Hello people,
After a lot of wading through the dovecot documentation (which btw, is excellent !, everything lies under "dovecot/doc/wiki"), I managed to authenticate a couple of accounts.
For starters, I want dovecot to work as an imap/imaps box and nothing else.
So , I went ahead and created a "passwd" file with two users. One user being my name (spyros) and plaintext password and the other user "postmaster" with encrypted password ("/etc/dovecot/passwd" shown) :
spyros@webmail.domain.gr:{PLAIN}plainpassword postmaster@webmail.domain.gr:{SSHA}SSHAPassword
Now, if I telnet to port 143 with both users, the system comes back with the following :
[root@webmail dovecot]# telnet localhost 143 Trying 127.0.0.1... Connected to localhost. Escape character is '^]'.
- OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE STARTTLS AUTH=PLAIN] Dovecot ready . login spyros@webmail.domain.gr password . OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT IDLE CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH] Logged in
As I said, it allows login on port 143 for both users. So, the same for "postmaster".
Now for port 993 :
[root@webmail dovecot]# openssl s_client -connect webmail.domain.gr:993 [lots of SSL-related certificate information]
- OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE AUTH=PLAIN] Dovecot ready . login spyros@webmail.domain.gr password . OK [CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE SORT SORT=DISPLAY THREAD=REFERENCES THREAD=REFS MULTIAPPEND UNSELECT IDLE CHILDREN NAMESPACE UIDPLUS LIST-EXTENDED I18NLEVEL=1 CONDSTORE QRESYNC ESEARCH ESORT SEARCHRES WITHIN CONTEXT=SEARCH] Logged in
Again, the same for user "postmaster". I don't paste.
So, everything is fine. However, I have an issue with the (?!) issued certificate. If I check the dovecot logs I find nothing.
If on the other hand, I do the same check on the Horde application, It comes back with the following :
* Trying protocol imap/notls, Port 143:
SUCCESS - INBOX has 0 messages (0 new 0 recent)
* Trying protocol imap/ssl, Port 993:
ERROR - The server returned the following error message:
SECURITY PROBLEM: insecure server advertised AUTH=PLAIN[SERVERBUG] Internal error occurred. Refer to server log for more
information. [2010-01-05 13:30:12]Certificate failure for localhost: self signed certificate:
/C=GR/ST=Kerkyra/L=Kerkyra/O=Tourist Enterprizes/OU=IMAP
server/CN=webmail.domain.gr/emailAddress=postmaster@webmail.domain.gr
* Trying protocol imap/ssl/novalidate-cert, Port 993:
SUCCESS - INBOX has 0 messages (0 new 0 recent)
* Trying protocol imap/tls/novalidate-cert, Port 143:
SUCCESS - INBOX has 0 messages (0 new 0 recent)Now, I know I am not supposed to ask you chaps about this, but direct my questions to the horde mailing list. However, I would like an opinion before I go ahead and bug them with this.
Certificate was created with "dovecot/doc/mkcert.sh" and the relevant certificate file (can't recall its name at the moment).
Any help would be appreciated. On the other hand, If I went too far with this I apologize and I'll try to find another way to resolve this.
Thank you people,
s.