Showing posts with label tls. Show all posts
Showing posts with label tls. Show all posts

Sunday, October 21, 2012

OpenLDAP + TLS on CentOS 6

Just what the subject says. Here are the guides that helped me:
http://www.server-world.info/en/note?os=CentOS_6&p=ldap
http://www.computerglitch.net/bin/texts/CentOS6_LDAP.php

If you want to include SAMBA:
http://shirker.blog.com/2012/01/20/ldap-samba-phpldapadmin-on-centos-6/

For PHPLDAPAdmin:
http://www.server-world.info/en/note?os=CentOS_6&p=ldap&f=4

I installed OpenLDAP for masochistic reasons. If you are doing an actual production deployment then seriously consider the 389 Directory Server in its place.

Tuesday, January 11, 2011

Postfix + Dovecot + SSL/TLS

Ok so I was trying the next step. After getting Postfix+Dovecot working with plain text authentication. I wanted to try TLS. I saw these errors:

warning: xsasl_cyrus_server_get_mechanism_list: no applicable SASL mechanisms
fatal: no SASL authentication mechanisms

Solutions is to yum install cyrus-sasl-plain

Here is the source

TLSv1 has deprecated SSLv3, and Dovecot seems to use it by default, but if that doesn't work then edit configuration files in /etc/dovecot/ directory.

Dovecot SSL Setup:
Dovecot SSL from Official Website
Here is another very useful HOWTO guide:
CentOS + Postfix + Dovecot + SASL + SSL

To check if SSL/TLS is being used:
openssl s_client -connect mail.platinumfactor.com:995
(Thanks to mick_laptop on #dovecot on Freenode for help in testing)