Re: Re: Kerberos

Hello Vladimir,

Wednesday, May 18, 2005, 11:35:56 AM, you wrote:

VAB> On Wed, 18 May 2005 11:31:38 +0400
VAB> "Sadmin" <CGatePro@mx.ru> wrote:

>>>>
>> ktpass -princ service/domainName@REALMNAME -mapuser cgatepro -pass
>>password -out keytab.data -crypto DES-CBC-MD5 -ptype KRB5_NT_SRV_HST -kvno
>>0
>>
>> а domainName может быть быть алиасом для домена CGP?

VAB> To support Kerberos Authentication, you need to add Kerberos Server key(s)
VAB> to the CommuniGate Pro Server, on the per-domain basis. Create a server
VAB> "principal" in your KDC database. The principal name should be equal to the
VAB> name of CommuniGate Pro Domain or one of its Domain Aliases. Export the
VAB> created key as a keytab file.

Виноват, невнимательно прочел, буду исправляться. Однако в логах следующее:

11:38:54.10 5 IMAP-00182([172.16.0.241]) inp: 00000001 AUTHENTICATE GSSAPI YIIEtgYJKoZIhvcSAQICAQBuggSlMIIEoaADAgEFoQMCAQ6iBwMFACAAAACjggPRYYIDzTCCA8mgAwIBBaEQGw5JTVBBQ1RTT0ZULkVUSKIeMBygAwIBAqEVMBMbBGltYXAbC21haWwtc2VydmVyo4IDjjCCA4qgAwIBA6EDAgEDooIDfASCA3g9cBjrPN9HaIXUQA6qjxaf+rml9XhcY2UmN6+I8DU1K
11:38:54.10 4 IMAP-00182([172.16.0.241]) SASL(GSSAPI) ini: 60 82 04 B6 06 09 2A 86 48 86 F7 12 01 02 02 01 00 6E 82 04 A5 30 82 04 A1 A0 03 02 01 05 A1 03 02 01 0E A2 07 03 05 00 20 00 00 00 A3 82 03 D1 61 82 03 CD 30 82 03 C9 A0 03 02 01 05 A1 10 1B 0E 49 4D 50 41 43 54 53 4F 46 54 2E 45 54 48 A2
11:38:54.10 1 DOMAIN(*) Kerberos key imap/mail-server@REALM.ETH encType=3 v=3 not found

-- 
Best regards,
 Sadmin                            mailto:f_tmp@inbox.ru