Re: Anyone Watching Actvity from this network? Attempting Dovecot Buffer Overflows?

2023-11-16 Thread Brendan Kearney
1.888.892.7266 Email p...@scom.ca On 11/16/2023 9:31 AM, Brendan Kearney wrote: On 11/16/23 9:05 AM, Nick Lockheart wrote: Are there publicly available lists of IP ranges by region? There's no reason for any IP outside of Nor

Re: Anyone Watching Actvity from this network? Attempting Dovecot Buffer Overflows?

2023-11-16 Thread Brendan Kearney
On 11/16/23 9:05 AM, Nick Lockheart wrote: Are there publicly available lists of IP ranges by region? There's no reason for any IP outside of North America to be contacting Postfix on Submission (587) or IMAP, since these are employee only services. If not for mobile phones, we could really

Re: Redundant Database, Pgsql ?

2023-02-23 Thread Brendan Kearney
i didnt pick up on the fact that this was auth stuff, and not indexes (indices?) or other data.  LDAP is a hierarchical database, where the relationship between data is forced into a superior/subordinate structure.  if you ask enough people, they will say that LDAP is not an authentication

Re: Redundant Database, Pgsql ?

2023-02-22 Thread Brendan Kearney
think about this, you have connect= host=host1 host=host2 ... when host1 fails, you must kick that host while it is down, each and every single time you want a new connection to the database. there is no record saying that box is down, no logic in the app saying i've already tried that box,

Re: Redundant Database, Pgsql ?

2023-02-21 Thread Brendan Kearney
cluster.  this can allow for queries, instead of writes, and reporting functionality. best of luck, brendan kearney On 2/21/23 4:02 AM, Paul Kudla (SCOM.CA Internet Services Inc.) wrote: yes that seems to be the approach i setup a dns entry and pointed to 3 servers it does work round robi

Re: multiple / backup sql servers for sql server access

2022-08-30 Thread Brendan Kearney
info in the docs would be preferred. - jack On 8/30/22 07:57 AM, Brendan Kearney wrote: per https://doc.dovecot.org/configuration_manual/authentication/sql/, you can add more than one "host=" parameter in the "connect" directive, and leave dovecot to do round-rob

Re: multiple / backup sql servers for sql server access

2022-08-30 Thread Brendan Kearney
per https://doc.dovecot.org/configuration_manual/authentication/sql/, you can add more than one "host=" parameter in the "connect" directive, and leave dovecot to do round-robin load balancing. there will probably be a delay in processing while a failed database connection attempt times out.

Re: Configure Dovecot for GSSAPI [formerly: Looking for GSSAPI config]

2016-07-06 Thread Brendan Kearney
On 07/04/2016 03:58 PM, Mark Foley wrote: Brendan - yes, go ahead and send that doc directly to my email address. I've got Maildir folders going, but not nfs; and I'm curious about your load balance. THX --Mark -Original Message- Date: Mon, 04 Jul 2016 10:40:06 -0400 From: Brendan

Re: Configure Dovecot for GSSAPI [formerly: Looking for GSSAPI config]

2016-07-05 Thread Brendan Kearney
On 07/04/2016 02:40 PM, Aki Tuomi wrote: On 04.07.2016 17:40, Brendan Kearney wrote: On 07/04/2016 03:30 AM, Mark Foley wrote: Actually, I see that you used host.domain.name further down. That's a good substitute for mail.hprs.local. Also, not to be a literary critic, but it might not hurt

Re: Configure Dovecot for GSSAPI [formerly: Looking for GSSAPI config]

2016-07-04 Thread Brendan Kearney
On 07/04/2016 03:30 AM, Mark Foley wrote: Actually, I see that you used host.domain.name further down. That's a good substitute for mail.hprs.local. Also, not to be a literary critic, but it might not hurt to show an example keytab beneath your "Make sure your keytab has entry for ...". Just

Re: Looking for GSSAPI config [was: Looking for NTLM config example]

2016-06-29 Thread brendan kearney
The last log line shows "user=<>". This indicates no credentials were presented. If the rip field matches the client ip you tested from, I would bet the appropriate kerberos ticket (imap/host.domain.tld@REALM) was not pulled for the authentication. On Jun 28, 2016 11:33 PM, "Mark Foley"

Re: Mailboxes on NFS or iSCSI

2016-06-22 Thread brendan kearney
I chose nfs for my env because I wanted multiple load balanced instances of dovecot to be able to access the mailbox files. If you use iscsi, you will need to pin the user to the dovecot instance that has the LUN mounted. For me, scalability and single point of failure was lost or lessened when

Re: sieve and authentication

2016-01-20 Thread brendan kearney
While that may be true, the RoundCubeMail plugin cannot talk to sieve, either. On Jan 19, 2016 11:24 PM, "Tim" <t...@slowb.ro> wrote: > On 20/01/16 12:15, Brendan Kearney wrote: > >> when i telnet to the sieve instance running with dovecot, i see that SASL >&

sieve and authentication

2016-01-19 Thread Brendan Kearney
when i telnet to the sieve instance running with dovecot, i see that SASL is supported, but i cannot get thunderbird to connect to the sieve instance. it seems that i am not providing the right auth methods for sieve to work. "IMPLEMENTATION" "Dovecot Pigeonhole" "SIEVE" "fileinto reject

SASL binds

2016-01-01 Thread Brendan Kearney
i am looking to get SASL binds working in Dovecot for userdb lookups, and i am not sure what i might be doing wrong. Dovecot version - 2.2.19 running on Fedora 22. MIT Kerberos and OpenLDAP are being used. my LDAP configs: uris = ldap://server1.bpk2.com ldap://server2.bpk2.com sasl_bind =