Re: Kerberos support in standard services

[Keith Matthews <heimdal@frequentous.co.uk>]

On Thu, 07 Jul 2005 09:38:31 +1000
Brian May <bam@snoopy.apana.org.au> wrote:

> Note: I changed the subject
> 
> >>>>> "Andrew" == Andrew Bartlett <abartlet@samba.org> writes:
> 
>     Andrew> SASL covers most of this problem, and as I understand it,
>     Andrew> it is a far more standard solution than kpop.  I don't
>     Andrew> know if the mail clients and server use the sign/seal end
>     Andrew> or just the authentication, but I certainly see GSSAPI as
>     Andrew> a supported password type for evolution.
> 
> I think most servers and clients don't support SASL yet.
> 
> On this mailing list people have said
>  * cryus imap and pop support SASL.
>  * evolution supports GSSAPI (hopefully via SASL?)
> 


Recent versions of postfix support SASL as standard and patches have
been available for some time. SuSE's packaging of postfix has insisted
on having the SASL libraries present for quite a few releases (however
this also means that if you don't have SASL installed things like cron
and smbpasswd will break regardless).