From 51e0c8a488b7a8d195d32d0bc58e5ef24b38e626 Mon Sep 17 00:00:00 2001
From: Robbie Harwood <rharwood@redhat.com>
Date: Tue, 10 Mar 2020 12:49:36 -0400
Subject: imap-dl: Kerberos support using python3-gssapi

This is based off offlineimap's code rather than getmail's.  getmail
relied on pykerberos, which is considered deprecated in
Fedora/RHEL/CentOS; offlineimap relied on python-gssapi, which is
considered its replacement there.  python3-gssapi doesn't yet have type
annotations, but this is planned to change in the future.

Signed-off-by: Robbie Harwood <rharwood@redhat.com>
Acked-by: Daniel Kahn Gillmor <dkg@fifthhorseman.net>
---
 imap-dl.1.pod | 4 ++++
 1 file changed, 4 insertions(+)

(limited to 'imap-dl.1.pod')

diff --git a/imap-dl.1.pod b/imap-dl.1.pod
index 7998d3a..5864267 100644
--- a/imap-dl.1.pod
+++ b/imap-dl.1.pod
@@ -48,6 +48,10 @@ B<retriever.username> is the username of the IMAP account.
 B<retriever.password> is the password for the IMAP account when using
 plaintext passwords.
 
+B<retriever.use_kerberos> (boolean) requests that Kerberos (through GSSAPI) is
+to be used instead of password-based auth.  There is no need to specify
+password when using Kerberos.  This requires the python3-gssapi module.
+
 B<retriever.ssl_ciphers> is an OpenSSL cipher string to use instead of the
 defaults.  (The defaults are good; this should be avoided except to work
 around bugs.)
-- 
cgit v1.2.3