Jonathan Angliss wrote:

With no mention of what PHP, or webserver you're using, it's difficult
to tell if you meet the minimum requirements mapped out in
doc/authentication.txt.  Please checkout that doc, and ensure you're
meeting the minimum requirements.

Sorry about that. I told you a lot in my initial email, but forgot the above. Oops. Here's everything I can think of, and I hope I haven't left out anything this time:


OS = FreeBSD 5.2.1-RELEASE-p3
MTA = Postfix 2.0.18
IMAP = Courier-imap 2.2.1
WEBSERVER = Apache 2.0.48
PHP = Mod_php 4.3.4
MUA = Squirrelmail 1.4.2
DB = MySQL 4.0.18
AUTH = Cyrus-sasl 2.1.7
CERT = Commercial cert from instantssl.com

Apart from the OS, everything is built from the latest FreeBSD ports.
Postfix is compiled with TLS, SASL2 & MySQL support.
Courier-imap is compiled with MySQL support.
Apache is compiled with suexec support.
PHP, Squirrelmail & Mysql (client & server) are "plain-jane" installs.
Sals2 is compiled to only support PLAIN & LOGIN methods.
The cert is for "smxy.org".

Postfix listens on port 25, and requires STARTTLS+SMTPAUTH in order to relay, unless you are 'localhost'. It doesn't yet listen on the TLS port. I'll set that up after the imap issue is resolved. It handles SMTP AUTH by calling the sasl libraries, which call saslauthd, which uses pam to look the user up in /etc/password and/or the mysql database.

Courier listens on port 143 and normally requires STARTTLS (currently disabled so that SM can connect, until it can do tls on port 993). It also listens on the imaps port (993). My primary imap client - Mozilla 1.6 - makes a tls connection to port 993, and is working fine.

When SM attempts to connect to port 993, the login session times out, with this in the maillog:

Mar 20 00:00:40 peter imapd-ssl: couriertls: accept: error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol

Aside from the ssl issue, I believe that SM is working just fine. I connect to it over a secure https: link. I'm not using any plugins yet.

If I've forgotten anything, please forgive me. Just ask, and I'll gladly provide it.

I know that your docs say that when the imap server is localhost, I can do without ssl. Policy here is that users connecting from the internet must do so over a secure connection, so they either connect with tls on 993 or with STARTTLS on 143. That doesn't leave a non-ssl port for SM to connect on.

-ste


------------------------------------------------------- This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click -- squirrelmail-users mailing list List Address: [EMAIL PROTECTED] List Archives: http://sourceforge.net/mailarchive/forum.php?forum_id=2995 List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-users

Reply via email to