|
Server : LiteSpeed System : Linux srv104790275 5.15.0-161-generic #171-Ubuntu SMP Sat Oct 11 08:17:01 UTC 2025 x86_64 User : dewac4139 ( 1077) PHP Version : 8.0.30 Disable Function : pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_get_handler,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,pcntl_async_signals,pcntl_unshare, Directory : /usr/share/doc/dovecot-core/wiki/ |
Upload File : |
Winbind mechanisms ================== Dovecot supports NTLM and GSS-SPNEGO authentication mechanisms using Samba [http://www.samba.org]'s winbind daemon. It is useful when you need to authenticate users against a Windows domain (either AD or NT). By default NTLM mechanism is handled internally. You can use winbind instead by setting: ---%<------------------------------------------------------------------------- auth_use_winbind = yes ---%<------------------------------------------------------------------------- The usernames, returned by winbind, can contain some domain part (either "DOMAIN\user" or "user@example.com"). Such usernames are always transformed to the form of "user@domain". To strip domain part (to obtain corresponding local username, for example), set: ---%<------------------------------------------------------------------------- auth_username_format = %n ---%<------------------------------------------------------------------------- Dovecot needs path to Samba's 'ntlm_auth' binary to perform the authentication. You can change the path with: ---%<------------------------------------------------------------------------- auth_winbind_helper_path = /usr/bin/ntlm_auth ---%<------------------------------------------------------------------------- Dovecot currently does blocking lookups, so if 'ntlm_auth' is slow on responding (e.g. network problems), Dovecot blocks all other authentication requests until it's finished. (This file was created from the wiki on 2019-06-19 12:42)