[Samba] [Solved] GSSAPI/Kerberos authenticate with Dovecot

[basti]

OK, for now it seem to work.

Server:   dovecot.my.fqdn.com
Security: STARTTLS
Auth:     Kerberos/GSSAPI

Possible Problems:

- Keytabfile (samba-tool delegation show dovecot\$) ?
- IP as Servername
- SSL/TLS Port 993 ?

Maybe someone can complete the wiki with thunderbird settings?

P.S.

Roland kinit -V5 DOVECOTUSER at MY.FQDN.COM did also work
I use the samba wiki, dont know why only export 3 keys.

I have moved from samba NT4 domain to ad with debian update.
can this be the reason?

On 12.12.18 16:34, Rowland Penny via samba wrote:
> On Wed, 12 Dec 2018 16:18:30 +0100
> basti via samba <samba at lists.samba.org> wrote:
> 
>>
>>
>> On 12.12.18 15:49, Rowland Penny via samba wrote:
>>> What is your functional level ?
>>
>> What dowes you mean?
>>
> 
> What is the functional level of your Active Directory Domain ?
> You only showed 3 kerberos keys, this usually means functional level
> 2003 or lower.
> 
> Rowland
>