[Samba] [Solved] GSSAPI/Kerberos authenticate with Dovecot

L.P.H. van Belle belle at bazuin.nl
Wed Dec 12 15:50:31 UTC 2018


So tell us what did >> You << correct ? 
If you put it in the list mail everybody can enjoy from it ;-) 

Greetz, 

Louis

 

> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens 
> basti via samba
> Verzonden: woensdag 12 december 2018 16:44
> Aan: samba at lists.samba.org
> Onderwerp: Re: [Samba] [Solved] GSSAPI/Kerberos authenticate 
> with Dovecot
> 
> OK, for now it seem to work.
> 
> Server:   dovecot.my.fqdn.com
> Security: STARTTLS
> Auth:     Kerberos/GSSAPI
> 
> Possible Problems:
> 
> - Keytabfile (samba-tool delegation show dovecot\$) ?
> - IP as Servername
> - SSL/TLS Port 993 ?
> 
> Maybe someone can complete the wiki with thunderbird settings?
> 
> P.S.
> 
> Roland kinit -V5 DOVECOTUSER at MY.FQDN.COM did also work
> I use the samba wiki, dont know why only export 3 keys.
> 
> I have moved from samba NT4 domain to ad with debian update.
> can this be the reason?
> 
> On 12.12.18 16:34, Rowland Penny via samba wrote:
> > On Wed, 12 Dec 2018 16:18:30 +0100
> > basti via samba <samba at lists.samba.org> wrote:
> > 
> >>
> >>
> >> On 12.12.18 15:49, Rowland Penny via samba wrote:
> >>> What is your functional level ?
> >>
> >> What dowes you mean?
> >>
> > 
> > What is the functional level of your Active Directory Domain ?
> > You only showed 3 kerberos keys, this usually means functional level
> > 2003 or lower.
> > 
> > Rowland
> > 
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
> 




More information about the samba mailing list