Displaying 20 results from an estimated 20 matches for "011gssapi".
2010 Oct 16
1
gssapi problems (postfix sasl through dovecot, dovecot imap working fine)
...tp. Both use pam_krb5 through pam to
authenticate clients that don't have kerberos, and for now smtp. When
trying to do smtp kerberos, I get the following:
postfix/smtpd[6197]: warning: CLIENT_FQDN[CLIENT_IP]: request longer
than 2048: AUTH GSSAPI ...
dovecot: auth: Debug: client in:
AUTH#0111#011GSSAPI#011service=smtp#011nologin#011lip=SERVER_IP#011rip=CLIENT_IP#011secured#011resp=<hidden>
dovecot: auth: Debug: gssapi(?,CLIENT_IP): Obtaining credentials for
smtp at MAILSERVER_FQDN
dovecot: auth: gssapi(?,CLIENT_IP): While processing incoming data:
Unspecified GSS failure. Minor code may pr...
2010 Sep 05
1
Problems setting up dovecot 2.0.1 with kerberos auth
...t> Connection closed.
This is in the logs:
Sep 5 18:56:47 oldbox dovecot: auth: Debug: Loading modules from
directory: /usr/lib/dovecot/modules/auth
Sep 5 18:56:47 oldbox dovecot: auth: Debug: auth client connected
(pid=27684)
Sep 5 18:56:58 oldbox dovecot: auth: Debug: client in:
AUTH#0111#011GSSAPI#011service=imap#011secured#011lip=127.0.0.1#011rip=127.0.0.1#011lport=143#011rport=33753
Sep 5 18:56:58 oldbox dovecot: auth: Debug: gssapi(?,127.0.0.1):
Obtaining credentials for imap at rohan
Sep 5 18:56:58 oldbox dovecot: auth: gssapi(?,127.0.0.1): While
acquiring service credentials: Unspecif...
2014 Jun 10
0
Dovecot Configuration for access with GSSAPI / Kerberos
...59:22.600354+02:00 highlands dovecot: auth: Debug: Module
loaded: /usr/lib64/dovecot/modules/auth/libmech_gssapi.so
2014-06-09T09:59:22.600982+02:00 highlands dovecot: auth: Debug: auth
client connected (pid=5770)
2014-06-09T09:59:22.602211+02:00 highlands dovecot: auth: Debug: client
in:
AUTH#0111#011GSSAPI#011service=imap#011session=E7rSlmL70wDAqEWd#011lip=mailServerIP#011rip=clientIP#011lport=143#011rport=46035
2014-06-09T09:59:22.602498+02:00 highlands dovecot: auth: Debug:
gssapi(?,clientIP,<E7rSlmL70wDAqEWd>): Obtaining credentials for
imap at dartmoor.outback
2014-06-09T09:59:22.610815+02:...
2016 Jul 02
5
Where is krb5.keytab or equivalent?
...cret.dat
> Jul 1 23:17:01 server dovecot: auth: Debug: passwd-file
> /etc/dovecot/passwd.masterusers: Read 0 users in 0 secs
> Jul 1 23:17:01 server dovecot: auth: Debug: auth client connected
> (pid=21490)
> Jul 1 23:17:04 server dovecot: auth: Debug: client in:
> AUTH#0111#011GSSAPI#011service=imap#011secured#011session=ldMkgpk2dAB/AAAB#011lip=127.0.0.1#011rip=127.0.0.1#011lport=143#011rport=39796#011resp=<hidden>
> Jul 1 23:17:04 server dovecot: auth: Debug:
> gssapi(?,127.0.0.1,<ldMkgpk2dAB/AAAB>): Using all keytab entries
> Jul 1 23:17:04 server dove...
2016 Jul 01
0
Where is krb5.keytab or equivalent?
.../var/run/dovecot/auth-token-secret.dat
Jul 1 23:17:01 server dovecot: auth: Debug: passwd-file
/etc/dovecot/passwd.masterusers: Read 0 users in 0 secs
Jul 1 23:17:01 server dovecot: auth: Debug: auth client connected
(pid=21490)
Jul 1 23:17:04 server dovecot: auth: Debug: client in:
AUTH#0111#011GSSAPI#011service=imap#011secured#011session=ldMkgpk2dAB/AAAB#011lip=127.0.0.1#011rip=127.0.0.1#011lport=143#011rport=39796#011resp=<hidden>
Jul 1 23:17:04 server dovecot: auth: Debug:
gssapi(?,127.0.0.1,<ldMkgpk2dAB/AAAB>): Using all keytab entries
Jul 1 23:17:04 server dovecot: auth: Debu...
