<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<div class="moz-cite-prefix">Hi again guys,<br>
<br>
thanks for the help thus far. I have managed to get cyrus talking
with exim to deliver mail (the -a inside the quotes did this) and
I have the cyrus_sasl driver authenticating using DIGEST-MD5:<br>
<blockquote><tt>digest_md5_sasl_server:</tt><br>
<tt> driver = cyrus_sasl</tt><br>
<tt> public_name = DIGEST-MD5</tt><br>
<tt> server_realm = chemainus.mjbrownloos.com</tt><br>
<tt> server_set_id = $auth1</tt><br>
<tt> .ifndef AUTH_SERVER_ALLOW_NOTLS_PASSWORDS</tt><br>
<tt> server_advertise_condition = ${if
eq{$tls_cipher}{}{}{*}}</tt><br>
<tt> .endif</tt><br>
</blockquote>
I can receive mail OK, exim passes it to cyrus and I can work with
mailboxes in Thunderbird however I don't seem to be able to
authenticate to the SMTP server when sending. Do I need to
specify a separate auth for sending through SMTP?<br>
<br>
If I turn on <b>AUTH_SERVER_ALLOW_NOTLS_PASSWORDS = yes</b> I can
send if I enable <b>login_sasl_server</b> but I'm sending
plaintext passwords. :-(<br>
<br>
If I turn off <b>AUTH_SERVER_ALLOW_NOTLS_PASSWORDS = yes</b> then
I cannot send using <b>login_sasl_server</b> because it obviously
needs an encrypted password but I keep getting the message relay
not permitted.<br>
<br>
If I disable login_sasl_server leaving only the <b>digest_md5_sasl_server</b>
I still get relay not permitted so it seems it's not
authenticating on send.<br>
<br>
If it can authenticate for IMAP using <b>digest_md5_sasl_server</b>
why would it fail when sending? <br>
<br>
regards<br>
<div class="moz-signature">
<div style="font-family:Arial;font-size:12px">
<p><strong>Paul O’Rorke</strong><br>
Tracker Software Products
<a href="mailto:paul.ororke@tracker-software.com">paul@tracker-software.com</a><br>
<br>
</p>
</div>
</div>
On 2/17/2014 12:42 AM, Vladislav Kurz wrote:<br>
</div>
<blockquote cite="mid:201402170942.36271.vladislav.kurz@webstep.net"
type="cite">
<meta name="qrichtext" content="1">
<style type="text/css">
p, li { white-space: pre-wrap; }
</style>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px;
margin-right:0px; -qt-block-indent:0; text-indent:0px;
-qt-user-state:0;">On Saturday 15 of February 2014 00:05:59 Paul
O'Rorke wrote:</p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px;
margin-right:0px; -qt-block-indent:0; text-indent:0px;
-qt-user-state:0;">> If I don't use any encrypted passwords I
can log in, work with</p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px;
margin-right:0px; -qt-block-indent:0; text-indent:0px;
-qt-user-state:0;">> mailboxes, receive mail but not send
(relay not permitted which I</p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px;
margin-right:0px; -qt-block-indent:0; text-indent:0px;
-qt-user-state:0;">> suspect is so as to not be an open
relay..?)</p>
<p style="-qt-paragraph-type:empty; margin-top:0px;
margin-bottom:0px; margin-left:0px; margin-right:0px;
-qt-block-indent:0; text-indent:0px; "> </p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px;
margin-right:0px; -qt-block-indent:0; text-indent:0px;
-qt-user-state:0;">You can always set relay_nets (using
"dpkg-reconfigure exim4-config") to your local subnet.</p>
<p style="-qt-paragraph-type:empty; margin-top:0px;
margin-bottom:0px; margin-left:0px; margin-right:0px;
-qt-block-indent:0; text-indent:0px; "> </p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px;
margin-right:0px; -qt-block-indent:0; text-indent:0px;
-qt-user-state:0;">> What do I need to do to authenticate
with the cyrus_sasl db? Why would</p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px;
margin-right:0px; -qt-block-indent:0; text-indent:0px;
-qt-user-state:0;">> the authenticator driver "cyrus_sasl"
not be available? Do I need to</p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px;
margin-right:0px; -qt-block-indent:0; text-indent:0px;
-qt-user-state:0;">> enable that somewhere?</p>
