Re: Cyrus-IMAP disallowing clear text connections

2006-03-27 Thread Erik Nørgaard

Anish Mistry wrote:

On Sunday 26 March 2006 16:37, Erik Nørgaard wrote:

Cyrus-IMAP accepts unencrypted connections _and_ authentication
even though I have set the following in imapd.conf

   allowplaintext: yes
   allowplainwithouttls: no

How do I force the use of TLS for Cyrus-IMAP?

Also: Postfix allows hiding authentication mechanisms unless TLS is
invoked (so in clear text, capabilities just show STARTTLS), while
Cyrus-IMAP announces everything. Is there anyway to be more strict
with the cyrus in respect of what it announces?

>

sasl_minimum_layer: 128


Thanks, but that doesn't do it, everything still goes through nice and 
clear unless I set the client to use TLS.


Erik

--
Ph: +34.666334818  web: www.locolomo.org
S/MIME Certificate: www.daemonsecurity.com/ca/8D03551FFCE04F06.crt
Subject ID:  9E:AA:18:E6:94:7A:91:44:0A:E4:DD:87:73:7F:4E:82:E7:08:9C:72
Fingerprint: 5B:D5:1E:3E:47:E7:EC:1C:4C:C8:3A:19:CC:AE:14:F5:DF:18:0F:B9
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Cyrus-IMAP disallowing clear text connections

2006-03-26 Thread Anish Mistry
On Sunday 26 March 2006 16:37, Erik Nørgaard wrote:
> Hi:
>
> I have a Postfix/Cyrus-IMAP setup, Postfix requires TLS and user
> authentication to relay mail, and cyrus requires TLS and user
> authentication to retrieve mail. Or so I thought:
>
> I just tested to see that things were in fact encrypted and
> unencrypted connection was refused, works fine for Postfix but
> Cyrus-IMAP accepts unencrypted connections _and_ authentication
> even though I have set the following in imapd.conf
>
>allowplaintext: yes
>allowplainwithouttls: no
>
> How do I force the use of TLS for Cyrus-IMAP?
>
> Also: Postfix allows hiding authentication mechanisms unless TLS is
> invoked (so in clear text, capabilities just show STARTTLS), while
> Cyrus-IMAP announces everything. Is there anyway to be more strict
> with the cyrus in respect of what it announces?
sasl_minimum_layer: 128

-- 
Anish Mistry
[EMAIL PROTECTED]
AM Productions http://am-productions.biz/


pgp9BzF0M4kcy.pgp
Description: PGP signature


Cyrus-IMAP disallowing clear text connections

2006-03-26 Thread Erik Nørgaard

Hi:

I have a Postfix/Cyrus-IMAP setup, Postfix requires TLS and user 
authentication to relay mail, and cyrus requires TLS and user 
authentication to retrieve mail. Or so I thought:


I just tested to see that things were in fact encrypted and unencrypted 
connection was refused, works fine for Postfix but Cyrus-IMAP accepts 
unencrypted connections _and_ authentication even though I have set the 
following in imapd.conf


  allowplaintext: yes
  allowplainwithouttls: no

How do I force the use of TLS for Cyrus-IMAP?

Also: Postfix allows hiding authentication mechanisms unless TLS is 
invoked (so in clear text, capabilities just show STARTTLS), while 
Cyrus-IMAP announces everything. Is there anyway to be more strict with 
the cyrus in respect of what it announces?


Thanks, Erik

--
Ph: +34.666334818  web: www.locolomo.org
S/MIME Certificate: www.daemonsecurity.com/ca/8D03551FFCE04F06.crt
Subject ID:  9E:AA:18:E6:94:7A:91:44:0A:E4:DD:87:73:7F:4E:82:E7:08:9C:72
Fingerprint: 5B:D5:1E:3E:47:E7:EC:1C:4C:C8:3A:19:CC:AE:14:F5:DF:18:0F:B9
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"