[Dovecot] Outlook 2007 w/SPA, Active Directory (was NTLM failures with an interesting twist)

[Jason Gunthorpe]

On Sun, Aug 30, 2009 at 01:50:02AM +0100, Gavin Hamill wrote:
> Has anyone successfully configured the above to enable Single Sign-On? I
> would love to move away from Exchange but SSO is a corporate
> requirement.

I looked at this in some detail and concluded that the NTLM support on
Outlook 2007 was only for encryption, it was not using SPA. I couldn't
find a hidden registry setting or whatnot to switch it.

If you have a corporate support arrangement with MS, maybe ask them?
Many people would love an answer. Even a trace of outlook using SPA
with Exchange over IMAP would be interesting to see.

IMHO, clearly Dovecot is setup properly, Outlook Express works,
Thunderbird w/ SPA works, etc. I believe MS has deliberately decided
not to make SSO work in Outlook over IMAP specifically because that is
a must have feature for enterprises, so it only works over MAPI and
thus only with Exchange.

Jason