Re: Cyrus IMAP + Client certificate authentication

"Ken Hornstein via SASL" <[email protected]> Wed, 02 Aug 2023 13:01:02 -0400
Newsgroups gmane.comp.security.cyrus.sasl
Message-ID <[email protected]>
>I'm looking for some information to setup cyrus imap authentication with=20
>client certificates. Anyone here to give me some advise? Tried to google=20
>ist but without success. Any help would be appreciated!!

I don't have a LOT of information about this.  But I was able to
convince myself that (a) it was possible, and (b) the "magic"
was mapping/authorizing a particular certificate subject to the
corresponding Cyrus account.  How that works I wasn't able to determine
but I didn't spend a lot of time on that part (this was just a
feasbility check to see if the plumbing existed).  This appears from the
SASL side using the EXTERNAL mechanism.  I realize that's not super
helpful.

--Ken

------------------------------------------
Cyrus: SASL
Permalink: https://cyrus.topicbox.com/groups/sasl/Tc3867934b82f1aa6-Md82550=
60b5f9de4cfd5c4c46
Delivery options: https://cyrus.topicbox.com/groups/sasl/subscription