[Dovecot] How to grant a kerberos ticket after successful imap authentication from dovecot

2011-03-31 Thread André Rodier
Hello everybody, I hope this question is appropriate for this list. Apologies if not. I am running a set of virtual machines under debian 6, to build a mail/collaboration server. I am mainly using dovecot, postfix, openldap and heimdal. Mails are stored using maildir, on a NFSv4 share. My

Re: [Dovecot] How to grant a kerberos ticket after successful imap authentication from dovecot

2011-03-31 Thread Timo Sirainen
On 31.3.2011, at 12.04, André Rodier wrote: How should I configure libpam (or dovecot ?) to initialise/receive a kerberos ticket after successful authentication ? I doubt this is possible. At least not directly via PAM authentication, because in Dovecot the authentication is done by a

Re: [Dovecot] How to grant a kerberos ticket after successful imap authentication from dovecot

2011-03-31 Thread André Rodier
Thanks, Timo. So, other questions: * Can I use a post login script to try to initialise the kerberos ticket ? * Can I write a dovecot plugin in C/C++ to do that, and in this case ? * If I use a plugin or a script, do I have access to the username / password ? * If I use a

Re: [Dovecot] How to grant a kerberos ticket after successful imap authentication from dovecot

2011-03-31 Thread Timo Sirainen
On 31.3.2011, at 17.32, André Rodier wrote: Thanks, Timo. So, other questions: * Can I use a post login script to try to initialise the kerberos ticket ? With v1.x yes, with v2.x no (because in v2.x it's again in a separate process to allow support for multiple clients per

Re: [Dovecot] How to grant a kerberos ticket after successful imap authentication from dovecot

2011-03-31 Thread André Rodier
On 31/03/2011 15:37, Timo Sirainen wrote: On 31.3.2011, at 17.32, André Rodier wrote: Thanks, Timo. So, other questions: * Can I use a post login script to try to initialise the kerberos ticket ? With v1.x yes, with v2.x no (because in v2.x it's again in a separate process to