Re: Authenticate Cyrus off active directory

2003-12-04 Thread Trey Tabner
Alain, There are Cyrus IMAP specific parts in this document that you can use as a HOWTO. http://www.bynari.net/Resellers/docs/bynari_ad_integration.txt Thanks, Trey Alain Williams <[EMAIL PROTECTED]> writes: > On Thu, Dec 04, 2003 at 10:41:04AM -0600, Trey Tabner wrote: >> Alain, >> >> You

Re: Authenticate Cyrus off active directory

2003-12-04 Thread Mark Montague
On Thu, 4 Dec 2003, Rob Siemborski wrote: > > > The trick is that you need to get the user's kerberos ticket to the web > > > server, which we accomplish via a system known as pubcookie, which has > > > been developed by a few universities. Its sort of like > > > kerberos-via-cookies, though the

Re: Authenticate Cyrus off active directory

2003-12-04 Thread Rob Siemborski
On Thu, 4 Dec 2003, Kevin P. Fleming wrote: > I'd like to be able to do the same sort of thing; any chance these > changes are distributable (no support, i'm sure they're ugly, etc. etc.)? They're distributable, but they're mixed in with a number of local patches so it may be a bit obnoxious to d

Re: Authenticate Cyrus off active directory

2003-12-04 Thread Alain Williams
On Thu, Dec 04, 2003 at 10:41:04AM -0600, Trey Tabner wrote: > Alain, > > You can also set saslauthd.conf to authenticate against LDAP on the > AD server. You can use the autocreate patch at http://email.uoa.gr/ Hmmm, I shall try that since I seem to be getting nowhere using kerberos. The troubl

Re: Authenticate Cyrus off active directory

2003-12-04 Thread Kevin P. Fleming
Rob Siemborski wrote: Our webmail (squirrelmail) is doing kerberos authentication. We gutted the authentication part of squirrelmail and instead launch a persistant imtest process, which squirrelmail connects to instead (this was relatively easy to do, actually -- most of the changes that were re

Re: Authenticate Cyrus off active directory

2003-12-04 Thread Rob Siemborski
On Thu, 4 Dec 2003, Etienne Goyer wrote: > Because our 60K+ users base use a hodgepodge of IMAP client over which > we have no control. I am not quit sure our webmail (IMP) could be made to > authenticate via Kerberos either. Our webmail (squirrelmail) is doing kerberos authentication. We gutte

Re: Authenticate Cyrus off active directory

2003-12-04 Thread Etienne Goyer
On Thu, Dec 04, 2003 at 07:41:54AM +0100, Nikola Milutinovic wrote: > Why don't you user kerberized IMAP clients? Because our 60K+ users base use a hodgepodge of IMAP client over which we have no control. I am not quit sure our webmail (IMP) could be made to authenticate via Kerberos either. Als

Re: Authenticate Cyrus off active directory

2003-12-03 Thread Etienne Goyer
Hi, We are doing it using Kerberos. It's (relatively speaking) easy. First, read and follow the step described in http://www.microsoft.com/windows2000/techinfo/planning/security/kerbsteps.asp to make your Linux server interoperate with the AD KDC. Then set saslauthd to use Kerberos instead of P