On Wed, 22 Dec 2004, Aleksandar Milivojevic wrote:
Do you have a host/(hostname) key in the database?
OK, so I added host/hostname key. And the authentication against AD now works. I guess this step can't be skipped...
It can, but only if you edit source to use a different principal to do verification against, or use heimdal. heimdal's verify function uses the service in question, while the mit case builds a service principal with the relevant sname function and uses krb5_mk_req to do verification.
--- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
