Re: Expire (manually) TLS sessions?

2009-01-21 Thread Jorey Bump
Jeff Blaine wrote, at 01/21/2009 01:36 PM: > bash-2.05# su cyrus -c "/imapsrv/mail/cyrus/bin/imtest -t > /var/imap/server.pem imapsrv" My understanding is that you only specify a keyfile if you're testing client certificate authentication. For a normal test of TLS encryption, it should be empty

Re: Expire (manually) TLS sessions?

2009-01-21 Thread Jeff Blaine
This is fixed! I built OpenSSL 0.9.8j on a whim and noticed it fixed a bizarre problem with OpenSSH 5.1p1 that I was working on in a pre-production environment. We were using an older 0.9.8 rev prior to this. I then did a 'make clean; make; sudo make install' in my cyrus-sasl source tree (which

Re: Lmtp w/ Postfix and LDAP: change mailbox name when saving mail.

2009-01-21 Thread k bah
> - Original Message - > From: "Adam Tauno Williams" > To: "Cyrus Mailing List" > Subject: Re: Lmtp w/ Postfix and LDAP: change mailbox name when saving mail. > Date: Wed, 21 Jan 2009 13:37:28 -0500 > > > On Wed, 2009-01-21 at 14:01 -0300, k bah wrote: > > I need to know then how things

Re: Expire (manually) TLS sessions?

2009-01-21 Thread Wesley Craig
On 21 Jan 2009, at 12:41, Jeff Blaine wrote: > FWIW, Thunderbird with SSL on port 993 pops up a box saying > incorrect Message authentication code. I forgot to mention > that. That's interesting. What platform are you running this on? What compiler did you use to build openssl? What optimiza

Re: Lmtp w/ Postfix and LDAP: change mailbox name when saving mail.

2009-01-21 Thread Adam Tauno Williams
On Wed, 2009-01-21 at 14:01 -0300, k bah wrote: > I need to know then how things are processed when mail arrives, from the > Cyrus point of view, of course. > First Postfix searches the user on LDAP, like this: > > query_filter=(&(|(&(objectclass=postfixuser)(objectclass=inetlocalmailrecipient)

Re: Expire (manually) TLS sessions?

2009-01-21 Thread Jeff Blaine
Also: bash-2.05# su cyrus -c "/imapsrv/mail/cyrus/bin/imtest -t /var/imap/server.pem imapsrv" S: * OK [CAPABILITY IMAP4 IMAP4rev1 LITERAL+ ID STARTTLS AUTH=PLAIN SASL-IR] imapsrv.our.com Cyrus IMAP v2.3.13 server ready C: S01 STARTTLS S: S01 OK Begin TLS negotiation now verify error:num=20:unab

Re: Lmtp w/ Postfix and LDAP: change mailbox name when saving mail.

2009-01-21 Thread k bah
I need to know then how things are processed when mail arrives, from the Cyrus point of view, of course. First Postfix searches the user on LDAP, like this: query_filter=(&(|(&(objectclass=postfixuser)(objectclass=inetlocalmailrecipient)) (objectclass=groupofuniquenames))(mail=%s)) result_

Re: Expire (manually) TLS sessions?

2009-01-21 Thread Jeff Blaine
I raised syslog info to local6.debug and the TLS session with Thunderbird and NO certs shows this: Jan 21 12:59:10 imapsrv imap[1518]: [ID 636471 local6.notice] TLS server engine: cannot load CA data Jan 21 12:59:10 imapsrv imap[1518]: [ID 286863 local6.notice] imapd:Loading hard-coded DH parame

Re: Expire (manually) TLS sessions?

2009-01-21 Thread Jeff Blaine
Sebastian Hagedorn wrote: > Hi Jeff, > > --On 21. Januar 2009 11:19:31 -0500 Jeff Blaine > wrote: > >> Sorry for the delay -- I had my wedding and a brief >> mini-honeymoon to attend to ;) > > congrats! Thanks :) >>> How about Thunderbird using a password for authentication? Is that an >>> o

Re: Expire (manually) TLS sessions?

2009-01-21 Thread Sebastian Hagedorn
Hi Jeff, --On 21. Januar 2009 11:19:31 -0500 Jeff Blaine wrote: Sorry for the delay -- I had my wedding and a brief mini-honeymoon to attend to ;) congrats! How about Thunderbird using a password for authentication? Is that an option at all? I realize this is a little "all over the roa

Re: Lmtp w/ Postfix and LDAP: change mailbox name when saving mail.

2009-01-21 Thread Dan White
Dan White wrote: > > sasl_ldapdb_uri: ldap://ldap.example.org > sasl_ldapdb_mech: GSSAPI > sasl_ldapdb_canon_attr: uid > #sasl_canon_user_plugin: ladpdb > #imap_sasl_canon_user_plugin: ldapdb > #pop3_sasl_canon_user_plugin: ldapdb > #nntp_sasl_canon_user_plugin: ldapdb > #sieve_sasl_canon_user_plug

Re: Lmtp w/ Postfix and LDAP: change mailbox name when saving mail.

2009-01-21 Thread Dan White
k bah wrote: > cyrus-imapd-2.3.8 > cyrus-sasl-2.1.22 > postfix-2.4.5 > > > On my LDAP server, the uid field of each user (person) is: > "username~domain.org". > I correctly set up cyrus and saslauthd to authenticate with the username as > the LDAP field above. A simple Horde hook d