Re: [exim] [exim-dev] Testing needed: heimdal_gssapi authent…

Top Page
Delete this message
Reply to this message
Author: Phil Pennock
Date:  
To: exim-dev, exim-users
Subject: Re: [exim] [exim-dev] Testing needed: heimdal_gssapi authenticator
On 2012-02-17 at 08:38 -0500, Phil Pennock wrote:
> I have:
>
> auth_gssapi:
>   driver        = heimdal_gssapi
>   public_name   = GSSAPI
>   server_hostname = smtp.spodhuis.org
>   server_realm  = SPODHUIS.ORG
>   server_keytab = /etc/kerberos/tabs/exim.keytab
>   server_set_id = $auth1


*cough* "server_realm" is unused and there doesn't seem to be anything
sane to do with it in GSSAPI; the concept exists in Kerberos, but really
any tickets for the specified principal in the keytab will be used.

So I'm removing that option.

Oops.

(Bright side: I found this while documenting the driver, thus there will
shortly exist documentation for this.)

-Phil