[29503] in Kerberos

home help back first fref pref prev next nref lref last post

sendmail as MSA and client side GSSAPI

daemon@ATHENA.MIT.EDU (Victor Sudakov)
Mon Mar 17 09:41:27 2008

From: Victor Sudakov <vas@mpeks.no-spam-here.tomsk.su>
Date: Sun, 16 Mar 2008 15:18:47 +0000 (UTC)
Message-ID: <frjdon$ee7$1@relay.tomsk.ru>
X-Complaints-To: noc@sibptus.tomsk.ru
To: kerberos@mit.edu
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu

Colleagues,

I have sendmail 8.13.6 acting as MSA for local users. It is compiled
with SASLv2 and has the following lines in the submit.mc file:
FEATURE(`authinfo')dnl 
FEATURE(`msp', `[mailhub]')dnl

The mailhub to which mail is submitted supports GSSAPI:
250-AUTH LOGIN PLAIN CRAM-MD5 DIGEST-MD5 GSSAPI

Now how do I enable GSSAPI authentication for local users? What should
I put into the /etc/mail/authinfo file so that each local user who has
a Kerberos ticket could authenticate herself to the mailhub?

The users send mail from mutt, pine etc by calling /usr/sbin/sendmail.

Reading cf/README "Providing SMTP AUTH Data when sendmail acts as
Client" did not enlighten me. I want no U or P tags in the authinfo
file, since I want the calling user's Kerberos principal name as U and
her ticket instead of password.

Thanks in advance for any input.

-- 
Victor Sudakov,  VAS4-RIPE, VAS47-RIPN
2:5005/49@fidonet http://vas.tomsk.ru/
________________________________________________
Kerberos mailing list           Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos

home help back first fref pref prev next nref lref last post