On Wed, 2014-11-05 at 16:52 +0100, Harry Schmalzbauer wrote: > Bezüglich Hans Morten Kind's Nachricht vom 05.11.2014 16:48 (localtime): > > On Wed, Nov 05, 2014 at 04:22:12PM +0100, Harry Schmalzbauer wrote: > >> as soon as I set "disable_plaintext_auth = yes", AUTH=GSSAPI vanishes > >> from capabilities. > > Try setting login_trusted_networks to something you trust. >
root@mailbox1:/etc/dovecot/conf.d# doveconf auth_mechanisms auth_mechanisms = plain login gssapi root@mailbox1:/etc/dovecot/conf.d# doveconf disable_plaintext_auth disable_plaintext_auth = yes root@mailbox1:/etc/dovecot/conf.d# doveconf login_trusted_networks login_trusted_networks = a CAPABILITY * CAPABILITY IMAP4rev1 LITERAL+ SASL-IR LOGIN-REFERRALS ID ENABLE IDLE AUTH=PLAIN AUTH=LOGIN AUTH=GSSAPI Must be something else ... Check my attached config for differences. Cheer Jan -- MAX-PLANCK-INSTITUT fuer Radioastronomie Jan Behrend - Rechenzentrum ---------------------------------------- Auf dem Huegel 69, D-53121 Bonn Tel: +49 (228) 525 359, Fax: +49 (228) 525 229 jbehr...@mpifr-bonn.mpg.de http://www.mpifr-bonn.mpg.de
# 2.2.13: /etc/dovecot/dovecot.conf
# OS: Linux 3.2.0-4-amd64 x86_64 Debian 7.7 xfs
auth_gssapi_hostname = imap.mpifr-bonn.mpg.de
auth_krb5_keytab = /etc/krb5-ha.keytab
auth_mechanisms = plain login gssapi
auth_verbose = yes
default_process_limit = 1024
default_vsz_limit = 512 M
dict {
acl = mysql:/etc/dovecot/dovecot-dict-sql.conf.ext
}
doveadm_password = xxx
doveadm_port = 50222
listen = 134.104.18.77
lmtp_save_to_detail_mailbox = yes
mail_location = mdbox:/var/mail/%Ln/maildrop
mail_plugins = acl zlib notify replication
managesieve_notify_capability = mailto
managesieve_sieve_capability = fileinto reject envelope encoded-character
vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy
include variables body enotify environment mailbox date ihave imapflags notify
mdbox_rotate_size = 10 M
namespace mpifr_private {
inbox = yes
location =
prefix =
separator = .
}
namespace mpifr_shared {
inbox = no
list = children
location = mdbox:/var/mail/%%n/maildrop
prefix = shared.%%n.
separator = .
subscriptions = no
type = shared
}
passdb {
args = /etc/dovecot/dovecot-ldap-passdb.conf.ext
driver = ldap
}
plugin {
acl = vfile
acl_defaults_from_inbox = yes
acl_shared_dict = proxy::acl
mail_replica = tcp:192.168.42.173:50222
sieve = ~/.dovecot.sieve
sieve_after = /var/mail/global-after.sieve
sieve_dir = ~/sieve
sieve_extensions = +notify +imapflags
sieve_global_dir = /var/mail
zlib_save = gz
zlib_save_level = 6
}
protocols = " imap lmtp sieve pop3"
replication_dsync_parameters = -d -l 30 -U -n mpifr_private -n mpifr_shared
replication_max_conns = 6
service aggregator {
fifo_listener replication-notify-fifo {
user = vmail
}
unix_listener replication-notify {
user = vmail
}
}
service anvil {
client_limit = 8192
}
service auth {
client_limit = 8192
unix_listener auth-userdb {
group = vmail
user = vmail
}
}
service dict {
unix_listener dict {
group = vmail
user = vmail
}
}
service doveadm {
inet_listener {
address = 192.168.42.105
port = 50222
}
}
service imap-login {
process_min_avail = 5
service_count = 1
}
service imap {
vsz_limit = 512 M
}
service indexer-worker {
client_limit = 1
process_limit = 10
user = root
}
service lmtp {
inet_listener lmtp {
address = 134.104.18.105
port = 24
}
}
service managesieve-login {
inet_listener sieve {
address = 134.104.18.77
port = 4190
}
service_count = 1
}
service pop3-login {
process_min_avail = 5
}
service replicator {
process_min_avail = 1
unix_listener replicator-doveadm {
mode = 0666
}
}
ssl = required
ssl_cert = </etc/dovecot/imap.pem
ssl_cipher_list = ALL:HIGH:!SSLv2:!LOW:!EXP:!RC4:!MD5:!aNULL
ssl_key = </etc/dovecot/private/imap.key
ssl_protocols = !SSLv2 !SSLv3
userdb {
args = /etc/dovecot/dovecot-ldap-userdb.conf.ext
driver = ldap
}
verbose_proctitle = yes
protocol lmtp {
mail_plugins = acl zlib notify replication sieve
}
protocol imap {
imap_client_workarounds = tb-lsub-flags
mail_max_userip_connections = 20
mail_plugins = acl zlib notify replication imap_acl imap_zlib
ssl_cert = </etc/dovecot/imap.pem
ssl_key = </etc/dovecot/private/imap.key
}
protocol pop3 {
ssl_cert = </etc/dovecot/pop3.pem
ssl_key = </etc/dovecot/private/imap.key
}
smime.p7s
Description: S/MIME cryptographic signature
