Author Topic: STARTTLS + SASL  (Read 5063 times)

Offline hellekin

  • Newbie
  • *
  • Posts: 2
STARTTLS + SASL
« on: October 30, 2006, 08:37:29 AM »
I've got a mail server that only accepts SASL authentication if STARTTLS is used. That means RC won't let me send email, although I can use it to read email. Of course, the server won't adapt to RC.

Feature request : TLS support for SASL.


Offline diego

  • Newbie
  • *
  • Posts: 4
Re: STARTTLS + SASL
« Reply #1 on: October 30, 2006, 03:24:23 PM »
Yes I need this feature too.

Edit

I have a solution, when You using Postfix and SASL with TLS, like me :)

edit the master.cf:
and uncomment or add this
Code: [Select]
# only used by postfix-tls
tlsmgr fifo - - n 300 1 tlsmgr
smtps inet n - n - - smtpd -o smtpd_tls_wrappermode=yes -o smtpd_sasl_auth_enable=yes
587 inet n - n - - smtpd -o smtpd_enforce_tls=yes -o smtpd_sasl_auth_enable=yes

restart postfix
u will see:
Code: [Select]
netstat -l
tcp    0   0 mail.testsystem.local:ssmtp  *:*           LISTEN
...postfix listen now on port 465 (ssmtp)

no edit the main.inc.php from RC
Code: [Select]
$rcmail_config['smtp_server'] = 'ssl://localhost';
$rcmail_config['smtp_port'] = 465;

and You will see, it works:
tail -f /var/log/mail.log | loco
Code: [Select]
Oct 30 22:07:17 mail postfix/smtpd[32039]: setting up TLS connection from localhost[127.0.0.1]
Oct 30 22:07:17 mail postfix/smtpd[32039]: TLS connection established from localhost[127.0.0.1]: TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)

or mybe it works when You are using "smptd_enforce_tls = yes"...