kerbolized virtual domains.

[Mark Hannessen]

On Thursday 16 December 2004 16:08, you wrote:
> On Thu, 16 Dec 2004, Mark Hannessen wrote:
> > hi list,
> >
> > I am currently running a basic kerberos/cyrus imap server
> >
> > kerberos principle (realm KERBEROS)
> > mark at KERBEROS
> >
> > cyrus user:
> > user.mark
> >
> > I use mutt with GSSAPI and the following config.
> >
> > set spoolfile=imap://xp2600c.linuxnet.nl/inbox
> > set folder=imap://xp2600c.linuxnet.nl/inbox
> > set imap_user="mark"
> >
> > this setup works, but it doesn't support virtual domains.
> >
> > I tried adding user.mark at nperfection.com to cyrus imap instead of
> > user.mark but after doing that login fails, and I can't create enties in
> > kerberos like mark at nperfection.com@KERBEROS (that's a DUHHH... i know..)
>
> There is nothing wrong with this principal from the rfc standpoint.  I
> would consider this a bug in cyrus-sasl.

well, the problem is more like:
how do I store users for multiple domains in kerberos and get cyrus(imap/sasl) 
to work with it.

a mark at KERBEROS principle == user.mark
when I login using mark at KERBEROS cyrus will search for user.mark, and not 
user.mark at nperfection.com

so I can't use user mark at KERBEROS for user.mark at nperfection.com

> > are multiple kerberos realms needed for virtual domains?
> > if yes, is there any howto for this, or any hint that might help me on
> > how to set this up.
> > if no, does any know how users should be stored?
> >
> > I can't find information around how this is supposed to be done. does
> > anyone know where I could find some, or does anyone have a suggestions
> > where I should look next?
> >
> > Mark Hannessen
> > ---
> > Cyrus Home Page: http://asg.web.cmu.edu/cyrus
> > Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
> > List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html