc3 Client Cert Auth and Webmail -> auth_ssl_require_client_cert problem

2013-03-31 Thread Christian Felsing
There were log entries regarding that problem: Mar 25 11:05:21 dovecot dovecot: auth: Debug: client in: AUTH#0111#011PLAIN#011service=imap#011secured#011valid-client-cert#011sessi on=J8pV8bzYIACwxigG#011cert_username=u...@example.net#011lip=192.168.200.22#011rip=192.168.200.6#011lport=993#011rpor

Re: [Dovecot] Dovecot 2.2rc3 Client Cert Auth and Webmail -> auth_ssl_require_client_cert problem

2013-03-31 Thread Timo Sirainen
On 31.3.2013, at 15.47, Christian Felsing wrote: > thank you for that hint. > > SELECT NULL AS password, 'Y' as nopassword, userid AS user FROM users > WHERE userid = '%u' > does not work, seems Dovecot 2.2rc3 ignores nopassword, so my solution is: I don't understand. I remember some other mail

Re: [Dovecot] Dovecot 2.2rc3 Client Cert Auth and Webmail -> auth_ssl_require_client_cert problem

2013-03-31 Thread Christian Felsing
Hi Timo, thank you for that hint. SELECT NULL AS password, 'Y' as nopassword, userid AS user FROM users WHERE userid = '%u' does not work, seems Dovecot 2.2rc3 ignores nopassword, so my solution is: password_query = SELECT MD5('%w') AS password, userid AS user FROM users WHERE (userid = '%u') an

Re: [Dovecot] Dovecot 2.2rc3 Client Cert Auth and Webmail -> auth_ssl_require_client_cert problem

2013-03-31 Thread Timo Sirainen
On 27.3.2013, at 10.49, Christian Felsing wrote: > I would like to set up a Dovecot based mail system which uses X.509 > Client Certificates for authentication. A webmail system based on Horde5 > should use Dovecot as backend. .. > Unfortunately Dovecot does not support different authentication m

[Dovecot] Dovecot 2.2rc3 Client Cert Auth and Webmail -> auth_ssl_require_client_cert problem

2013-03-27 Thread Christian Felsing
Hello, I would like to set up a Dovecot based mail system which uses X.509 Client Certificates for authentication. A webmail system based on Horde5 should use Dovecot as backend. For now Dovecot works with client certificates issued by my CA and Horde authenticates also with same client certs. Du