Re: Postfix-SASL-GSSAPI question

2009-11-02 Thread Victor Duchovni
On Sun, Nov 01, 2009 at 04:06:53PM +0330, Ali Majdzadeh wrote: > Thanks a lot for your help. I managed to solve the problem. By the way, have > you got any experiences about using kerberos as a pam module? Processes running as root can use kerberos as a PAM module, by obtaining and validating a s

Re: Postfix-SASL-GSSAPI question

2009-11-01 Thread Ali Majdzadeh
Viktor, Hello Thanks a lot for your help. I managed to solve the problem. By the way, have you got any experiences about using kerberos as a pam module? Kind Regards Ali Majdzadeh Kohbanani 2009/10/30 Ali Majdzadeh > Viktor, > Hi > Thanks for your guidance. Would please keep an eye on this thre

Re: Postfix-SASL-GSSAPI question

2009-10-30 Thread Ali Majdzadeh
Viktor, Hi Thanks for your guidance. Would please keep an eye on this thread? I am going to test the configuration using a properly configured GSSAPI client. Possibly, there will be much more questions to ask ;) Thank you so much. Kind Regards Ali Majdzadeh Kohbanani 2009/10/29 Victor Duchovni

Re: Postfix-SASL-GSSAPI question

2009-10-29 Thread Victor Duchovni
On Thu, Oct 29, 2009 at 07:11:54PM +0330, Ali Majdzadeh wrote: > Thanks for your mail. Among your experiences with Postfix, GSSAPI and > probably SASL, have you ever tested your configuration using telnet? If it > is so, would you please describe the procedure? According to your previous > mail, I

Re: Postfix-SASL-GSSAPI question

2009-10-29 Thread Ali Majdzadeh
Viktor, Hi Thanks for your mail. Among your experiences with Postfix, GSSAPI and probably SASL, have you ever tested your configuration using telnet? If it is so, would you please describe the procedure? According to your previous mail, I figured out that since I use telnet to test the configuratio

Re: Postfix-SASL-GSSAPI question

2009-10-29 Thread Victor Duchovni
On Thu, Oct 29, 2009 at 02:26:54PM +0330, Ali Majdzadeh wrote: > Thanks for your mail. Do you test the configuration using mail clients like > Thunderbird or something like that? If not, what do you actually use in > order to test the configuration? I have successfully performed GSSAPI authentica

Re: Postfix-SASL-GSSAPI question

2009-10-29 Thread Ali Majdzadeh
Viktor, Hello Thanks for your mail. Do you test the configuration using mail clients like Thunderbird or something like that? If not, what do you actually use in order to test the configuration? Kind Regards Ali Majdzadeh Kohbanani 2009/10/28 Victor Duchovni > On Wed, Oct 28, 2009 at 05:11:33PM

Re: Postfix-SASL-GSSAPI question

2009-10-28 Thread Victor Duchovni
On Wed, Oct 28, 2009 at 05:11:33PM +0330, Ali Majdzadeh wrote: > ehlo example.com > auth gssapi base 64 encoded userid The GSSAPI handshake does not work this way. > When I monitor the logs, I see the following failure messages: > warning: SASL authentication failure: GSSAPI Error: Invalid token

Postfix-SASL-GSSAPI question

2009-10-28 Thread Ali Majdzadeh
Hello All I have installed cyrus-SASL libraries to do GSSAPI-based authentication when interacting with Postfix. I have also installed and tested Kerberos. I can successfully test GSSAPI authentication using samples provided by SASL (sample-server and sample-client). I have created a service princi