search for: principal_nam

...mech-gssapi.c dovecot-1.0.beta8.new/src/auth/mech-gssapi.c --- dovecot-1.0.beta8/src/auth/mech-gssapi.c 2006-09-18 17:35:02.000000000 -0500 +++ dovecot-1.0.beta8.new/src/auth/mech-gssapi.c 2006-09-18 17:37:46.000000000 -0500 @@ -101,7 +101,11 @@ gss_name_t gss_principal; principal_name = t_str_new(128); - str_append(principal_name, t_str_lcase(request->service)); + if(strcmp(request->service, "POP3") == 0) { + str_append(principal_name, "pop"); + } else { + str_append(principal_name, t_str_lcase(request->...

...em, so I dig into source code of gssapi module, "mech-gssapi.c". For versions 2.0.13 and 2.0.14 of dovecot I see there the following: ********* mech-gssapi.c ********* static OM_uint32 obtain_service_credentials(struct auth_request *request, gss_cred_id_t *ret_r) /* blah-blah-blah */ principal_name = t_str_new(128); str_append(principal_name, service_name); str_append_c(principal_name, '@'); str_append(principal_name, request->set->gssapi_hostname); auth_request_log_debug(request, "gssapi", "Obtaining credentials for %s", str_c(princ...

...ros tickets of the form imap at foobar.sfbay.sun.com Which I presume is their standard-- and probably not negotiable. However, the hostname of the machine is: "foobar", not foobar.sfbay.sun.com (as reported by gethostname(3c)). So when dovecot does this: mech-gssapi.c: principal_name = t_str_new(128); str_append(principal_name, service_name); str_append_c(principal_name, '@'); ---> str_append(principal_name, my_hostname); We wind up asking kerberos to look for a ticket for imap at foobar, instead of imap at foobar.sfbay.sun.com. Obviously we ca...

...4 config: <ldapserver id="dc1"> <hostname>dc1.my.domain</hostname> <base>CN=Users,DC=samba,DC=my,DC=domain</base> <replicate>1</replicate> <update>1</update> <auth_by_bind>1</auth_by_bind> <principal_name>CN=%s,CN=Users,DC=samba,DC=my,DC=domain</principal_name> <mapping> <firstname is="givenName" ></firstname> <surname is="sn" ></surname> <address is="streetAddress" >...

...$password $username' to synchronize with Kerberos Easier (not yet more secure though) way is creating a separate Kerberos principal with permissions for password change, saving the key (with ktadd -k "file") in separate keytab and using the key with kadmin -k -t /path/keytab -p "principal_name". Then "cpw user@DOMAIN" will change password for the user. The cpw command can be passed to kadmin via expect script or via STDIN (less secure though). > > this has the potential to work(I think)but... im missing a few parts.. can a script >like this synchronize passwor...

Can anyone direct me to a really good tutorial on Shibboleth integration with Rails, or indeed some sample code? I''ve been tearing my hair out all day on this one. Thanks RobL --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "Ruby on Rails: Talk" group. To post to this group, send email to