ZCS Administrator Guide 8.0
ZCS Administrator Guide 8.0
Network Edition

Zimbra Proxy Server > Configure Zimbra Proxy for Kerberos Authentication

Configure Zimbra Proxy for Kerberos Authentication
If you use the Kerberos5 authenticating mechanism, you can configure it for the IMAP and POP proxy.
On each proxy node, set the zimbraReverseProxyDefaultRealm server attribute to the realm name corresponding to the proxy server. For example:
zmprov ms [DNS name.isp.net] zimbraReverseProxyDefaultRealm [ISP.NET]
Each proxy IP address where email clients connect must be configured for GSSAPI authentication by the mail server. On each proxy node for each of the proxy IP addresses:
zmprov mcf +zimbraReverseProxyAdminIPAddress [IP address]
zmprov ms [proxyexample.net] zimbraReverseProxyImapSaslGssapiEnabled TRUE
zmprov ms proxyl.isp.net zimbraReverseProxyPop3SaslGssapiEnabled TRUE
zmproxyctl restart
Copyright © 2012 VMware Inc.