POP account authentication on OD slave server

[gw1500se]

I have a remote site used for disaster recovery that is set up as an OD slave on a separate domain but same Kerberos realm. I need to do some testing with the POP server on that machine (Xserve running 10.4.10, same as OD master). I set up Applemail with a 2nd account pointing to that POP server. However, I cannot authenticate to that server. It says it is not recognizing the username. Should I not be able to use the same username to authenticate on all OD slaves? Is there something messed up with the config on that slave or can I just not do what I want? TIA.

[gw1500se]

Thanks for the reply. I’m not sure I understand or more likely I didn’t explain it clearly. The POP servers are on different domains. One is mydomain.com and the other is mydomain.biz. The .biz server, running POP, is also an OD slave and the .com server, running POP, is the OD master.

The client is a 3rd machine on the .com network and that is where I set up 2 Applemail accounts. One on .com which works fine and other on .biz which is where I am having the problem.

[gw1500se]

“I see,” said the blind man as he picked up a hammer and saw. So I have to change the individual user in WGM to use one or the other at any given time? The reason being not a function of Applemail but rather a function of OD authentication. Supposed I create a non-OD local account?

[gw1500se]

Thanks but I guess I must have something wrong. I’ll skip adding the second user for the moment to KIS. I changed the mail server on the mail tab of WGM to point to the slave. I then created a 2nd account in Applemail for the slave on my client. Nothing changed. I still get the same error trying to get mail from the slave and get NO error from the master where I expected one. Do I need to change something, somewhere else?

[gw1500se]

One additional piece of information. I destroyed the Kerberos ticket and when I did a get mail, it still used the master for the POP principal. This is obviously the problem. Why is it not getting the POP principal for the slave since that is what OD now says is that user’s mail server?

[Author]

Posts