{"id":1384,"date":"2011-09-06T21:43:13","date_gmt":"2011-09-06T12:43:13","guid":{"rendered":"http:\/\/borg4.vdomains.jp\/~goro\/diary\/?p=1384"},"modified":"2011-09-06T21:43:13","modified_gmt":"2011-09-06T12:43:13","slug":"mail-app-%e3%81%a8-dovecot-%e3%81%ae-kerberos-%e8%aa%8d%e8%a8%bc%e3%81%ae%e3%83%8a%e3%82%be","status":"publish","type":"post","link":"http:\/\/borg4.vdomains.jp\/~goro\/diary\/2011\/1384","title":{"rendered":"Mail.app \u3068 Dovecot \u306e Kerberos \u8a8d\u8a3c\u306e\u30ca\u30be"},"content":{"rendered":"<p>Lion Server \u306b\u306f\u30a2\u30ab\u30a6\u30f3\u30c8\u3092\u767b\u9332\u3059\u308b\u65b9\u6cd5\u304c\u7121\u99c4\u306b\u8c4a\u5bcc\u306b\u7528\u610f\u3055\u308c\u3066\u3044\u307e\u3059\u3002\u3056\u3063\u3068\u601d\u3044\u3064\u304f\u3044\u305f\u306e\u3092\u4e26\u3079\u308b\u3068<\/p>\n<ul>\n<li>Workgroup Manager.app (<a href=\"http:\/\/support.apple.com\/kb\/DL1419?viewlocale=ja_JP\">Server Admin<\/a>\u00a0\u306b\u3064\u3044\u3066\u308b)<\/li>\n<li>Directory Utility.app (\/System\/Library\/CoreService \u306b\u3042\u308b)<\/li>\n<li>Server.app<\/li>\n<li>System Preferences.app (\u30b7\u30b9\u30c6\u30e0\u74b0\u5883\u8a2d\u5b9a\u306d)<\/li>\n<li>dscl (\u30b3\u30de\u30f3\u30c9\u30e9\u30a4\u30f3)<\/li>\n<\/ul>\n<p>\u3068\u3044\u3046\u5177\u5408\u3002<\/p>\n<p>\u3067\u3001 Workgroup Manager.app \u3092\u4f7f\u3063\u3066\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u30a2\u30ab\u30a6\u30f3\u30c8\u3092\u4f5c\u6210\u3057\u3066\u4f7f\u3063\u3066\u305f\u3093\u3067\u3059\u304c\u3001\u3075\u3068 dscl \u3092\u4f7f\u3063\u3066\u4f5c\u3063\u305f\u30a2\u30ab\u30a6\u30f3\u30c8\u3092\u898b\u3066\u307f\u305f\u3089<\/p>\n<blockquote>\n<pre>AltSecurityIdentities: Kerberos:<span style=\"color: #ff0000;\">untitled_1<\/span>@HYRULE.JP<\/pre>\n<\/blockquote>\n<p>\u306a\u3093\u3066\u30c0\u30c3\u30b5\u3044\u3053\u3068\u306b\u306a\u3063\u3066\u3044\u305f\u306e\u3067\u3059\u3002 Workgroup Manager.app \u3067\u30a2\u30ab\u30a6\u30f3\u30c8\u3092\u4f5c\u308b\u3068\u6700\u521d\u306b\u300c\u540d\u79f0\u672a\u8a2d\u5b9a\u300d\u304c\u5165\u3063\u3066\u308b\u306e\u3067\u3059\u304c\u3001\u3069\u30fc\u3084\u3089\u305d\u308c\u304c\u6b8b\u3063\u3061\u3083\u3046\u306e\u3067\u3057\u3087\u3046\u306d\u3002<\/p>\n<p><!--more--><\/p>\n<p>\u3067\u6c17\u306b\u306a\u3063\u3066\u4ed6\u306e\u30a2\u30ab\u30a6\u30f3\u30c8\u3092\u898b\u308b\u3068\u00a0AltSecurityIdentities \u306f\u5168\u90e8 Kerberos:untitled_1@HYRULE.JP \u3067\u7d71\u4e00\u3055\u308c\u3066\u3044\u308b\u3068\u3044\u3046\u30c0\u30b5\u3055\u3002\u3053\u308c\u306f\u4fee\u6b63\u3057\u306a\u304d\u3083\u3060\u306a\u3041\u3001\u3068<\/p>\n<blockquote>\n<pre>dscl -u diradmin \/LDAPv3\/127.0.0.1 -change \/Users\/goro AltSecurityIdentities Kerberos:untitled_1@HYRULE.JP