Re: [Freeipa-users] Postfix and FreeIPA in a secure setup

2013-03-14 Thread Dale Macartney
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 03/13/2013 12:48 PM, Anthony Messina wrote: On Wednesday, March 13, 2013 12:41:05 PM Dale Macartney wrote: Silly mistake on my part. Simple perms issue with keytab file. Below is a working config of postfix with IPA user lookups and kerberos

Re: [Freeipa-users] Postfix and FreeIPA in a secure setup

2013-03-13 Thread Dale Macartney
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 03/12/2013 02:05 PM, Anthony Messina wrote: On Tuesday, March 12, 2013 08:53:59 AM Anthony Messina wrote: On Tuesday, March 12, 2013 01:50:47 PM Dale Macartney wrote: # Import environment for Kerberos v5 GSSAPI import_environment =

Re: [Freeipa-users] Postfix and FreeIPA in a secure setup

2013-03-12 Thread Dale Macartney
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 03/08/2013 02:34 PM, Anthony Messina wrote: On Friday, March 08, 2013 08:09:20 AM Loris Santamaria wrote: 2. Kerberos / GSSAPI (I heard SASL can be used here as well ) for authenticated SSO mail sending Create the service in ipa, ipa

Re: [Freeipa-users] Postfix and FreeIPA in a secure setup

2013-03-12 Thread Anthony Messina
On Tuesday, March 12, 2013 01:50:47 PM Dale Macartney wrote: # Import environment for Kerberos v5 GSSAPI import_environment = MAIL_CONFIG MAIL_DEBUG MAIL_LOGTAG TZ XAUTHORITY DISPLAY LANG=C KRB5_KTNAME=/etc/postfix/smtp.keytab

Re: [Freeipa-users] Postfix and FreeIPA in a secure setup

2013-03-12 Thread Anthony Messina
On Tuesday, March 12, 2013 08:53:59 AM Anthony Messina wrote: On Tuesday, March 12, 2013 01:50:47 PM Dale Macartney wrote: # Import environment for Kerberos v5 GSSAPI import_environment = MAIL_CONFIG MAIL_DEBUG MAIL_LOGTAG TZ XAUTHORITY DISPLAY

[Freeipa-users] Postfix and FreeIPA in a secure setup

2013-03-08 Thread Dale Macartney
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi all I've been reading through threads and threads of mailing lists and google search results on this but most of the documentation isn't very specific and is just vague enough for me not to make any progress. Would anyone be able to assist with

Re: [Freeipa-users] Postfix and FreeIPA in a secure setup

2013-03-08 Thread Loris Santamaria
I can help you with items #1 and #2: El vie, 08-03-2013 a las 08:56 +, Dale Macartney escribió: Hi all I've been reading through threads and threads of mailing lists and google search results on this but most of the documentation isn't very specific and is just vague enough for me not

Re: [Freeipa-users] Postfix and FreeIPA in a secure setup

2013-03-08 Thread Dale Macartney
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 03/08/2013 12:39 PM, Loris Santamaria wrote: I can help you with items #1 and #2: El vie, 08-03-2013 a las 08:56 +, Dale Macartney escribió: Hi all I've been reading through threads and threads of mailing lists and google search

Re: [Freeipa-users] Postfix and FreeIPA in a secure setup

2013-03-08 Thread Anthony Messina
On Friday, March 08, 2013 08:09:20 AM Loris Santamaria wrote: 2. Kerberos / GSSAPI (I heard SASL can be used here as well ) for authenticated SSO mail sending Create the service in ipa, ipa service-add smtp/myserver.mydomain.com. On the mail server you should obtain the keytab with

Re: [Freeipa-users] Postfix and FreeIPA in a secure setup

2013-03-08 Thread Dale Macartney
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 03/08/2013 02:34 PM, Anthony Messina wrote: On Friday, March 08, 2013 08:09:20 AM Loris Santamaria wrote: 2. Kerberos / GSSAPI (I heard SASL can be used here as well ) for authenticated SSO mail sending Create the service in ipa, ipa