<html><head></head><body><div style="color:#000; background-color:#fff; font-family:標楷體, dfkai-sb;font-size:16px"><div id="yui_3_16_0_ym19_1_1500561536133_4640">Hello Maxim,</div><div dir="ltr" id="yui_3_16_0_ym19_1_1500561536133_4641">is there any way with the stream module to get the authentication failures reported? As I did not get the authentication failure in my nginx log when using the stream module, I switched to the mail module. But my Backend speaks only IMAP-SSL, therefore this does not work.</div><div dir="ltr" id="yui_3_16_0_ym19_1_1500561536133_4642">Any help is appreciated,</div><div dir="ltr" id="yui_3_16_0_ym19_1_1500561536133_4643">Best regards,</div><div dir="ltr" id="yui_3_16_0_ym19_1_1500561536133_4644">Thomas<br></div><div id="yui_3_16_0_ym19_1_1500561536133_4645"><span></span></div> <div class="qtdSeparateBR"><br><br></div><div class="yahoo_quoted" style="display: block;"> <div style="font-family: 標楷體, dfkai-sb; font-size: 16px;"> <div style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 16px;"> <div dir="ltr"><font size="2" face="Arial"> Maxim Dounin <mdounin@mdounin.ru> schrieb am 15:59 Donnerstag, 20.Juli 2017:<br></font></div> <br><br> <div class="y_msg_container">Hello!<br clear="none"><div class="yqt5301113733" id="yqtfd56136"><br clear="none">On Thu, Jul 20, 2017 at 09:17:02AM +0000, tom via nginx wrote:<br clear="none"><br clear="none">> Hello list,<br clear="none">> I configured sucessfully the mail_proxy for nginx 1.10.2 von RHEL7, but authentication only succeeds if upstream server which is provided by the auth_http Server is cleartext, e.g. if the auth-server responds<br clear="none">> 2017/07/20 11:02:47 [debug] 9535#0: *49 mail auth http header: "Auth-Status: OK"<br clear="none">> 2017/07/20 11:02:47 [debug] 9535#0: *49 mail auth http header: "Auth-Server: 192.168.0.200"<br clear="none">> 2017/07/20 11:02:47 [debug] 9535#0: *49 mail auth http header: "Auth-Port: 143"<br clear="none">> then everything works fine, but having<br clear="none">> 2017/07/20 11:02:47 [debug] 9535#0: *49 mail auth http header: "Auth-Status: OK"<br clear="none">> 2017/07/20 11:02:47 [debug] 9535#0: *49 mail auth http header: "Auth-Server: 192.168.0.200"<br clear="none">> 2017/07/20 11:02:47 [debug] 9535#0: *49 mail auth http header: "Auth-Port: 993"<br clear="none">> 2017/07/20 11:02:47 [debug] 9535#0: *49 mail auth http header: "Auth-SSL: on"<br clear="none">> <br clear="none">> I get <br clear="none">> 2017/07/20 11:03:47 [info] 9535#0: *49 upstream timed out (110: Connection timed out) while connecting to upstream, client: 192.168.0.200, server: 0.0.0.0:10993, login: "<a shape="rect" ymailto="mailto:user@domain.com" href="mailto:user@domain.com">user@domain.com</a>", upstream: 192.168.0.200:993<br clear="none">> When I directly do a <br clear="none">> <br clear="none">> openssl s_client -connect 192.168.0.200:993 -crlf<br clear="none">> I am able to login with<br clear="none">> . login <a shape="rect" ymailto="mailto:user@domain.com" href="mailto:user@domain.com">user@domain.com</a> password<br clear="none">> <br clear="none">> Any help is appreciated.</div><br clear="none"><br clear="none">The "Auth-SSL" header is meaningful in auth_http requests, and <br clear="none">means that client used SSL. It doesn't mean anything in <br clear="none">auth_http responses.<br clear="none"><br clear="none">Moreover, connecting to SSL mail backends is not supported. If you <br clear="none">really need it, consider connecting to a tunnel wich will do SSL <br clear="none">for you - for example, the stream module can be configured to do <br clear="none">this.<br clear="none"><br clear="none">-- <br clear="none">Maxim Dounin<br clear="none"><a shape="rect" href="http://nginx.org/" target="_blank">http://nginx.org/</a><div class="yqt5301113733" id="yqtfd22826"><br clear="none"></div><br><br></div> </div> </div> </div></div></body></html>