SASL binds

2016-01-01 Thread Brendan Kearney
i am looking to get SASL binds working in Postfix for user, group and alias lookups, and i am not sure what i might be doing wrong. Postfix version - 3.0.3 running on Fedora 22. MIT Kerberos and OpenLDAP are being used. my ldap-users.cf file, for example: server_host = ldap://server1.bpk2.co

Re: SASL binds

2016-01-02 Thread Brendan Kearney
y, samba wil refres the keytab file. if someone want info on this, i can answere monday again. greetz, louis Op 1 jan. 2016 om 21:17 heeft Viktor Dukhovni het volgende geschreven: On Fri, Jan 01, 2016 at 02:46:33PM -0500, Brendan Kearney wrote: Postfix version - 3.0.3 running on Fedora 22.

Re: SASL binds

2016-01-04 Thread brendan kearney
, 2016 1:34 PM, "Quanah Gibson-Mount" wrote: > --On Saturday, January 02, 2016 12:00 PM -0500 Brendan Kearney < > bpk...@gmail.com> wrote: > > > Victor's script gets a Kerberos ticket every hour. it does not renew >> the existing ticket, it seems. my ticket

Re: SASL binds

2016-01-22 Thread Brendan Kearney
On 01/02/2016 01:30 PM, Viktor Dukhovni wrote: how does one tell postfix/submission what principal to use, when in a load balanced environment and the keytab differs from the smtp/$(uname -n)@REALM formula? A single keytab file can contain keys for multiple principals. On the Postfix side the s

proxy protocol

2016-09-25 Thread Brendan Kearney
i have postscreen and smtpd running on the same box as submission, and it seems i am missing something when trying to leverage proxy protocol. in my main.cf i have the lines: smtpd_upstream_proxy_protocol = haproxy ... postscreen_upstream_proxy_protocol = haproxy this seems to work, but after a

Re: automatic email account configuration, postfix pipelining restriction

2018-04-21 Thread Brendan Kearney
On 04/21/2018 07:59 PM, David Mehler wrote: Hello Viktor, Bingo! That did it. In the .xml file I changed ssl to encryption tls and it well got further than it did. I had some issues with smtpd* restrictions specifically helo restrictions, I commented them out. So outlook autodiscover is working,

[pfx] submission behind haproxy, need to use a specific principal in keytab

2023-10-30 Thread Brendan Kearney via Postfix-users
list members, i am setting up submission behind haproxy and want to use kerberos authentication via SASL.  i have setup saslauthd, configured postfix and submission and generated the keytab. because i want load balancing, the keytab has to match the name of the VIP on haproxy, not the individu

[pfx] Re: submission behind haproxy, need to use a specific principal in keytab

2023-10-31 Thread Brendan Kearney via Postfix-users
On 10/31/23 1:40 AM, Viktor Dukhovni via Postfix-users wrote: on Mon, Oct 30, 2023 at 08:19:16PM -0400, Brendan Kearney via Postfix-users wrote: I am setting up submission behind haproxy and want to use kerberos authentication via SASL. Do you mean *actual* Kerberos authentication (as in the