On Thu, Apr 05, 2012 at 02:40:16PM -0700, Stephen Ingram wrote:
> Reading through some very old posts on the list it seems as though,
> although not very popular, it is possible to perform authentication in
> Postfix using GSSAPI. Setting up the keytab for the smtpd server seems
> straightforward enough, however, I'm unsure what to do when it comes
> to the smtp or lmtp client. I'm guessing that these services would
> require tickets to connect to another postfix instance or mail store
> like cyrus-imap, but there doesn't seem to be a way to obtain those
> tickets. Is something like a cron job for user postfix that obtains a
> ticket from an accessible keytab the best way to go or does Postfix
> have some other built-in means to kinit for the tickets?
I've done this. Perhaps Ben Rosengart who is now minding the shop
can describe the configuration if he's reading the list. I'll post
something later if he does not step forward. The basic idea is to
ensure that there is always a ticket in the client's credential
cache. This is done via a cron-job that runs "kinit -k ..." once
an hour.
--
Viktor.
