Stephen --> info-cyrus (2004-08-13 10:09:32 +1200):
> I'm wondering if sasl_pwcheck_method in /etc/imapd.conf should be
> changed if one requires gssapi authentication. I tried setting it to
> "gssapi" but it didn't help. What should be value be?
Quoting imapd.conf(5):
sasl_pwcheck_method: <none>
The mechanism used by the server to verify plaintext
passwords. Possible values include "auxprop",
"saslauthd", and "pwcheck".
So you don't need to set sasl_pwcheck_method at all if you're going
to use GSSAPI authentication exclusively. However, if you need to
do plaintext authentication you should run saslauthd (-a kerberos5)
and set sasl_pwcheck_method to saslauthd.
> silver root # imtest -a cyrus -m login -p imap2 localhost
You can use "imtest -m gssapi ..." to test GSSAPI authentication.
HTH, Jukka
--
bashian roulette:
$ ((RANDOM%6)) || rm -rf ~
---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
