[Dovecot] Samba AD and Dovecot

[Jason Gunthorpe]

On Sat, Feb 05, 2011 at 08:39:37PM -0700, Trever L. Adams wrote:

> > Set these things in the config
> >
> > auth_use_winbind = yes
> >
> >   mechanisms = plain gssapi gss-spnego login ntlm

> Ok, I do this step differently as I use gssapi directly and not with
> winbind.

This is also what this does. auth_use_winbind only affects gss-spnego
and ntlm which call out to the ntlm_auth helper to make it go. IMHO,
if you have AD you should set this up too.

> I use postfix instead of exim. How do you know what user is valid and
> what isn't in exim. I don't see any LDAP. I use LDAP (both postfix and
> dovecot deliver... I have to use LDAP for the aliases to be setup the
> way they have been requested). I also don't see any mention of any other
> user database.

In my simple world everything rides on nss_winbind and winbindd. These
instructions are just how to setup kerberos for authentication
not the much sticker authorization..

Jason