On Mon, 2022-08-29 at 11:26 +0200, Stefan Kania via samba
wrote:>
> Am 29.08.22 um 11:19 schrieb Rowland Penny via samba:
> > Then consider using kerberos instead, it is much more 'the word we
> > will
> > not use' :-)
> We would like to, but dovecot can't use Kerberos to query the LDAP
> from
> AD :-(
I know it has been sometime since I set up a mailserver, but dovecot
could use kerberos the last time I did. A quick internet search turned
this up:
https://wiki.dovecot.org/Authentication/Kerberos#:~:text=Dovecot%20supports%20Kerberos%205%20using%20GSSAPI.%20The%20Kerberos,Microsoft%20Active%20Directory%2C%20LDAP%20is%20pretty%20good%20choice.
This was top of the list, there were others, 3,980,000 to be precise.
Rowland