Re: [Dovecot] Samba AD and Dovecot

2011-02-05 Thread Jason Gunthorpe
On Fri, Feb 04, 2011 at 01:47:31PM -0700, Trever L. Adams wrote: There was a thread a month or so ago on how to do GSSAPI with AD and dovecot kerberos. It works great, and I highly recommend it for AD sites. Check the archives, it isn't really too hard. I am not finding this. Do you happen

Re: [Dovecot] Samba AD and Dovecot

2011-02-05 Thread Trever L. Adams
Thank you Jason for your answer. This has helped a great deal. I haven't even gotten to the step of SSH yet. That will help me greatly. On 02/05/2011 06:53 PM, Jason Gunthorpe wrote: 5) Setup dovecot.. Set these things in the config auth_use_winbind = yes mechanisms = plain gssapi

Re: [Dovecot] Samba AD and Dovecot

2011-02-05 Thread Jason Gunthorpe
On Sat, Feb 05, 2011 at 08:39:37PM -0700, Trever L. Adams wrote: Set these things in the config auth_use_winbind = yes mechanisms = plain gssapi gss-spnego login ntlm Ok, I do this step differently as I use gssapi directly and not with winbind. This is also what this does.

[Dovecot] Samba AD and Dovecot

2009-10-06 Thread Trever L. Adams
Hello All, I haven't seen the answer to this, maybe I am just using the wrong searches. I have two queries related to this: 1) I have seen how to configure for LDAP and Kerberos. AD uses both together. All user information is in AD/LDAP and authentication is AD/Kerberos. How can I configure

Re: [Dovecot] Samba AD and Dovecot

2009-10-06 Thread Timo Sirainen
On Oct 7, 2009, at 12:36 AM, Trever L. Adams wrote: I haven't seen the answer to this, maybe I am just using the wrong searches. I have two queries related to this: 1) I have seen how to configure for LDAP and Kerberos. AD uses both together. All user information is in AD/LDAP and

Re: [Dovecot] Samba AD and Dovecot

2009-10-06 Thread Timo Sirainen
Ccing mailing list, since I'm not all-knowing.. On Oct 7, 2009, at 12:49 AM, Trever L. Adams wrote: Timo Sirainen wrote: On Oct 7, 2009, at 12:36 AM, Trever L. Adams wrote: 1) I have seen how to configure for LDAP and Kerberos. AD uses both together. All user information is in AD/LDAP and

Re: [Dovecot] Samba AD and Dovecot

2009-10-06 Thread Trever L. Adams
Timo Sirainen wrote: I really want to use kerberos/SPNEGO everywhere I can for various reasons. The LDAP would be for the configuration. Do you actually want the IMAP/POP3 clients to use Kerberos? For plaintext auth I don't see any benefit in Dovecot using Kerberos rather than LDAP (and it

Re: [Dovecot] Samba AD and Dovecot

2009-10-06 Thread Jason Gunthorpe
On Wed, Oct 07, 2009 at 12:57:21AM -0400, Timo Sirainen wrote: Ccing mailing list, since I'm not all-knowing.. On Oct 7, 2009, at 12:49 AM, Trever L. Adams wrote: Timo Sirainen wrote: On Oct 7, 2009, at 12:36 AM, Trever L. Adams wrote: 1) I have seen how to configure for LDAP and