On Aug 16, 2009, at 3:14 AM, Nikolay Shopik wrote:

I don't know much about Kerberos, so I've no idea what would be the
proper way to solve this.


A) This means I have to keep file with all username which are exist in Kerberos realm? This is little confusing because http://wiki.dovecot.org/Authentication/Kerberos says I may not have passdb at all. Also I don't wanna any password to be keeped for Kerberos users here.

Right. It's not the passdb that deliver cares. It's the userdb. But since you're using static userdb, deliver looks up the user's existence from passdb. Of course if you already verify in your MTA that all the users are valid, you can just add allow_all_users=yes to static userdb args.

Reply via email to