On 05/06/2015 01:05 PM, Brendan Kearney wrote:
On 05/06/2015 12:39 PM, Quanah Gibson-Mount wrote:


--On May 6, 2015 at 12:14:35 PM -0400 brendan kearney <[email protected]>
wrote:


Will have to check.  Right now I only have the sync loglevel turned
on.  I assume something like the stats loglevel would show that?

Correct.

conn=2838 op=3 BIND authcid="imap/[email protected]"
authzid="imap/[email protected]"

conn=2838 op=3 BIND
dn="uid=imap/test.bpk2.com,ou=domainusers,ou=users,dc=bpk2,dc=com"
mech=GSSAPI sasl_ssf=56 ssf=56

vs

conn=2837 op=3 BIND dn="cn=server2,ou=computers,dc=bpk2,dc=com"
mech=GSSAPI sasl_ssf=56 ssf=56

conn=2837 op=3 BIND authcid="host/[email protected]"
authzid="host/[email protected]"
found it...

https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=761407

i needed to restart slapd to pick up the newly added mappings.

[root@test dovecot]# klist
Ticket cache: KEYRING:persistent:0:0
Default principal: imap/[email protected]

Valid starting       Expires              Service principal
05/06/2015 14:19:20  05/07/2015 14:19:20  krbtgt/[email protected]
        renew until 05/13/2015 14:19:20

[root@test dovecot]# ldapwhoami -h server1
SASL/GSSAPI authentication started
SASL username: imap/[email protected]
SASL SSF: 56
SASL data security layer installed.
dn:uid=mda,ou=processusers,ou=users,dc=bpk2,dc=com

and

[root@test postfix]# klist
Ticket cache: KEYRING:persistent:0:0
Default principal: smtp/[email protected]

Valid starting       Expires              Service principal
05/06/2015 14:22:28  05/07/2015 14:22:28  krbtgt/[email protected]
        renew until 05/13/2015 14:22:28

[root@test postfix]# ldapwhoami -h server2
SASL/GSSAPI authentication started
SASL username: smtp/[email protected]
SASL SSF: 56
SASL data security layer installed.
dn:uid=mta,ou=processusers,ou=users,dc=bpk2,dc=com

thanks,

brendan

Reply via email to