Re: How to make sync_client invoke STARTTLS for replication

2010-06-10 Thread Wesley Craig
On 10 Jun 2010, at 10:56, Rudy Gevaert wrote: > Please see attached file "bt" and bt2. The line offsets appear to be out of wack. Perhaps you'd be better off adding syslog() lines to the code for tracing purposes. :wes Cyrus Home Page: http://cyrusimap.web.cmu.edu/ Cyrus Wiki/FAQ: http://

Re: How to make sync_client invoke STARTTLS for replication

2010-06-10 Thread Rudy Gevaert
Hello Wesley, On 06/04/2010 10:32 PM, Wesley Craig wrote: And that's all? At a minimum, if authN is failing, you should get this syslog: if ((r = backend_authenticate(ret, prot,&mlist, userid, cb, auth_status))) { syslog(LOG_ERR,

Re: How to make sync_client invoke STARTTLS for replication

2010-06-04 Thread Wesley Craig
On 03 Jun 2010, at 04:38, Rudy Gevaert wrote: > master side: > Jun 3 10:39:12 cyrdev1 maild1/sync_client[3519]: starttls: TLSv1 with > cipher DHE-RSA-AES256-SHA (256/256 bits new client) no authentication > Jun 3 10:40:12 cyrdev1 maild1/sync_client[3519]: Doing a peer verify > Jun 3 10:40:12 cyr

Re: How to make sync_client invoke STARTTLS for replication

2010-06-03 Thread Rudy Gevaert
On 06/01/2010 03:53 PM, Wesley Craig wrote: > On 01 Jun 2010, at 05:09, Rudy Gevaert wrote: >> Can you tell me how to further troubleshoot, please? > > sync_client ought to syslog any error that backend_connect() gets. > Helo Wesley, Sorry, I forgot about reporting it: replica side: Jun 3 10:4

Re: How to make sync_client invoke STARTTLS for replication

2010-06-01 Thread Wesley Craig
On 01 Jun 2010, at 05:09, Rudy Gevaert wrote: > Can you tell me how to further troubleshoot, please? sync_client ought to syslog any error that backend_connect() gets. :wes Cyrus Home Page: http://cyrusimap.web.cmu.edu/ Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki List Archives/Info: h

Re: How to make sync_client invoke STARTTLS for replication

2010-06-01 Thread Rudy Gevaert
On 05/28/2010 09:37 PM, Wesley Craig wrote: > On 28 May 2010, at 09:09, Rudy Gevaert wrote: >>> https://bugzilla.andrew.cmu.edu/show_bug.cgi?id=3174 >> >> Thanks, for replying. But I'm not sure what you are saying with the >> above patches. > > If you apply the above fix and set allowplaintext

Re: How to make sync_client invoke STARTTLS for replication

2010-05-28 Thread Wesley Craig
On 28 May 2010, at 09:09, Rudy Gevaert wrote: >> https://bugzilla.andrew.cmu.edu/show_bug.cgi?id=3174 > > Thanks, for replying. But I'm not sure what you are saying with the > above patches. If you apply the above fix and set allowplaintext to "no" then sync_client will negotiate TLS and t

Re: How to make sync_client invoke STARTTLS for replication

2010-05-28 Thread Rudy Gevaert
Hello Wesley, On Wed, May 26, 2010 at 11:52:01AM -0400, Wesley Craig wrote: > >Has anybody been able to fix this? > > Define "fix". Well I meant, using enforcing TLS. For now I set allowplaintext, but would prefer not too. > If you have allowplaintext set, there's no reason to > use TLS. If

Re: How to make sync_client invoke STARTTLS for replication

2010-05-26 Thread Wesley Craig
On 26 May 2010, at 10:58, Rudy Gevaert wrote: > On 02/11/2010 11:53 PM, Rich Wales wrote: >> I'm running Cyrus 2.3.16 (with replication) between two Ubuntu >> servers. >> >> What do I have to do to make the "sync_client" application invoke >> STARTTLS >> when it connects to "sync_server" on the

Re: How to make sync_client invoke STARTTLS for replication

2010-05-26 Thread Rudy Gevaert
On 02/11/2010 11:53 PM, Rich Wales wrote: > I'm running Cyrus 2.3.16 (with replication) between two Ubuntu servers. > > What do I have to do to make the "sync_client" application invoke STARTTLS > when it connects to "sync_server" on the other host? > > I can invoke TLS when I use the "synctest" pr