Re: SMTP SSO with Postfix, GSSAPI and Samba4 AD
[email protected] Fri, 1 Oct 2021 05:25:46 -0400
| Newsgroups | gmane.comp.security.cyrus.sasl |
|---|---|
| Message-ID | <[email protected]> |
Hello to all, I just realized that the keytab file generated by my AD samba4 server contains only the arcfour-hmac encryption. Do you think the problem could come from there? klist -Kek /etc/krb5.keytab Keytab name: FILE:/etc/krb5.keytab KVNO Principal ---- -------------------------------------------------------------------------- 2 host/[email protected] <mailto:[email protected]> (DEPRECATED:arcfour-hmac) (0x6c72cd7e9a4249b6fa67ca6c4624676e) 2 smtp/[email protected] <mailto:[email protected]> (DEPRECATED:arcfour-hmac) (0x6c72cd7e9a4249b6fa67ca6c4624676e) 2 smtpd/[email protected] <mailto:[email protected]> (DEPRECATED:arcfour-hmac) (0x6c72cd7e9a4249b6fa67ca6c4624676e) At the same time, on another server I just tested GSSAPI with an imap service and dovecot and it works just with this encryption. ------------------------------------------ Cyrus: SASL Permalink: https://cyrus.topicbox.com/groups/sasl/T1e24816c0d686c81-Mab370d019ad3a75b42144768 Delivery options: https://cyrus.topicbox.com/groups/sasl/subscription