thr3ads.net - dovecot - GSSAPI authentication setup [Apr 2016]

If this information is useful, please help other people find it:
Share via:

Braden McDaniel

2016-Apr-18 05:13 UTC

GSSAPI authentication setup

On Sun, 2016-04-17 at 21:49 +0300, aki.tuomi at dovecot.fi
wrote:> > 
> > Did you check your setup against
> http://wiki2.dovecot.org/Authentication/Kerberos
I did. ?Of course, it's possible I've still managed to overlook
something.?
> Also can you provide klist -k on server?
I assume you mean the kerberos server:

    [    root at knock     ~]# klist -k
    Keytab name: FILE:/etc/krb5.keytab
    KVNO Principal
    ----
--------------------------------------------------------------------------
    ???2     host/knock.endoframe.net at ENDOFRAME.NET
???2 host/knock.endoframe.net at ENDOFRAME.NET
???2 host/knock.endoframe.net at ENDOFRAME.NET
???2 host/knock.endoframe.net at ENDOFRAME.NET
???2 host/knock.endoframe.net at ENDOFRAME.NET
???2 host/knock.endoframe.net at ENDOFRAME.NET
???4 host/rail.endoframe.net at ENDOFRAME.NET
???4 host/rail.endoframe.net at ENDOFRAME.NET
???4 host/rail.endoframe.net at ENDOFRAME.NET
???4 host/rail.endoframe.net at ENDOFRAME.NET
???4 host/rail.endoframe.net at ENDOFRAME.NET
???4 host/rail.endoframe.net at ENDOFRAME.NET
???3 nfs/rail.endoframe.net at ENDOFRAME.NET
???5 host/hinge.endoframe.net at ENDOFRAME.NET
???5 host/hinge.endoframe.net at ENDOFRAME.NET
???5 host/hinge.endoframe.net at ENDOFRAME.NET
???5 host/hinge.endoframe.net at ENDOFRAME.NET
???5 host/hinge.endoframe.net at ENDOFRAME.NET
???5 host/hinge.endoframe.net at ENDOFRAME.NET
???5 host/hinge.endoframe.net at ENDOFRAME.NET
???5 host/hinge.endoframe.net at ENDOFRAME.NET


-- 
Braden McDaniel <braden at endoframe.com>

aki.tuomi at dovecot.fi

2016-Apr-18 05:59 UTC

head link

GSSAPI authentication setup

> On April 18, 2016 at 8:13 AM Braden McDaniel <braden at
endoframe.com> wrote:
> 
> 
> On Sun, 2016-04-17 at 21:49 +0300, aki.tuomi at dovecot.fi wrote:
> > > 
> > > Did you check your setup against
> > http://wiki2.dovecot.org/Authentication/Kerberos
> 
> I did. ?Of course, it's possible I've still managed to overlook
> something.?
> 
> > Also can you provide klist -k on server?
> 
> I assume you mean the kerberos server:
> 
>     [    root at knock     ~]# 
> -- 
> Braden McDaniel <braden at endoframe.com>
Apologies, I ment your IMAP server.
---
Aki Tuomi

Braden McDaniel

2016-Apr-18 11:22 UTC

head link

GSSAPI authentication setup

On Mon, 2016-04-18 at 08:59 +0300, aki.tuomi at dovecot.fi
wrote:> > 
> > On April 18, 2016 at 8:13 AM Braden McDaniel <braden at
endoframe.com>
> > wrote:
> > 
> > 
> > On Sun, 2016-04-17 at 21:49 +0300, aki.tuomi at dovecot.fi wrote:
> > > 
> > > > 
> > > > 
> > > > Did you check your setup against
> > > http://wiki2.dovecot.org/Authentication/Kerberos
> > I did. ?Of course, it's possible I've still managed to
overlook
> > something.?
> > 
> > > 
> > > Also can you provide klist -k on server?
> > I assume you mean the kerberos server:
> > 
> > ????[????root at knock?????~]#?
> 
> Apologies, I ment your IMAP server.
    [    root at hinge     ~]# klist -k
    Keytab name: FILE:/etc/krb5.keytab
    KVNO Principal
    ----
--------------------------------------------------------------------------
    ???3     host/hinge.endoframe.net at ENDOFRAME.NET
???3 host/hinge.endoframe.net at ENDOFRAME.NET
???3 host/hinge.endoframe.net at ENDOFRAME.NET
???3 host/hinge.endoframe.net at ENDOFRAME.NET
???3 host/hinge.endoframe.net at ENDOFRAME.NET
???3 host/hinge.endoframe.net at ENDOFRAME.NET
???3 host/hinge.endoframe.net at ENDOFRAME.NET
???3 host/hinge.endoframe.net at ENDOFRAME.NET
???3 host/hinge.endoframe.net at ENDOFRAME.NET
???3 host/hinge.endoframe.net at ENDOFRAME.NET
???3 host/hinge.endoframe.net at ENDOFRAME.NET
???3 host/hinge.endoframe.net at ENDOFRAME.NET
???3 host/hinge.endoframe.net at ENDOFRAME.NET
???3 host/hinge.endoframe.net at ENDOFRAME.NET
???3 host/hinge.endoframe.net at ENDOFRAME.NET
???3 host/hinge.endoframe.net at ENDOFRAME.NET
???4 host/hinge.endoframe.net at ENDOFRAME.NET
???4 host/hinge.endoframe.net at ENDOFRAME.NET
???4 host/hinge.endoframe.net at ENDOFRAME.NET
???4 host/hinge.endoframe.net at ENDOFRAME.NET
???4 host/hinge.endoframe.net at ENDOFRAME.NET
???4 host/hinge.endoframe.net at ENDOFRAME.NET
???4 host/hinge.endoframe.net at ENDOFRAME.NET
???4 host/hinge.endoframe.net at ENDOFRAME.NET
???2 imap/hinge.endoframe.net at ENDOFRAME.NET
???2 imap/hinge.endoframe.net at ENDOFRAME.NET
???2 imap/hinge.endoframe.net at ENDOFRAME.NET
???2 imap/hinge.endoframe.net at ENDOFRAME.NET
???2 imap/hinge.endoframe.net at ENDOFRAME.NET
???2 imap/hinge.endoframe.net at ENDOFRAME.NET
???2 imap/hinge.endoframe.net at ENDOFRAME.NET
???2 imap/hinge.endoframe.net at ENDOFRAME.NET


-- 
Braden McDaniel <braden at endoframe.com>

dovecot - Apr 2016 - GSSAPI authentication setup

GSSAPI authentication setup

GSSAPI authentication setup

GSSAPI authentication setup