<div dir="ltr"><div><div><div><div>A couple of things here:<br><br></div>1. Since the IMAP server is on the same machine as roundcube (at leat that seems to be the case) you don't need SSL / TLS for IMAP connection. Not using it will make it faster<br><br></div>2. To my knowledge port 993 is deprecated and should not be used anymore. You should use port 143, which supports also starttls in case you need encrypted connection when the IMAP server and the client are not on the same machine.<br><br></div>Best regards<br></div>Enrico<br></div><div class="gmail_extra"><br><div class="gmail_quote">On 15 October 2014 00:01, Iman Nuraev <span dir="ltr"><<a href="mailto:nuraev@gmail.com" target="_blank">nuraev@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div>Enrico and Mariusz, thank you!<br><br></div>I've added rewrite rule and <Directory> from roundcubemail.conf to nss.conf. Now roundcube login screen displayed correctly, but every attempt of login ends with message "login failed".<br><br>/var/log/roundcubemail/userlogin contains only:<br>[14-Oct-2014 21:40:28,000000 +0200]: <1iafbkbb> Failed login for test.test@***.com from *** in session 1iafbkbbrhbrahv0g3lulv6c25 (error: 0)<br><br><br>/var/log/kolab/pykolab.log contains:<br><pre>2014-10-14 23:40:34,222 pykolab.imap WARNING
Could not connect to Cyrus IMAP server 'imaps://localhost:993'</pre>
<pre>2014-10-14 23:40:44,236 pykolab.imap WARNING
Could not connect to Cyrus IMAP server 'imaps://localhost:993'</pre>
<pre>2014-10-14 23:40:54,250 pykolab.imap WARNING
Could not connect to Cyrus IMAP server 'imaps://localhost:993'</pre> Check of imap (like it recommended in <a href="https://docs.kolab.org/howtos/secure-kolab-server.html" target="_blank">https://docs.kolab.org/howtos/secure-kolab-server.html</a>):<br><br># openssl s_client -showcerts -connect localhost:993<br>CONNECTED(00000003)<br>140562498885448:error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol:s23_clnt.c:766:<br>---<br>no peer certificate available<br>---<br>No client certificate CA names sent<br>---<br>SSL handshake has read 7 bytes and written 263 bytes<br>---<br>New, (NONE), Cipher is (NONE)<br>Secure Renegotiation IS NOT supported<br>Compression: NONE<br>Expansion: NONE<br>---<br><br><pre><strong>/etc/imapd.conf contains:<br><br>tls_cert_file: /etc/pki/tls/certs/*.com.crt<br>tls_key_file: /etc/pki/tls/private/*.com.key<br>tls_ca_file: /etc/pki/tls/certs/*.com.ca-chain.pem<br><br></strong></pre>Is there any solution?<br><br><div><br><br></div></div><div class="HOEnZb"><div class="h5"><div class="gmail_extra"><br><div class="gmail_quote">2014-10-14 11:00 GMT+04:00 Mariusz Piasecki <span dir="ltr"><<a href="mailto:mariusz.piasecki@extranet.pl" target="_blank">mariusz.piasecki@extranet.pl</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div bgcolor="#FFFFFF" text="#000000"><span>
<div>You should look to rewrite rule.
they're prepare for alias - hostname/webmail.<br>
<br>
W dniu 2014-10-10 o 23:32, Iman Nuraev pisze:<br>
</div>
</span><blockquote type="cite">
<div dir="ltr">
<div>
<div>
<div>Hello!<div><div><br>
I have trouble same to <a href="http://lists.kolab.org/pipermail/users/2014-September/017832.html" target="_blank">http://lists.kolab.org/pipermail/users/2014-September/017832.html</a>
, but have only nss.conf, not ssl.conf. I'm new to
apache. Can anybody explain what can i do to handle this
situation?<br>
</div></div></div>
Thank you!<br>
</div>
<br>
Best regards,<br>
</div>
Iman<br>
</div>
<br>
<fieldset></fieldset>
<br><span>
<pre>_______________________________________________
users mailing list
<a href="mailto:users@lists.kolab.org" target="_blank">users@lists.kolab.org</a>
<a href="https://lists.kolab.org/mailman/listinfo/users" target="_blank">https://lists.kolab.org/mailman/listinfo/users</a></pre>
</span></blockquote><span>
<br>
<br>
<pre cols="72">--
Pozdrawiam
[name] Mariusz Piasecki
[job] System Administrator
[e-mail] <a href="mailto:mariusz.piasecki@extranet.pl" target="_blank">mariusz.piasecki@extranet.pl</a>
[office] +48 56 61-97-520
[fax] +48 56 56 61-97-518
[www] <a href="http://www.extranet.pl" target="_blank">http://www.extranet.pl</a>
===============================
Jeżeli nie jest Pani/Pan adresatem tej wiadomości prosimy o poinformowanie nadawcy o jej otrzymaniu oraz niezwłoczne usunięcie treści wiadomości. Ta wiadomość może zawierać informacje poufne.
Uprzejmie informujemy, iż kopiowanie, ujawnianie, dystrybuowanie, udostępnianie lub inne wykorzystywanie wiadomości jest zabronione i może rodzić konsekwencje prawne dla osoby naruszającej zakaz.</pre>
</span></div>
<br>_______________________________________________<br>
users mailing list<br>
<a href="mailto:users@lists.kolab.org" target="_blank">users@lists.kolab.org</a><br>
<a href="https://lists.kolab.org/mailman/listinfo/users" target="_blank">https://lists.kolab.org/mailman/listinfo/users</a><br></blockquote></div><br></div>
</div></div><br>_______________________________________________<br>
users mailing list<br>
<a href="mailto:users@lists.kolab.org">users@lists.kolab.org</a><br>
<a href="https://lists.kolab.org/mailman/listinfo/users" target="_blank">https://lists.kolab.org/mailman/listinfo/users</a><br></blockquote></div><br></div>