2015 Apr 08
0
Authentication with Samba using Kerberos fails
...lib/dovecot/modules/auth/libmech_gssapi.so
Apr 8 11:49:18 server dovecot: auth: Debug: Read auth token secret from /var/run/dovecot/auth-token-secret.dat
Apr 8 11:49:18 server dovecot: auth: Debug: auth client connected (pid=17667)
Apr 8 11:49:18 server dovecot: auth: Debug: client in: AUTH#0111#011GSSAPI#011service=imap#011secured#011session=e8xMvSwTQgDAqCpl#011lip=192.168.1.1#011rip=192.168.1.101#011lport=143#011rport=49986
Apr 8 11:49:18 server dovecot: auth: Debug: gssapi(?,192.168.42.101,<e8xMvSwTQgDAqCpl>): Obtaining credentials for imap at server.corp.mydomain.com
Apr 8 11:49:18 serve...
2016 Jul 01
5
Where is krb5.keytab or equivalent?
I'm sure it will not work till you get that module build. :-)
Am 01.07.2016 um 20:53 schrieb Mark Foley:
> On Fri, 1 Jul 2016 11:55:20 +0200 Achim Gottinger <achim at ag-web.biz> wrote:
>
>> Do you have /usr/lib/dovecot/modules/auth/libmech_gssapi.so? Maybe at an
>> different location. On debian this comes with the dovecot-gssapi package.
> That module is nowhere
2016 Jul 02
0
Where is krb5.keytab or equivalent?
...1 23:17:01 server dovecot: auth: Debug: passwd-file
>> /etc/dovecot/passwd.masterusers: Read 0 users in 0 secs
>> Jul 1 23:17:01 server dovecot: auth: Debug: auth client connected
>> (pid=21490)
>> Jul 1 23:17:04 server dovecot: auth: Debug: client in:
>> AUTH#0111#011GSSAPI#011service=imap#011secured#011session=ldMkgpk2dAB/AAAB#011lip=127.0.0.1#011rip=127.0.0.1#011lport=143#011rport=39796#011resp=<hidden>
>> Jul 1 23:17:04 server dovecot: auth: Debug:
>> gssapi(?,127.0.0.1,<ldMkgpk2dAB/AAAB>): Using all keytab entries
>> Jul 1 23:17:04...
2013 Jun 27
0
NTLM authentication mechanism with Postfix
...----
---- log file from GSSAPI mechanism used -----
Jun 26 17:02:08 SBSMTPNV05 postfix/smtpd[2221]: connect from
nvit01b.mydomain.com[10.20.2.0]
Jun 26 17:02:08 SBSMTPNV05 dovecot: auth: Debug: auth client connected
(pid=2221)
Jun 26 17:02:08 SBSMTPNV05 dovecot: auth: Debug: client in:
AUTH#0111#011GSSAPI#011service=smtp#011nologin#011lip=10.20.4.12#011rip=10.20.2.0#011resp=YIIN....
Jun 26 17:02:08 SBSMTPNV05 dovecot: auth: Debug: ....g==
Jun 26 17:02:08 SBSMTPNV05 dovecot: auth: Debug: gssapi(?,10.20.2.0):
Obtaining credentials for smtp@
Jun 26 17:02:08 SBSMTPNV05 dovecot: auth: Debug:
gssapi(myuse...
2016 Jul 03
1
Where is krb5.keytab or equivalent?
...: passwd-file
>>>> /etc/dovecot/passwd.masterusers: Read 0 users in 0 secs
>>>> Jul 1 23:17:01 server dovecot: auth: Debug: auth client connected
>>>> (pid=21490)
>>>> Jul 1 23:17:04 server dovecot: auth: Debug: client in:
>>>> AUTH#0111#011GSSAPI#011service=imap#011secured#011session=ldMkgpk2dAB/AAAB#011lip=127.0.0.1#011rip=127.0.0.1#011lport=143#011rport=39796#011resp=<hidden>
>>>> Jul 1 23:17:04 server dovecot: auth: Debug:
>>>> gssapi(?,127.0.0.1,<ldMkgpk2dAB/AAAB>): Using all keytab entries
>>&...
