Re: client certificate handling with TLS + sasl

2010-02-25 Thread Victor Duchovni
On Thu, Feb 25, 2010 at 01:42:27PM -0500, zhong ming wu wrote: Postfix does not implement the external SASL mechanism for authenticating users via TLS client certs. So it sends user/password to dovecot socket and get yes/no answer? Postfix copies SASL protocol requests between the SMTP

Re: client certificate handling with TLS + sasl

2010-02-25 Thread zhong ming wu
On Thu, Feb 25, 2010 at 12:48 AM, Victor Duchovni victor.ducho...@morganstanley.com wrote: Postfix does not implement the external SASL mechanism for authenticating users via TLS client certs. So it sends user/password to dovecot socket and get yes/no answer? TLS is hop-by-hop, not end to

client certificate handling with TLS + sasl

2010-02-24 Thread zhong ming wu
Dear List I am using dovecot sasl with postfix smtp-auth. I also use tls with both dovecot imap/pop server to retrieve mails and also tls with postfix for submission to the relay server. With dovecot I can have my mail client send a certificate and make dovecote use CN field of the cert as

Re: client certificate handling with TLS + sasl

2010-02-24 Thread Victor Duchovni
On Wed, Feb 24, 2010 at 11:46:10PM -0500, zhong ming wu wrote: With dovecot I can have my mail client send a certificate and make dovecote use CN field of the cert as username to authenticate. If I enable that feature in dovecot, postfix authentication does not work despite the fact that I