On Sun, Nov 01, 2009 at 04:06:53PM +0330, Ali Majdzadeh wrote: > Thanks a lot for your help. I managed to solve the problem. By the way, have > you got any experiences about using kerberos as a pam module?
Processes running as root can use kerberos as a PAM module, by obtaining and validating a service ticket for the host/<hostname>@REALM service in the system keytab. So if you want to have Postfix offer "PLAIN", utilizing a KDC as a password "oracle", you need a "root" co-process to validate passwords, which is what "saslauthd -a pam" is for. -- Viktor. Disclaimer: off-list followups get on-list replies or get ignored. Please do not ignore the "Reply-To" header. To unsubscribe from the postfix-users list, visit http://www.postfix.org/lists.html or click the link below: <mailto:majord...@postfix.org?body=unsubscribe%20postfix-users> If my response solves your problem, the best way to thank me is to not send an "it worked, thanks" follow-up. If you must respond, please put "It worked, thanks" in the "Subject" so I can delete these quickly.