Displaying 3 results from an estimated 3 matches for "t_active_directori".
Did you mean:
t_active_directory
2018 Dec 12
5
GSSAPI/Kerberos authenticate with Dovecot
Hello,
I try to setup Dovecot with Kerberos/GSSAPI and use this howto:
https://wiki.samba.org/index.php/Authenticating_Dovecot_against_Active_Directory#Create_the_Dovecot_user_and_keytab
I also try https://wiki.dovecot.org/Authentication/Kerberos
I can login as windows user on win7 and access shares.
When I open Thunderbird I get the message:
"kerberos/gssapi ticket was not accepted"
2018 Dec 12
0
GSSAPI/Kerberos authenticate with Dovecot
Whats set for the server in its delegation?
sudo samba-tool delegation show dovecot\$
Run this on the DC, or add the -S YourDC.hostname
You need something like this:
samba-tool delegation for-any-service dovecot\$ on
Or setup for only imap, but cifs/nfs automounts may need this to.
After you've set it, i suggest, export the imap keytab again.
Not really sure if its needed, but if it does
2018 Dec 12
1
GSSAPI/Kerberos authenticate with Dovecot
Ah, i think whats going on here.
The wiki example and your are using different setup.
The wiki uses a separate account, and not the computer account like you.
Based on that wiki.
- install server + samba. ( already dont )
- join the domain. ( also done )
Good you said you have share access..
ln -sf /usr/local/samba/private/krb5.conf /etc/krb5.conf << not needed.
Just use the