Quoting Phil Pennock <[email protected]>:

... we now have the
`heimdal_gssapi` authentication driver, as of Exim 4.80.  If you have a
test environment which you can play with, I'd be interested in knowing
if that driver works with MIT at all, or if the extension truly is
Heimdal-specific.

It doesn't look to me like this kite will fly. When I tried to restart Exim with the required configuration, it gave me this error:

  authenticator auth_gssapi: cannot find authenticator driver "heimdal_gssapi"

This is probably due to a missing library, though I don't know which. I thought possibly libsasl2-modules-gssapi-heimdal, but a test showed that this was not the case. That particular library may still be necessary, but only after another one is installed first. Any idea?

Moreover, if libsasl2-modules-gssapi-heimdal really is necessary, then the idea will definitely not work, because this library conflicts with its MIT counterpart, which is essential for every MIT Kerberos client and server configuration. That in itself would mean that the heimdal_gssapi driver for Exim really is Heimdal-specific.

Cheers,

Jaap

--
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/

Reply via email to