Differences

This shows you the differences between two versions of the page.

--- doc:appunti:linux:sa:authdaemon_problem [2007/06/07 13:01] – external edit 127.0.0.1
+++ doc:appunti:linux:sa:authdaemon_problem [2019/04/03 18:59] (current) – niccolo
@@ Line 48: / Line 48: @@
 The problem was solved changing the Exim4 authenticator as suggested by the [[http://www.exim.org/eximwiki/FAQ/Policy_controls/Q0730|Exim FAQ]] (here my [[exim|actual config]]). Also upgrading to **courier-authdaemon 0.58-4** (Debian Etch) fixed the authdaemon bug.
+===== Crittografia TLS =====
+Per abilitare la crittografia TLS sulla connessione POP3 bisogna installare il pacchetto **courier-pop-ssl**, per verificare se TLS è disponibile basta eseguire il comando **''STLS''** dentro una sessione POP3, la risposta deve essere qualcosa del genere:
+<code>
++OK Hello there.
+STLS
++OK Begin SSL/TLS negotiation now.
+</code>
 ===== Tracing the Courier authdaemon socket =====
@@ Line 65: / Line 75: @@
 my $line;
 my $auth_string;
+if ( $#ARGV != 1 ) {
+    print "Usage: courier-authdaemon-test [login] [password]\n";
+    exit 1;
+}
 socket(SOCK, PF_UNIX, SOCK_STREAM, 0) || die "socket: $!";
 connect(SOCK, sockaddr_un($socket))   || die "connect: $!";
-$line = "exim\nlogin\n$login\n$pass\n";
+$line = "postfix\nlogin\n$login\n$pass\n";
 $line = length($line) . "\n" . $line;
 print "=== Send to socket:\n" . $line;
@@ Line 166: / Line 181: @@
 How to authenticate users with a login name like **user@doamain.org**, instead of the Unix system name (Debian GNU/Linux 4.0 Etch).
-Compile a password file **''/etc/courier/userdb''** with all the relevant information (**do not break the line!**):
+Create a password file **''/etc/courier/userdb''** with all the relevant information (**do not break the line!**):
 <file>
-info@2domain.org uid=1086|gid=1086|home=/home/info|shell=/bin/false
+info@2domain.org    uid=1086|gid=1086|home=/home/info|shell=/bin/false
     |systempw=$1$GiNkrEZX$UTOWQkZZf0pp2TEOuyEu1/|mail=/home/info/Maildir
 </file>
+**WARNING:** after the login name there must be a **tab character**, not spaces.
+Compile the file with **''makeuserdb''**.
 Add the **authuserdb** module to the **authmodulelist** into configuration file **''/etc/courier/authdaemonrc''**:
@@ Line 181: / Line 200: @@
 Reload the courier-authdaemon.
+===== Problema con dhparams.pem e SSL =====
+Facendo un aggiornamento Debian da Wheezy a Jessie la connessione cifrata SSL di IMAP e POP3 smette di funzionare. Pare che il problema sia nella lunghezza del file **''/etc/courier/dhparams.pem''**, che con la nuova versione deve essere di almeno 2048 bit. Nei file di log si trova:
+<file>
+couriertls: accept: error:14094417:SSL routines:SSL3_READ_BYTES:sslv3 alert illegal parameter
+</file>
+Vedere i due bug report: [[https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=787579|#787579]] e [[https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=741620|#741620]]. Per generare un file nuovo:
+<code>
+DH_BITS=2048 mkdhparams
+</code>
+oppure
+<code>
+cd /etc/courier/
+openssl dhparam -out dhparams.pem 2048
+</code>