"SfR Fresh" - the SfR Freeware/Shareware Archive 
Member "dovecot-1.0.15/doc/wiki/Authentication.Mechanisms.Winbind.txt" of archive dovecot-1.0.15.tar.gz:
As a special service "SfR Fresh" has tried to format the requested source page into HTML format using source code syntax highlighting with prefixed line numbers.
Alternatively you can here view or download the uninterpreted source code file.
That can be also achieved for any archive member file by clicking within an archive contents listing on the first character of the file(path) respectively on the according byte size field.
1
2
3 Winbind mechanisms
4 ==================
5
6
7 Dovecot supports NTLM and GSS-SPNEGO authentication mechanisms using Samba [None]'s winbind daemon. It is useful when you need to authenticate users against a Windows domain (either AD or NT). This feature exists only in Dovecot v1.1. For v1.0 you can get it as a patch [None].
8 By default NTLM mechanism is handled internally. You can use winbind instead by setting:
9
10 ---%<-------------------------------------------------------------------------
11 auth_ntlm_use_winbind = yes
12 ---%<-------------------------------------------------------------------------
13
14 The usernames, returned by winbind, can contain some domain part (either "DOMAIN\user" or "user@example.com [None]"). Such usernames are always transformed to the form of "user@domain". To strip domain part (to obtain corresponding local username, for example), set:
15
16 ---%<-------------------------------------------------------------------------
17 auth_username_format = %n
18 ---%<-------------------------------------------------------------------------
19
20 Dovecot needs path to Samba's 'ntlm_auth' binary to perform the authentication. You can change the path with:
21
22 ---%<-------------------------------------------------------------------------
23 auth_winbind_helper_path = /usr/bin/ntlm_auth
24 ---%<-------------------------------------------------------------------------
25
26 Dovecot currently does blocking lookups, so if 'ntlm_auth' is slow on responding (e.g. network problems), Dovecot blocks all other authentication requests until it's finished.
27 (This file was created from the wiki on 2007-12-11 04:42)