dovecot and oauth2 (with keycloak) not working

2023-11-19 Thread Francis Augusto Medeiros-Logeay via dovecot
Hi, I successfully configured Roundcube to use keycloak for oauth2. However, I am having trouble to make it work with dovecot. My configuration is this: cat dovecot-oauth2.conf.ext tokeninfo_url = https://auth.mydomain.com/realms/myrealm/protocol/openid-connect/userinfo introspection_url =

Re: Avoiding POODLE vulnerability

2023-11-19 Thread Michael Orlitzky
On Sun, 2023-11-19 at 18:28 -0500, Steve Litt wrote: > > doveconf -d shows that I have no such config key as ssl_protocols, my > ssl_min_protocol is TLSv1.2, and the default ssl_cipher_list is the > following huge string: > >

Re: [auth] epoll_ctl(add, 13) failed: Operation not permitted (fd doesn't support epoll)

2023-11-19 Thread John Stoffel
> "Alexander" == Alexander Vogt via dovecot writes: Is this a new setup? Do you have SELinux enabled? Or are you doing chroot'd setup? If so, back it all off one by one and see what's going on. The fact that you can't dump core because you can't write somewhere tells me that your systems

Re: Avoiding POODLE vulnerability

2023-11-19 Thread Steve Litt
Bernardo Reino said on Sun, 19 Nov 2023 09:04:15 +0100 (CET) >On Sun, 19 Nov 2023, Steve Litt wrote: > >> Michael Orlitzky said on Sat, 18 Nov 2023 17:31:49 -0500 >> >>> On Sat, 2023-11-18 at 16:54 -0500, Steve Litt wrote: I forgot to say: I'm using Dovecot 2.3.21 on an up to date

passdb doesn't support credential lookups

2023-11-19 Thread Michael Grant via dovecot
I'm having trouble authenticating certain users. I see this in the logs: Nov 19 16:26:40 auth: Debug: pam(jane,192.168.2.83,<...>): Performing passdb lookup Nov 19 16:26:40 auth: Debug: pam(jane,192.168.2.83,<...>): passdb doesn't support credential lookups Nov 19 16:26:40 auth: Debug:

[auth] epoll_ctl(add, 13) failed: Operation not permitted (fd doesn't support epoll)

2023-11-19 Thread Alexander Vogt via dovecot
Hi all, dovecot auth service is failing when using an inet_service. The configuration is essentially: service auth { inet_listener { address = * port = 12345 } unix_listener auth-userdb { group = vmail mode = 0666 user = vmail } } When I connect to port 12345 (real

Re: Avoiding POODLE vulnerability

2023-11-19 Thread Michael Orlitzky
On Sun, 2023-11-19 at 15:33 -0500, Steve Litt wrote: > > Thanks Bernardo, > > I use Void Linux, not Debian. Is there a command that tells me the > defaults? > The one I typed :) The doveconf command has a few flags that control what settings are displayed, and "-d" tells it to show the

Re: Avoiding POODLE vulnerability

2023-11-19 Thread Steve Litt
Bernardo Reino said on Sun, 19 Nov 2023 09:04:15 +0100 (CET) >On Sun, 19 Nov 2023, Steve Litt wrote: > >> Michael Orlitzky said on Sat, 18 Nov 2023 17:31:49 -0500 >> >>> On Sat, 2023-11-18 at 16:54 -0500, Steve Litt wrote: I forgot to say: I'm using Dovecot 2.3.21 on an up to date

Re: [EXT] Replication going away?

2023-11-19 Thread Steven Varco
Does anyone already have a dovecot (CE with Maildir) setup running using shared storage (i.ex. GlusterFS) underneath? This will be my current „migration plan“ to dovecot nmot supporting replication anymore: 2 x Loadblancers (accross two sites) with keepalived and haproxy 3x GlusterFS nodes 3x

Re: Avoiding POODLE vulnerability

2023-11-19 Thread Bernardo Reino
On Sun, 19 Nov 2023, Steve Litt wrote: Michael Orlitzky said on Sat, 18 Nov 2023 17:31:49 -0500 On Sat, 2023-11-18 at 16:54 -0500, Steve Litt wrote: I forgot to say: I'm using Dovecot 2.3.21 on an up to date 64 bit x86_64 Void Linux computer using runit for its init system. I populate