tobias/docker-offlineimap
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Allow transport-type tunnels to the IMAP servers

Browse Source 
It's nice to set up an ssh tunnel command which forwards an IMAP tcp
port inside an encrypted session, e.g. with ssh's "-W" flag.  In this
case the tunnelled connection still requires authentication inside
IMAP session, because this is transport-only tunnel that substitutes
normal TCP/SSL connection.

New directive, 'transporttunnel' was added: it specifies the command
that will create the tunnel.  Only one type of tunnel must be
specified for a single repository: we can't have both preauthenticated
and transport-type tunnels, they won't chain together.

From: Steve Purcell <steve@sanityinc.com>
Signed-off-by: Eygene Ryabinkin <rea@codelabs.ru>
This commit is contained in:
Steve Purcell
2013-05-03 14:56:20 +01:00
committed by Eygene Ryabinkin
parent acaa96291d
commit 968d5520da
4 changed files with 48 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

23
offlineimap.conf
View File

@ -365,6 +365,8 @@ remoteuser = username
#
# remote_identity = authzuser
########## Passwords
# There are six ways to specify the password for the IMAP server:
#
# 1. No password at all specified in the config file.
@ -408,6 +410,27 @@ remoteuser = username
########## Advanced settings
# Tunnels. There are two types:
#
# - preauth: they teleport your connection to the remote system
# and you don't need to authenticate yourself there; the sole
# fact that you succeeded to get the tunnel running is enough.
# This tunnel type was explained above in the 'Passwords' section.
#
# - transport: the just provide the transport (probably encrypted)
# to the IMAP server, but you still need to authenticate at the
# IMAP server.
#
# Tunnels are currently working only with IMAP servers and their
# derivatives (currently, GMail). Additionally, for GMail accounts
# preauth tunnel settings are ignored: we don't believe that there
# are ways to preauthenticate at Google mail system IMAP servers.
#
# You must choose at most one tunnel type, be wise M'Lord.
#
# preauthtunnel = ssh -q imaphost '/usr/bin/imapd ./Maildir'
# transporttunnel = openssl s_client -host myimap -port 993 -quiet
# Some IMAP servers need a "reference" which often refers to the "folder
# root". This is most commonly needed with UW IMAP, where you might
# need to specify the directory in which your mail is stored. The