Re: GSSAPI Authentication

[Dennis Putnam]

Hi Viktor, On Dec 14, 2009, at 2:10 PM, Victor Duchovni wrote: On Mon, Dec 14, 2009 at 01:55:07PM -0500, Dennis Putnam wrote: You are correct, it was indeed SMTP. Which "SMTP"? The server "smtpd" (as I surmised) or the client "smtp"? Sorry. Server. I thought about that but I can't find any references to it in the Postfx documentation. Postfix does not implement SASL GSSAPI, Cyrus SASL implements GSSAPI. So, Postfix does not document GSSAPI. We are using Dovecot. But sending mail, I don't think, goes through Dovecot but rather connects directly to SMTP port 25. So does not 'smtpd' have to do the authentication itself? Where do I look to specify that? If it simply uses mit.edu.Kerberos, that file is correct. This is not a "keytab" file, it is the equivalent of krb5.conf on MacOSX systems. This is an OS X (1.6) server. Since Apple hides a lot of that stuff, I don't know how Postfix finds that information. It may be that it can't find that file but again I don't see where to specify a path for it. Where did you deploy the keys for "smtp/<hostname>@REALM"? How did you tell Postfix where to look for the keys? That is my question. I didn't. I thought that happened as part of the server install. However, since it doesn't work, I obviously have to do something but I can't determine what from the documentation.    http://www.postfix.org/DEBUG_README.html#mail -- Viktor. Disclaimer: off-list followups get on-list replies or get ignored. Please do not ignore the "Reply-To" header. To unsubscribe from the postfix-users list, visit http://www.postfix.org/lists.html or click the link below: <mailto:majord...@postfix.org?body=unsubscribe%20postfix-users> If my response solves your problem, the best way to thank me is to not send an "it worked, thanks" follow-up. If you must respond, please put "It worked, thanks" in the "Subject" so I can delete these quickly. Dennis Putnam Sr. IT Systems Administrator  AIM Systems, Inc. 11675 Rainwater Dr., Suite 200 Alpharetta, GA  30009 Phone: 678-240-4112 Main Phone: 678-297-0700 FAX: 678-297-2666 or 770-576-1000 The information contained in this e-mail and any attachments is strictly confidential. If you are not the intended recipient, any use, dissemination, distribution, or duplication of any part of this e-mail or any attachment is prohibited. If you are not the intended recipient, please notify the sender by return e-mail and delete all copies, including the attachments.