|
Hi!
On Mon, Aug 16, 2010 at 9:23 PM, Simon Horman <horms@xxxxxxxxxxxx> wrote:
> On Fri, Aug 13, 2010 at 11:09:54AM -0430, Jose Ildefonso Camargo Tolosa wrote:
>
> [ snip ]
>>
>> Nothing new, except, maybe, the replication thing, Cyrus suggest the
>> use of Perdition (which can be very problematic, specially with
>> SSL/TLS related issues).
>
> Could you be more specific about what SSL/TLS (or other) issues you are
> concerned about? It would be good to get them fixed.
Concerned?... not anymore, I solved them when I had the issues, but it involved:
0. Make my LDAP server use LDAPv2 (actually, I created a replica on
the perdition server, and made *that one* accept LDAPv2).
1. Make perdition use ssl_outgoing/tls_all while connecting to real
server (because real server *required* SSL/TLS). This was a clearly
necessary step.
2. Make perdition ssl_no_cn_verify, because the certificate
verification failed from perdition to the real server (server was
valid, signed with internal CA, with correct name, but perdition
complained on cert, so, I just enabled this). This bothered my a
little, but fortunately perdition had an option for it.
3. Copy the capability string from real server to perdition's
imap_capability option, because some IMAP clients failed (I remember
eGroupWare's IMAP client, at the moment), so, not just a plain copy, I
had to remove a couple of options from the string.
I just took that from my Jun 2009 notes, when I had to implement it.
I just found perdition to be, maybe, too problematic, that's why I
have been trying to get the time to make Dovecot's proxy capabilities
work (which looks promising). Also, back then, perdition looked a
little abandoned (2 years since last release, back then, 1.17.1 was
the latest release). I see there have been serious work on it
recently so: that's good.
Sincerely,
Ildefonso Camargo
_______________________________________________
Please read the documentation before posting - it's available at:
http://www.linuxvirtualserver.org/
LinuxVirtualServer.org mailing list - lvs-users@xxxxxxxxxxxxxxxxxxxxxx
Send requests to lvs-users-request@xxxxxxxxxxxxxxxxxxxxxx
or go to http://lists.graemef.net/mailman/listinfo/lvs-users
|
