Debugging why KRB5_KTNAME isn't working
Jochen Kellner
jochen at jochen.org
Thu Jan 27 14:31:25 EST 2022
Greg Hudson <ghudson at mit.edu> writes:
> Of course, the program itself can provide configuration for the keytab
> file. I couldn't find any gss_ or krb5_ calls in the Postfix source
> code (looking at Viktor Dukhovni's git mirror), so I don't have any
> immediate insight as to whether that's currently possible or what would
> need to change.
I once configured postfix to uses sasl:
main.cf:83:smtpd_sasl_auth_enable = yes
And in /etc/postfix/sasl/smtpd.conf:
pwcheck_method: auxprop saslauthd
#pwcheck_method: saslauthd
mech_list: plain login gssapi
log_level: 0
keytab: /etc/smtp.keytab
That at least worked some time ago...
Jochen
--
This space is intentionally left blank.
More information about the Kerberos
mailing list