Marco Gaiarin
2017-Nov-08 15:14 UTC
[Samba] Best practice for creating an RO LDAP User in AD...
Mandi! Rowland Penny via samba In chel di` si favelave...> Why don't you do what most people do, use kerberos. Create the user > with a random password, set password to never expire, set the users > shell to /bin/false. Now set exim to use kerberos (don't ask me how, I > don't use exim)Seems not possible: https://lists.exim.org/lurker/message/20120918.093204.bb65a97f.en.html -- dott. Marco Gaiarin GNUPG Key ID: 240A3D66 Associazione ``La Nostra Famiglia'' http://www.lanostrafamiglia.it/ Polo FVG - Via della Bontà , 7 - 33078 - San Vito al Tagliamento (PN) marco.gaiarin(at)lanostrafamiglia.it t +39-0434-842711 f +39-0434-842797 Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA! http://www.lanostrafamiglia.it/index.php/it/sostienici/5x1000 (cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA)
Rowland Penny
2017-Nov-08 15:34 UTC
[Samba] Best practice for creating an RO LDAP User in AD...
On Wed, 8 Nov 2017 16:14:20 +0100 Marco Gaiarin via samba <samba at lists.samba.org> wrote:> Mandi! Rowland Penny via samba > In chel di` si favelave... > > > Why don't you do what most people do, use kerberos. Create the user > > with a random password, set password to never expire, set the users > > shell to /bin/false. Now set exim to use kerberos (don't ask me > > how, I don't use exim) > > Seems not possible: > > https://lists.exim.org/lurker/message/20120918.093204.bb65a97f.en.html >It seems there is the heimdal_gssapi authenticator: https://www.exim.org/exim-html-current/doc/html/spec_html/ch-the_heimdalgssapi_authenticator.html Rowland
Marco Gaiarin
2017-Nov-08 16:11 UTC
[Samba] Best practice for creating an RO LDAP User in AD...
Mandi! Rowland Penny via samba In chel di` si favelave...> It seems there is the heimdal_gssapi authenticator: > https://www.exim.org/exim-html-current/doc/html/spec_html/ch-the_heimdalgssapi_authenticator.html...to auth against exim, not to have exim auth against an LDAP... -- dott. Marco Gaiarin GNUPG Key ID: 240A3D66 Associazione ``La Nostra Famiglia'' http://www.lanostrafamiglia.it/ Polo FVG - Via della Bontà , 7 - 33078 - San Vito al Tagliamento (PN) marco.gaiarin(at)lanostrafamiglia.it t +39-0434-842711 f +39-0434-842797 Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA! http://www.lanostrafamiglia.it/index.php/it/sostienici/5x1000 (cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA)