Outlook 2016 SSO with GSSAPI auth?

Jerry jerry at seibercom.net
Wed Oct 25 20:00:06 EEST 2017


On Tue, 24 Oct 2017 16:59:51 -0500, Robert Giles stated:

>Hi folks,
>
>I've been sifting through various threads on GSSAPI and NTLM support, 
>and I'm wondering if anyone out there can confirm or deny GSSAPI IMAP 
>auth support in Microsoft Outlook 2016 (Windows)?  Perhaps there's some 
>magic registry key to change IMAP auth from PLAIN to GSSAPI?
>
>We're trying to do single sign-on + e-mail for Windows domain users; 
>Thunderbird GSSAPI works fine, of course, but Outlook 2016 is the 
>policy-mandated e-mail client for this particular environment (Windows 
>10 client desktop, Windows Server 2012 R2 AD, RHEL7 Dovecot).
>
>It seems that Outlook 2016 might also support NTLMv1 / GSS-SPNEGO out of 
>the box for IMAP accounts, but NTLMv1 is - rightly - disabled in this 
>environment (and I also see 'NT_STATUS_UNSUCCESSFUL' reported by 
>/usr/bin/ntlm_auth back to the Dovecot auth worker).
>
>Thanks for any ideas out there!

In the past, I have had pretty good success posting a question regarding MS
Outlook on these tech forums.

https://social.technet.microsoft.com/Forums/office/en-us/home?forum=outlook

https://answers.microsoft.com/en-us/msoffice/forum?tab=all&auth=1

YMMV of course.

Jerry


More information about the dovecot mailing list