On 02/03/2012 03:01 AM, Dale Macartney wrote:
-----BEGIN PGP SIGNED MESSAGE-----
I am actually working on this very thing at the moment.
there is a very basic config here
(http://freeipa.org/page/Dovecot_Integration), however this is using pam
The end goal of course is sso in which I have managed to get gssapi for
authentication working and pam is used for the user lookups..
Here is what I have in a working state on rhel 6.2
In order to use GSSAPI authentication from dovecot directly, I only need
to set this:
auth_gssapi_hostname = hostname.example.com
auth_krb5_keytab = /etc/imap.keytab
auth_mechanisms = gssapi login
Freeipa-users mailing list