Kerberos:goro@HYRULE.JP<\/pre>\n<\/blockquote>\n<p>\u3068\u3044\u3046\u5177\u5408\u306b\u4fee\u6b63\u304b\u307e\u3057\u3066\u307f\u307e\u3057\u305f\u3002<\/p>\n<p>\u3067\u3001 Kerberos \u3068\u304b\u66f8\u3044\u3066\u3042\u308b\u3068 Kerberos \u8a8d\u8a3c\u3068\u3044\u3046\u304b SSO <span style=\"color: #999999;\">(\u30b7\u30f3\u30b0\u30eb\u30b5\u30a4\u30f3\u30aa\u30f3)<\/span>\u306b\u306a\u3093\u3089\u304b\u306e\u5f71\u97ff\u304c\u3042\u308a\u305d\u30fc\u3060\u306a\u3041\u3001\u3068\u3044\u304f\u3064\u304b\u8a66\u3057\u3066\u307f\u305f\u3068\u3053\u308d\u3001 Mail.app \u3067 SSO \u51fa\u6765\u306a\u304f\u306a\u3063\u3066\u3044\u305f\u306e\u3067\u3059!<\/p>\n<p>\u6b63\u78ba\u306b\u306f\u3001 SSO \u51fa\u6765\u306a\u3044\u306e\u306f IMAP \u3060\u3051\u3067\u3001 SMTP \u8a8d\u8a3c\u306f\u5168\u304f\u554f\u984c\u306a\u3044\u3068\u3044\u3046\u3055\u3063\u3071\u308a\u306a\u72b6\u6cc1\u3002\u3067 IMAP \u306f Dovecot \u3001 SMTP \u306f postfix \u306a\u306e\u3067\u3001 Dovecot \u00a0\u5074\u306e\u554f\u984c\u306a\u306e\u304b\u306a\u30fc\u3068\u30ed\u30b0\u3092\u78ba\u8a8d\u3057\u3066\u307f\u305f\u3089<\/p>\n<blockquote>\n<pre>imap-login: Disconnected: Input buffer full (no auth attempts):<\/pre>\n<\/blockquote>\n<p>\u306a\u3093\u3066\u306a\u30a8\u30e9\u30fc\u3092\u767a\u898b\u3002\u3053\u306e\u6587\u5b57\u3067\u30b0\u30b0\u3063\u305f\u3068\u3053\u308d Dovecot 1.2.1 \u306e\u9803\u306b\u3042\u3063\u305f\u554f\u984c\u3089\u3057\u3044\u306e\u3067\u3059\u304c\u3001 2 \u5e74\u3050\u3089\u3044\u904e\u53bb\u306e\u8a71\u3067 Dovecot 2 \u3067\u306f\u554f\u984c\u306a\u3055\u305d\u3046\u3001\u3068\u3044\u3046\u304b\u5909\u3048\u308b\u307e\u3067\u306f\u52d5\u3044\u3066\u305f\u3057\u306a!<\/p>\n<p>\u53c2\u8003\u306b\u306a\u308b\u304b\u306a\u30fc\u3001\u3068 <a href=\"http:\/\/wiki2.dovecot.org\/FrontPage\">Dovecot 2 wiki <\/a>\u306e <a href=\"http:\/\/wiki2.dovecot.org\/Authentication\/Kerberos\">Authentiction\/kerberos <\/a>\u3092\u8aad\u307f\u306a\u304c\u3089 Lion Server \u306e Dovecot \u306e\u8a2d\u5b9a\u3092\u773a\u3081\u3066\u307f\u305f\u3093\u3060\u3051\u3069\u8a72\u5f53\u3057\u305d\u3046\u306a\u554f\u984c\u70b9\u306f\u306a\u3057\u3002\u305f\u3060\u3001 Mail.app \u4ee5\u5916\u306b\u3082 Kerberos \u8a8d\u8a3c(GSSAPI)\u306b\u5bfe\u5fdc\u3057\u305f MUA \u304c\u3042\u308b\u3063\u307d\u3044\u3057\u3001\u00a0<a href=\"http:\/\/wiki2.dovecot.org\/Authentication\/Kerberos\">Authentiction\/kerberos<\/a>\u00a0\u306b\u306f <a href=\"http:\/\/www.mutt.org\/\">mutt<\/a> \u3067\u52d5\u4f5c\u78ba\u8a8d\u3068\u304b\u3084\u3063\u3066\u308b\u3093\u3067\u3001\u3058\u3083\u3042\u624b\u8efd\u306b\u8a66\u305b\u308b\u3082\u306e\u3063\u3066\u3053\u3068\u3067 <a href=\"http:\/\/mozilla.jp\/thunderbird\/\">Thunderbird<\/a> \u3092 Kerberos \u8a8d\u8a3c\u3092\u8a66\u3057\u3066\u307f\u305f\u3068\u3053\u308d!