On Fri, Feb 25, 2011 at 5:08 AM, Trever L. Adams wrote:
> Sorry for top posting, etc. The problem is common to Samba4 and AD. SPNs
> cannot login this way by design. I switched to using the UPN that the SPN is
> attached to. Problem solved. Thank you very much.
>
> Trever
>
Please add a [SOLVED]
@lists.fedoraproject.org
Sent: Mon, Feb 14, 2011 20:55:09 GMT+00:00
Subject: Re: LDAP/SASL/GSSAPI
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On 02/14/2011 11:20 AM, Trever L. Adams wrote:
Thank you. I am using Samba 4. The problem seems to be that I cannot
kinit -k -t /etc/dovecot/krb5.keytab smtp/fqdn_host@REALM
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On 02/14/2011 11:20 AM, Trever L. Adams wrote:
> Thank you. I am using Samba 4. The problem seems to be that I cannot
> kinit -k -t /etc/dovecot/krb5.keytab smtp/fqdn_host@REALM. I have the
> keytab. IT has that entry. I get kinit: Client 'smtp/fqdn_
On 02/10/2011 11:45 AM, Stephen Gallagher wrote:
>
> There's really no such thing as a non-expiring ticket. You always need
> to re-authenticate periodically to get a new ticket. Many deployments
> allow tickets to be "renewable", however. This means you can use your
> existing TGT to authenticate
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On 02/04/2011 03:32 PM, Trever L. Adams wrote:
> Hello everyone,
>
> I am having some difficulty. I am using dovecot. I have it working with
> LDAP as the backend for userdb. Unfortunately, the LDAP I am using is
> now requiring SASL binds (GSSAPI/Ker
Hello everyone,
I am having some difficulty. I am using dovecot. I have it working with
LDAP as the backend for userdb. Unfortunately, the LDAP I am using is
now requiring SASL binds (GSSAPI/Kerberos is what I am going for).
Dovecot uses OpenLDAP/Cyrus SASL (at least in Fedora). I can't seem to
b