GSSAPI authentication from Thunderbird to Cyrus IMAP works!
You MUST: 1. Specify a FQDN for your IMAP server in Thunderbird's account settings. I was specifying an IP address. Not good enough. 2. The FQDN must resolve somehow. For me, it was a matter of adding info to C:\WINDOWS\System32\drivers\etc\hosts 192.168.168.100 noodle.foo.com 3. Your domain, of course, must map to some Kerberos realm. This is done in your /etc/krb5.conf or krb5.ini for Windows. Here's how mine was setup when working: [realms] JBTEST = { kdc = 192.168.168.100 admin_server = 192.168.168.100 } [domain_realm] foo.com = JBTEST .foo.com = JBTEST 4. Obviously specify 'Secure Authentication' in the IMAP account's properties. 5. In Thunderbird: Tools | Options | Advanced, Config editor set network.auth.use-sspi to false. Jeff Blaine wrote:
If anyone wants to assist in testing, here is the bug report I filed just now: https://bugzilla.mozilla.org/show_bug.cgi?id=370178
---- Cyrus Home Page: http://cyrusimap.web.cmu.edu/ Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html