Re: how to tunnel an imap connection over ssh

From: Dimitri Maziuk (dima_at_127.0.0.1)
Date: 05/20/05 

Date: Fri, 20 May 2005 03:07:08 +0000 (UTC)

Pete Phillips sez:
> Dimitri Maziuk wrote:
>> Pete Phillips sez:
>> ...
>>>I want to set up an ssh tunnel from my local host, through the firewall,
>>>through the file server so that the last part of the chain forwards to
>>>IMAP. The idea is that I can then point my mail reader to the localhost
>>>port and it will be able to authenticate to the imap server.
>>
>> Errm... what's wrong with generating a couple of SSL ceritficates
>> and doing imaps directly to the server?
>>
>> Dima
>
> simply because I haven't got my head around that yet ;-)
> I am going to have to get to grips with tls or similar!

Ah. I actually looked it up and there may be a problem with mapping
between sasl and ssl client cert. So I installed courier (I don't see
any advantage in not having user accounts on the server, and I do see
the advantage in not having to muck around with sasl).

Dima 

-- 
We're sysadmins. Sanity happens to other people.                  -- Chris King

Relevant Pages

  • Best way of combining POP SMTP IMAP and samba
    ... Also sasl and so on... ... My server should query all my mail accounts into separate user accounts. ... Another server running is based on SuSE Linux 7.2 but it's hardware is ...
    (linux.redhat)
  • Re: Need to add password authentication from desk/laptop to sendmail
    ... Rather than dynamically modifying the Access DB for the globally routable IP address that the client is coming from, permanently use the IP addresses allocated to the VPN IP pool. ... I.e. trust the IP addresses assigned to the VPN for relay through your server, much like an ISP would trust their dial up modem pool to relay through their server. ... This is what SASL and it's auth daemon are for. ...
    (comp.mail.sendmail)
  • Re: ldap + pam howto?
    ... The LDAP client usually just sends all data (passwords ... encrypts all the communication between the client and server. ... How do I make the client and server use SASL? ...
    (Debian-User)
  • Re: ldap + pam howto?
    ... in the clear to the LDAP server. ... SASL encrypts all the communication between the client and server. ...
    (Debian-User)
  • Re: About word-encoding (RFC2047) design
    ... You even got your example of "omitted initial client response in a mechanism that has no initial server challenge" in SMTP SASL mostly correct. ... You pointed to RFC 2595; that's needed to understand the PLAIN SASL mechanism. ... However, to get it right, it's also necessary to read RFC 4422 to understand the mechanics of challenge and response, and RFC 2554 to understand how SASL is implemented in SMTP. ...
    (comp.mail.misc)