[Dovecot] dovecot and AFS SOLVED

[Frank Cusack]

IP-based access is totally fine if that part of your network is
physically secure.  It sure solves a lot of headaches.

On 2/10/10 10:22 AM +0100 Per-Erik Persson wrote:
> Well, what you describe would be the correct and security  aware way of
> doing it.
>
> However since I am still testing i just did it the quick and dirty way.
> By adding the IP of the server handling the maildeliveries to the group
> called mail-writers which has permissions on every users Maildir.
> Something like "pts adduser 1.2.3.4 mail-writers" if I remeber correctly.
> In theory this would decrease the load on the kdc and the afs server, but
> in practice I don't know if it would be possible to measure a difference.
>
> On 02/10/2010 09:56 AM, Steffen Kaiser wrote:
>>
>> On Wed, 10 Feb 2010, Per-Erik Persson wrote:
>>
>>> I now have dovecots deliver (1.1.?)up and running and delivering
>>> mails to maildirs located on the AFS
>>
>>> So if anyone is wondering, I would say that AFS works as a backend
>>> for storing emails without any ugly patches.
>>
>> Do you have a local keytab and use an kerberos account, that may write
>> to any AFS volume, in order to run deliver?
>