<\/p>\n<p>\u3055\u304f\u3063\u3068\u8a8d\u8a3c\u3055\u308c\u307e\u3057\u305f\u3002\u3048? \u306a\u306b? Mail.app \u306e\u554f\u984c\u3060\u3063\u305f\u306e? Apple \u7d14\u6b63\u306e\u7d44\u307f\u5408\u308f\u305b\u306a\u306e\u306b!?<\/p>\n<p>\u3061\u306a\u307f\u306b SSO \u51fa\u6765\u306a\u304f\u306a\u308b\u3068<\/p>\n<blockquote>\n<pre>dscl -u diradmin \/LDAPv3\/127.0.0.1 -change \/Users\/goro AltSecurityIdentities Kerberos:goro@HYRULE.JP\u3000Kerberos:untitled_1@HYRULE.JP<\/pre>\n<\/blockquote>\n<p>\u3068\u623b\u3057\u3066\u3082\u72b6\u6cc1\u306f\u6539\u5584\u3057\u306a\u3044\u7d20\u6575\u4ed5\u69d8(\u305f\u3060\u3057 Mail.app \u9650\u5b9a)\u3002\u3044\u3063\u305f\u3044\u306a\u306b\u304c\u3069\u3046\u306a\u3063\u3066\u3044\u308b\u3093\u3060\u2026\u3068\u3044\u3046\u3068\u3053\u308d\u3067<a href=\"http:\/\/borg4.vdomains.jp\/~goro\/diary\/2011\/1409\">\u6b21\u56de<\/a>\u306b\u7d9a\u304f<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Lion Server \u306b\u306f\u30a2\u30ab\u30a6\u30f3\u30c8\u3092\u767b\u9332\u3059\u308b\u65b9\u6cd5\u304c\u7121\u99c4\u306b\u8c4a\u5bcc\u306b\u7528\u610f\u3055\u308c\u3066\u3044\u307e\u3059\u3002\u3056\u3063\u3068\u601d\u3044\u3064\u304f\u3044\u305f\u306e\u3092\u4e26\u3079\u308b\u3068 Workgroup Manager.app (Server Admin\u00a0\u306b\u3064\u3044\u3066\u308b) Directory [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[11],"tags":[56,53,77,57],"class_list":["post-1384","post","type-post","status-publish","format-standard","hentry","category-mac","tag-kerberos","tag-lion-server","tag-mac","tag-open-directory"],"_links":{"self":[{"href":"http:\/\/borg4.vdomains.jp\/~goro\/diary\/wp-json\/wp\/v2\/posts\/1384","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/borg4.vdomains.jp\/~goro\/diary\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/borg4.vdomains.jp\/~goro\/diary\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/borg4.vdomains.jp\/~goro\/diary\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"http:\/\/borg4.vdomains.jp\/~goro\/diary\/wp-json\/wp\/v2\/comments?post=1384"}],"version-history":[{"count":8,"href":"http:\/\/borg4.vdomains.jp\/~goro\/diary\/wp-json\/wp\/v2\/posts\/1384\/revisions"}],"predecessor-version":[{"id":1463,"href":"http:\/\/borg4.vdomains.jp\/~goro\/diary\/wp-json\/wp\/v2\/posts\/1384\/revisions\/1463"}],"wp:attachment":[{"href":"http:\/\/borg4.vdomains.jp\/~goro\/diary\/wp-json\/wp\/v2\/media?parent=1384"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/borg4.vdomains.jp\/~goro\/diary\/wp-json\/wp\/v2\/categories?post=1384"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/borg4.vdomains.jp\/~goro\/diary\/wp-json\/wp\/v2\/tags?post=1384"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}