[Dovecot] Kerberos GSSAPI - proper item name in keytab
Trever L. Adams
trever.adams at gmail.com
Wed Aug 31 20:49:12 EEST 2011
On 08/31/2011 10:30 AM, Nikolay Shopik wrote:
> Can you do kinit -k imap/imap/efim.test.local at ROMASHKA.LAN and then
> klist, does it work for you?
> I do recommend tcpdump kerberos traffic between your client and
> server, this is usually helps me much better then any logging, flow
> easy to read in wireshark.
Under active directory, you cannot kinit as an SPN, only UPN (including
MACHINE$ accounts). At least this is my experience.
"Selfishness is really self-destruction in slow motion." -— Elder Neal
A. Maxwell - Ensign, May 1999, 23
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 261 bytes
Desc: OpenPGP digital signature
More information about the dovecot