From: Alex Dehnert <adehnert@mit.edu>
Date: Wed, 31 Oct 2012 10:23:19 +0000 (-0400)
Subject: Enable GSSAPI/Kerberized IMAP
X-Git-Url: https://dehnerts.com/gitweb/?a=commitdiff_plain;h=62ea0507cc0ec50bc085ff8a5ae6fc5e1ff8314f;p=sysconfig%2Fdovecot.git

Enable GSSAPI/Kerberized IMAP

Whoo Kerberos. Whoo DEHNERTS.COM. (Actual change dates from a couple months
ago.)
---

diff --git a/conf.d/10-auth.conf b/conf.d/10-auth.conf
index d08f345..beb6f73 100644
--- a/conf.d/10-auth.conf
+++ b/conf.d/10-auth.conf
@@ -72,7 +72,7 @@
 # Kerberos keytab to use for the GSSAPI mechanism. Will use the system
 # default (usually /etc/krb5.keytab) if not specified. You may need to change
 # the auth service to run as root to be able to read this file.
-#auth_krb5_keytab = 
+auth_krb5_keytab = /etc/dovecot/imap.keytab
 
 # Do NTLM and GSS-SPNEGO authentication using Samba's winbind daemon and
 # ntlm_auth helper. <doc/wiki/Authentication/Mechanisms/Winbind.txt>
@@ -96,7 +96,7 @@
 #   plain login digest-md5 cram-md5 ntlm rpa apop anonymous gssapi otp skey
 #   gss-spnego
 # NOTE: See also disable_plaintext_auth setting.
-auth_mechanisms = plain
+auth_mechanisms = plain gssapi
 
 ##
 ## Password and user databases