On 16.08.2009 4:29, Timo Sirainen wrote:
On Fri, 2009-08-14 at 22:06 +0400, Nikolay Shopik wrote:
I've been trying to use Kerberos and PLAIN text file for authentication.
I've setup deliver in postfix master.cf and make sure correct username
are expanded but deliver is always told me "user unknown".
I can logon into mailbox using Kerberos w/o problems and can send
emails. Looks like Dovecot lookup up passwd files and not finding users
which are in Kerberos realm.
passdb:
driver: passwd-file
args: /etc/dovecot/passwd
What do the usernames look like in this file? Set auth_debug=yes, what
does deliver log then?
Usernames are with domain - [email protected]{plain}password in file
15:34:31 Info: auth(default): client in: AUTH 1 GSSAPI
service=IMAP lip=10.0.1.4 rip=1.1.107.157
15:34:31 Info: auth(default): gssapi(?,81.195.107.157): Obtaining
credentials for i...@pluto
15:34:31 Info: auth(default): client out: CONT 1
15:34:31 Info: auth(default): client in: CONT<hidden>
15:34:31 Info: auth(default): gssapi(?,1.1.107.157): security context
state completed.
15:34:31 Info: auth(default): client out: CONT 1
YIGCBgkqhkiG9xIBAgICAG9zMHGgAwIBBaEDAgEPomUwY6ADAgEXolwEWopE+RgkXAoy3StiEWS/b8J7060TbA+lNUzuY6tRtf3/cCPPbsnmaBbU8k2dlQ6MtNqL8XikW3tt25AK58x6yYKs6SH3ldkTlIBW36tJMplbdWgQqTSpY3ra6Q==
15:34:31 Info: auth(default): client in: CONT<hidden>
15:34:31 Info: auth(default): gssapi(?,1.1.107.157): Negotiated security
layer
15:34:31 Info: auth(default): client out: CONT 1
YDAGCSqGSIb3EgECAgIBEQD/////LPILd/RXG1o5TsKWu3XbHKx0vgAAAAAAAf///wE=
15:34:31 Info: auth(default): client in: CONT<hidden>
15:34:31 Info: auth(default): client out: OK 1 user=nshopik
15:34:31 Info: auth(default): master in: REQUEST 4 25904 1
15:34:31 Info: auth(default): master out: USER 4 nshopik uid=1001
gid=1001 home=/var/mail/store/nshopik
15:34:31 Info: imap-login: Login: user=<nshopik>, method=GSSAPI,
rip=1.1.107.157, lip=10.0.1.4
15:34:31 Info: auth(default): new auth connection: pid=25910
