On 02/03/2012 03:01 AM, Dale Macartney wrote:


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Craig

I am actually working on this very thing at the moment.

there is a very basic config here
(http://freeipa.org/page/Dovecot_Integration), however this is using pam
for everything

The end goal of course is sso in which I have managed to get gssapi for
authentication working and pam is used for the user lookups..

Here is what I have in a working state on rhel 6.2

#####

In order to use GSSAPI authentication from dovecot directly, I only need to set this:

auth_gssapi_hostname = hostname.example.com
auth_krb5_keytab = /etc/imap.keytab
auth_mechanisms = gssapi login

_______________________________________________
Freeipa-users mailing list
Freeipa-users@redhat.com
https://www.redhat.com/mailman/listinfo/freeipa-users

Reply via email to