Dovecot and IPA

[Kanwar Ranbir Sandhu]

On Mon, 2015-09-07 at 09:14 -0600, Manuel Delgado wrote:
> Hi Ranbir
> 
> I've worked with freeIPA a little, but without your doveconf or some other
> context information, it is difficult to identify the issue.

Crap...I meant to include that. Here's what it looks like when I enable
GSSAPI:


# 2.2.10: /etc/dovecot/dovecot.conf
# OS: Linux 3.10.0-229.11.1.el7.x86_64 x86_64 CentOS Linux release 7.1.1503 (Core)  
auth_default_realm = theinside.rnr
auth_gssapi_hostname = mailman02.theinside.rnr
auth_krb5_keytab = /etc/imap.keytab
auth_mechanisms = gssapi
auth_realms = theinside.rnr
hostname = imap.thesandhufamily.ca
listen = 1.1.0.0
mail_gid = virtual
mail_location = maildir:~/Maildir
mail_plugins = quota acl
mail_uid = virtual
managesieve_notify_capability = mailto
managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave
mbox_write_locks = fcntl
namespace {
  location = maildir:/var/spool/mail/thesandhufamily.ca/public
  prefix = Public.
  separator = .
  subscriptions = no
  type = public
}
namespace inbox {
  inbox = yes
  location = 
  mailbox Drafts {
    special_use = \Drafts
  }
  mailbox Junk {
    special_use = \Junk
  }
  mailbox Sent {
    special_use = \Sent
  }
  mailbox Trash {
    special_use = \Trash
  }
  prefix = 
}
plugin {
  acl = vfile
  quota = maildir:User quota
  quota_rule = *:storage=500M
  sieve = ~/.dovecot.sieve
  sieve_dir = ~/sieve
}
postmaster_address = postmaster@%d
protocols = imap lmtp
service auth-worker {
  user = $default_internal_user
}
service auth {
  inet_listener {
    address = 1.1.0.0
    port = 17900
  }
  unix_listener auth-userdb {
    group = virtual
    mode = 0600
    user = virtual
  }
}
service imap-login {
  process_min_avail = 5
}
service imap {
  process_limit = 10
}
service lmtp {
  inet_listener lmtp {
    address = 1.1.0.0
    port = 24
  }
}
ssl = required
ssl_cert = </etc/pki/dovecot/certs/dovecot.pem
ssl_key = </etc/pki/dovecot/private/dovecot.pem
userdb {
  args = uid=virtual gid=virtual home=/var/spool/mail/%d/%n/
  driver = static
}
verbose_proctitle = yes
protocol lmtp {
  mail_plugins = quota acl sieve
}
protocol lda {
  mail_plugins = quota acl sieve
}
protocol imap {
  mail_plugins = quota acl imap_quota imap_acl
}



-- 
Kanwar R.S. Sandhu