[Freeipa-users] Dovecot IMAP with IPA 2.x?

[Robert Marcano]

On 02/03/2012 03:01 AM, Dale Macartney wrote:
>
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Hi Craig
>
> I am actually working on this very thing at the moment.
>
> there is a very basic config here
> (http://freeipa.org/page/Dovecot_Integration), however this is using pam
> for everything
>
> The end goal of course is sso in which I have managed to get gssapi for
> authentication working and pam is used for the user lookups..
>
> Here is what I have in a working state on rhel 6.2
>
> #####

In order to use GSSAPI authentication from dovecot directly, I only need 
to set this:

auth_gssapi_hostname = hostname.example.com
auth_krb5_keytab = /etc/imap.keytab
auth_mechanisms = gssapi login