<p style="-qt-paragraph-type:empty; margin-top:0px;
margin-bottom:0px; margin-left:0px; margin-right:0px;
-qt-block-indent:0; text-indent:0px; "> </p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px;
margin-right:0px; -qt-block-indent:0; text-indent:0px;
-qt-user-state:0;">I'm not sure but check if you have installed
these packages:</p>
<p style="-qt-paragraph-type:empty; margin-top:0px;
margin-bottom:0px; margin-left:0px; margin-right:0px;
-qt-block-indent:0; text-indent:0px; "> </p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px;
margin-right:0px; -qt-block-indent:0; text-indent:0px;
-qt-user-state:0;">sasl2-bin, libsasl2-modules and
exim4-daemon-heavy (instead of -light).</p>
<p style="-qt-paragraph-type:empty; margin-top:0px;
margin-bottom:0px; margin-left:0px; margin-right:0px;
-qt-block-indent:0; text-indent:0px; "> </p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px;
margin-right:0px; -qt-block-indent:0; text-indent:0px;
-qt-user-state:0;">> I've read so many conflicting pages I've
completely confused myself.</p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px;
margin-right:0px; -qt-block-indent:0; text-indent:0px;
-qt-user-state:0;">> Maybe I should be looking at TLS/SSL
now...</p>
<p style="-qt-paragraph-type:empty; margin-top:0px;
margin-bottom:0px; margin-left:0px; margin-right:0px;
-qt-block-indent:0; text-indent:0px; "> </p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px;
margin-right:0px; -qt-block-indent:0; text-indent:0px;
-qt-user-state:0;">If you are on secure net, try setting
AUTH_SERVER_ALLOW_NOTLS_PASSWORDS = yes (in
conf.d/main/00_whatever), to allow plaintext auth.</p>
<p style="-qt-paragraph-type:empty; margin-top:0px;
margin-bottom:0px; margin-left:0px; margin-right:0px;
-qt-block-indent:0; text-indent:0px; "> </p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px;
margin-right:0px; -qt-block-indent:0; text-indent:0px;
-qt-user-state:0;">-- </p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px;
margin-right:0px; -qt-block-indent:0; text-indent:0px;
-qt-user-state:0;">S pozdravem</p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px;
margin-right:0px; -qt-block-indent:0; text-indent:0px;
-qt-user-state:0;"> Vladislav Kurz</p>
<p style="-qt-paragraph-type:empty; margin-top:0px;
margin-bottom:0px; margin-left:0px; margin-right:0px;
-qt-block-indent:0; text-indent:0px; "> </p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px;
margin-right:0px; -qt-block-indent:0; text-indent:0px;
-qt-user-state:0;">=== WebStep, s.r.o. (Ltd.) ========= a step
to the Web ===</p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px;
margin-right:0px; -qt-block-indent:0; text-indent:0px;
-qt-user-state:0;">address: Mezirka 1, 602 00 Brno, CZ, tel:
+420 548 214 711</p>
<p style=" margin-top:0px; margin-bottom:0px; margin-left:0px;
margin-right:0px; -qt-block-indent:0; text-indent:0px;
-qt-user-state:0;">=== <a class="moz-txt-link-abbreviated"
href="http://www.webstep.net">www.webstep.net</a> ======= <a
class="moz-txt-link-abbreviated"
href="mailto:vladislav.kurz@webstep.net">vladislav.kurz@webstep.net</a>
===</p>
<p style="-qt-paragraph-type:empty; margin-top:0px;
margin-bottom:0px; margin-left:0px; margin-right:0px;
-qt-block-indent:0; text-indent:0px; "> </p>
<p style="-qt-paragraph-type:empty; margin-top:0px;
margin-bottom:0px; margin-left:0px; margin-right:0px;
-qt-block-indent:0; text-indent:0px; "> </p>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">----
Cyrus Home Page: <a class="moz-txt-link-freetext" href="http://www.cyrusimap.org/">http://www.cyrusimap.org/</a>
List Archives/Info: <a class="moz-txt-link-freetext" href="http://lists.andrew.cmu.edu/pipermail/info-cyrus/">http://lists.andrew.cmu.edu/pipermail/info-cyrus/</a>
To Unsubscribe:
<a class="moz-txt-link-freetext" href="https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus">https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus</a></pre>
</blockquote>
<br>
</body>
</html>