Ah ok thanks, now i got it!

I need to change
        default_fields = proxy=y host=server.intra.lan port=993 ssl=yes
master=proxy pass=#hidden_use-P_to_show#

to
        default_fields = proxy=y host=server.intra.lan starttls=yes
master=proxy pass=#hidden_use-P_to_show#

and enable STARTTLS for IMAP on the backend.

Thanks!


On 11/6/19 5:05 PM, Aki Tuomi via dovecot wrote:
As mentioned on earlier email, are you sure you are connecting to port 4190 and 
not 143 for ManageSieve?

Aki

On 06/11/2019 17:48 telsch via dovecot <dovecot@dovecot.org> wrote:


I need a more detailed hint. Dovecot proxy IMAP is running fine, but how
to add to the same proxy managesieve support?

I thougt it's activated in the proxy:
        protocols = imap sieve

In the passdb proxy to the backends SSL or STARTTLS port successfully
for IMAP. What exactly missing for managesieve?

Thanks!

On 11/6/19 3:52 PM, Sami Ketola via dovecot wrote:
Also those variables can't be returned from passdb as they are needed pre-auth.

Sami


On 6 Nov 2019, at 16.51, Aki Tuomi via dovecot <dovecot@dovecot.org> wrote:

You are hardcoding the port. I'm pretty sure your managesieve is not listening 
on 143 =)

Aki

On 06/11/2019 16:46 telsch via dovecot <dovecot@dovecot.org> wrote:


If i change it to:

passdb {
    args = /etc/dovecot-proxy/dovecot-ldap-passdb.conf.ext
    default_fields = proxy=y host=server.intra.lan port=143 starttls=yes
master=proxy pass=#hidden_use-P_to_show#
    driver = ldap
}

I still got the same error for mangesieve. IMAP login works with both
SSL/STARTTLS.

On 11/6/19 3:19 PM, Aki Tuomi via dovecot wrote:

On 06/11/2019 16:15 telsch via dovecot <dovecot@dovecot.org> wrote:


Hello list,

i'm running an internal dovecot instance with working managesieve. But
on my external dovecot-proxy instance i got an internal error. Nothing
logs on internal dovecot.




It seems you are trying to connect to STARTTLS port using SSL. You should 
probably tell in your passdb that the connection needs to use STARTTLS 
security, or configure the backend listener with ssl=yes.

Aki


Reply via email to