2013 Jun 27
1
Dovecot NTLM Authentication
...----
---- log file from GSSAPI mechanism used -----
Jun 26 17:02:08 SBSMTPNV05 postfix/smtpd[2221]: connect from
nvit01b.mydomain.com[10.20.2.0]
Jun 26 17:02:08 SBSMTPNV05 dovecot: auth: Debug: auth client connected
(pid=2221)
Jun 26 17:02:08 SBSMTPNV05 dovecot: auth: Debug: client in:
AUTH#0111#011GSSAPI#011service=smtp#011nologin#011lip=10.20.4.12#011rip=10.20.2.0#011resp=YIIN....
Jun 26 17:02:08 SBSMTPNV05 dovecot: auth: Debug: ....g==
Jun 26 17:02:08 SBSMTPNV05 dovecot: auth: Debug: gssapi(?,10.20.2.0):
Obtaining credentials for smtp@
Jun 26 17:02:08 SBSMTPNV05 dovecot: auth: Debug:
gssapi(myuse...
2012 Dec 28
1
Kerberos/GSSAPI auth via .k5login file
...t/modules/auth/libauthdb_ldap.so
Dec 28 14:18:40 mail201212 dovecot: auth: Debug: passwd-file
/etc/dovecot/shared_users: Read 1 users in 0 secs
Dec 28 14:18:40 mail201212 dovecot: auth: Debug: auth client connected
(pid=11875)
Dec 28 14:18:41 mail201212 dovecot: auth: Debug: client in:
AUTH#0111#011GSSAPI#011service=imap#011secured#011session=1RaMgOnRZADAqCoq#011lip=192.168.43.100#011rip=192.168.42.42#011lport=993#011rport=55140
Dec 28 14:18:41 mail201212 dovecot: auth: Debug:
gssapi(?,192.168.42.42,<1RaMgOnRZADAqCoq>): Using all keytab entries
Dec 28 14:18:41 mail201212 dovecot: auth: Debug:...
2016 Jul 03
0
Where is krb5.keytab or equivalent?
...ot: auth: Debug: passwd-file
> >> /etc/dovecot/passwd.masterusers: Read 0 users in 0 secs
> >> Jul 1 23:17:01 server dovecot: auth: Debug: auth client connected
> >> (pid=21490)
> >> Jul 1 23:17:04 server dovecot: auth: Debug: client in:
> >> AUTH#0111#011GSSAPI#011service=imap#011secured#011session=ldMkgpk2dAB/AAAB#011lip=127.0.0.1#011rip=127.0.0.1#011lport=143#011rport=39796#011resp=<hidden>
> >> Jul 1 23:17:04 server dovecot: auth: Debug:
> >> gssapi(?,127.0.0.1,<ldMkgpk2dAB/AAAB>): Using all keytab entries
> >> J...
2016 Jul 02
0
Where is krb5.keytab or equivalent?
...: passwd-file
>>>> /etc/dovecot/passwd.masterusers: Read 0 users in 0 secs
>>>> Jul 1 23:17:01 server dovecot: auth: Debug: auth client connected
>>>> (pid=21490)
>>>> Jul 1 23:17:04 server dovecot: auth: Debug: client in:
>>>> AUTH#0111#011GSSAPI#011service=imap#011secured#011session=ldMkgpk2dAB/AAAB#011lip=127.0.0.1#011rip=127.0.0.1#011lport=143#011rport=39796#011resp=<hidden>
>>>> Jul 1 23:17:04 server dovecot: auth: Debug:
>>>> gssapi(?,127.0.0.1,<ldMkgpk2dAB/AAAB>): Using all keytab entries
>>&...
2016 Jun 30
2
Where is krb5.keytab or equivalent?
...ll "mutt".
