Re: LDAP/SASL/GSSAPI

2011-02-25 Thread James McKenzie
On Fri, Feb 25, 2011 at 5:08 AM, Trever L. Adams wrote: > Sorry for top posting, etc. The problem is common to Samba4 and AD. SPNs > cannot login this way by design. I switched to using the UPN that the SPN is > attached to. Problem solved.  Thank you very much. > > Trever > Please add a [SOLVED]

Re: LDAP/SASL/GSSAPI

2011-02-25 Thread Trever L. Adams
@lists.fedoraproject.org Sent: Mon, Feb 14, 2011 20:55:09 GMT+00:00 Subject: Re: LDAP/SASL/GSSAPI -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 02/14/2011 11:20 AM, Trever L. Adams wrote: Thank you. I am using Samba 4. The problem seems to be that I cannot kinit -k -t /etc/dovecot/krb5.keytab smtp/fqdn_host@REALM

Re: LDAP/SASL/GSSAPI

2011-02-14 Thread Stephen Gallagher
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 02/14/2011 11:20 AM, Trever L. Adams wrote: > Thank you. I am using Samba 4. The problem seems to be that I cannot > kinit -k -t /etc/dovecot/krb5.keytab smtp/fqdn_host@REALM. I have the > keytab. IT has that entry. I get kinit: Client 'smtp/fqdn_

Re: LDAP/SASL/GSSAPI

2011-02-14 Thread Trever L. Adams
On 02/10/2011 11:45 AM, Stephen Gallagher wrote: > > There's really no such thing as a non-expiring ticket. You always need > to re-authenticate periodically to get a new ticket. Many deployments > allow tickets to be "renewable", however. This means you can use your > existing TGT to authenticate

Re: LDAP/SASL/GSSAPI

2011-02-10 Thread Stephen Gallagher
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 02/04/2011 03:32 PM, Trever L. Adams wrote: > Hello everyone, > > I am having some difficulty. I am using dovecot. I have it working with > LDAP as the backend for userdb. Unfortunately, the LDAP I am using is > now requiring SASL binds (GSSAPI/Ker

LDAP/SASL/GSSAPI

2011-02-04 Thread Trever L. Adams
Hello everyone, I am having some difficulty. I am using dovecot. I have it working with LDAP as the backend for userdb. Unfortunately, the LDAP I am using is now requiring SASL binds (GSSAPI/Kerberos is what I am going for). Dovecot uses OpenLDAP/Cyrus SASL (at least in Fedora). I can't seem to b