[Dovecot] Question about dovecot imap proxy

[Monika Janek]

Hi Timo,
Thanks for getting back to me!

Currently I'm using SQL to check the proxy but the authentication gets 
passed on to the internal mail server where it authenticates with LDAP. 
This is my SQL query on the external mail host:

password_query = SELECT NULL AS password, host, destuser, 'Y' AS 
nopassword, 'Y' AS nologin, 'Y' AS nodelay, 'Y' AS proxy FROM proxy 
WHERE user = '%u'

I take this as to just check the SQL for the existence of the username 
then pass the authentication onto the internal server. I tried putting 
in 'starttls' into the query string but it didn't work. Everything is 
working but I would just prefer a secure connection for the entire 
chain. I have my iphone connected via ssl to port 993 on the external 
mail host but then the proxy (which is now on our internal network) 
communication with the internal host is not encrypted.

Timo Sirainen wrote:
> On Thu, 2010-04-29 at 11:09 -0400, Monika Janek wrote:
>
>   
>> I 
>> read the addition to the documentation about  dovecot proxy but I'm not 
>> sure where to add these variables:
>>     
> ..
>   
>>       ssl=yes: Use SSL and require a valid verified remote certificate.
>>     
>
> Into your passdb's extra fields. What passdb do you use?
> http://wiki.dovecot.org/PasswordDatabase/ExtraFields has some examples
> how to use them.
>
>   

-- 
Monika Janek
Systems Administrator, Side Effects Software
Toronto, Ontario Canada
416-504-9876 x207 www.sidefx.com