I assume your windows account name is "mark"
~#kinit mark
~#MAIL=imap://mark at mail.hprs.local/ mutt
An successfull login with mutt looks like this in the mail logfile:
Debug: auth client connected (pid=22585)
logon-zor dovecot: auth: Debug: client in:
AUTH#0111#011GSSAPI#011service=imap#011secured#011session=p/ahQ4c2/wB/AAAB#011lip=127.0.0.1#011rip=127.0.0.1#011lport=143#011rport=44287#011resp=<hidden>
logon-zor dovecot: auth: Debug: gssapi(?,127.0.0.1,<p/ahQ4c2/wB/AAAB>):
Obtaining credentials for imap@
logon-zor dovecot: auth: Debug: gssapi(ag,127.0....
2016 Jul 01
3
Where is krb5.keytab or equivalent?
...s account name is "mark"
>
> ~#kinit mark
> ~#MAIL=imap://mark at mail.hprs.local/ mutt
>
> An successfull login with mutt looks like this in the mail logfile:
>
> Debug: auth client connected (pid=22585)
> logon-zor dovecot: auth: Debug: client in:
> AUTH#0111#011GSSAPI#011service=imap#011secured#011session=p/ahQ4c2/wB/AAAB#011lip=127.0.0.1#011rip=127.0.0.1#011lport=143#011rport=44287#011resp=<hidden>
> logon-zor dovecot: auth: Debug: gssapi(?,127.0.0.1,<p/ahQ4c2/wB/AAAB>):
> Obtaining credentials for imap@
> logon-zor dovecot: auth: Debug: g...
2016 Jul 01
0
Where is krb5.keytab or equivalent?
...s account name is "mark"
>
> ~#kinit mark
> ~#MAIL=imap://mark at mail.hprs.local/ mutt
>
> An successfull login with mutt looks like this in the mail logfile:
>
> Debug: auth client connected (pid=22585)
> logon-zor dovecot: auth: Debug: client in:
> AUTH#0111#011GSSAPI#011service=imap#011secured#011session=p/ahQ4c2/wB/AAAB#011lip=127.0.0.1#011rip=127.0.0.1#011lport=143#011rport=44287#011resp=<hidden>
> logon-zor dovecot: auth: Debug: gssapi(?,127.0.0.1,<p/ahQ4c2/wB/AAAB>):
> Obtaining credentials for imap@
> logon-zor dovecot: auth: Debug: g...
2016 Jul 01
0
Where is krb5.keytab or equivalent?
...>>
>> ~#kinit mark
>> ~#MAIL=imap://mark at mail.hprs.local/ mutt
>>
>> An successfull login with mutt looks like this in the mail logfile:
>>
>> Debug: auth client connected (pid=22585)
>> logon-zor dovecot: auth: Debug: client in:
>> AUTH#0111#011GSSAPI#011service=imap#011secured#011session=p/ahQ4c2/wB/AAAB#011lip=127.0.0.1#011rip=127.0.0.1#011lport=143#011rport=44287#011resp=<hidden>
>> logon-zor dovecot: auth: Debug: gssapi(?,127.0.0.1,<p/ahQ4c2/wB/AAAB>):
>> Obtaining credentials for imap@
>> logon-zor dovecot: aut...
2016 Jul 01
2
Where is krb5.keytab or equivalent?
...rk
>>> ~#MAIL=imap://mark at mail.hprs.local/ mutt
>>>
>>> An successfull login with mutt looks like this in the mail logfile:
>>>
>>> Debug: auth client connected (pid=22585)
>>> logon-zor dovecot: auth: Debug: client in:
>>> AUTH#0111#011GSSAPI#011service=imap#011secured#011session=p/ahQ4c2/wB/AAAB#011lip=127.0.0.1#011rip=127.0.0.1#011lport=143#011rport=44287#011resp=<hidden>
>>>
>>> logon-zor dovecot: auth: Debug: gssapi(?,127.0.0.1,<p/ahQ4c2/wB/AAAB>):
>>> Obtaining credentials for imap@
>>&...
2016 Jun 30
3
Where is krb5.keytab or equivalent?
Am 30.06.2016 um 23:16 schrieb Mark Foley:
> Achim, thanks a lot! A couple of questions on your suggested settings:
>
>> 1. Create an user
>> samba-tool create user dovcot
> I did this (actually `samba-tool user create dovecot`), but it asked for a password. I
> entered one. You didn't mention that, so I hope it's OK.
Yes
>
>
>> 2. Add the spn