On 16.08.2009 4:29, Timo Sirainen wrote:
On Fri, 2009-08-14 at 22:06 +0400, Nikolay Shopik wrote:
I've been trying to use Kerberos and PLAIN text file for authentication. I've setup deliver in postfix master.cf and make sure correct username are expanded but deliver is always told me "user unknown". I can logon into mailbox using Kerberos w/o problems and can send emails. Looks like Dovecot lookup up passwd files and not finding users which are in Kerberos realm.
passdb: driver: passwd-file args: /etc/dovecot/passwd
What do the usernames look like in this file? Set auth_debug=yes, what does deliver log then? Usernames are with domain - shopik@inblock.ru{PLAIN}password in file
15:34:31 Info: auth(default): client in: AUTH 1 GSSAPI service=IMAP lip=10.0.1.4 rip=1.1.107.157 15:34:31 Info: auth(default): gssapi(?,81.195.107.157): Obtaining credentials for imap@pluto 15:34:31 Info: auth(default): client out: CONT 1 15:34:31 Info: auth(default): client in: CONT<hidden> 15:34:31 Info: auth(default): gssapi(?,1.1.107.157): security context state completed. 15:34:31 Info: auth(default): client out: CONT 1 YIGCBgkqhkiG9xIBAgICAG9zMHGgAwIBBaEDAgEPomUwY6ADAgEXolwEWopE+RgkXAoy3StiEWS/b8J7060TbA+lNUzuY6tRtf3/cCPPbsnmaBbU8k2dlQ6MtNqL8XikW3tt25AK58x6yYKs6SH3ldkTlIBW36tJMplbdWgQqTSpY3ra6Q== 15:34:31 Info: auth(default): client in: CONT<hidden> 15:34:31 Info: auth(default): gssapi(?,1.1.107.157): Negotiated security layer 15:34:31 Info: auth(default): client out: CONT 1 YDAGCSqGSIb3EgECAgIBEQD/////LPILd/RXG1o5TsKWu3XbHKx0vgAAAAAAAf///wE= 15:34:31 Info: auth(default): client in: CONT<hidden> 15:34:31 Info: auth(default): client out: OK 1 user=nshopik 15:34:31 Info: auth(default): master in: REQUEST 4 25904 1 15:34:31 Info: auth(default): master out: USER 4 nshopik uid=1001 gid=1001 home=/var/mail/store/nshopik 15:34:31 Info: imap-login: Login: user=<nshopik>, method=GSSAPI, rip=1.1.107.157, lip=10.0.1.4 15:34:31 Info: auth(default): new auth connection: pid=25910