On 02/21/14 16:33 +0100, Willy Offermans wrote: >This sounds interesting. I thought that <TLSVerifyClient demand> in >slapd.conf was forcing this behavior. I like to read more about the >EXTERNAL mechanism. Do you recommend some reading? > >At the moment I will stick to PLAIN and play with replication, serving >multiple domains etc. A TLS primer would be the best place to start. A problem that you may encounter with EXTERNAL over STARTTLS, is that the username mapping process is not standardized, and is left up to the server implementation to perform. Cyrus imapd and slapd may do so in inconsistent ways. -- Dan White ---- Cyrus Home Page: http://www.cyrusimap.org/ List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ To Unsubscribe: https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus