GSSAPI authentication from Thunderbird to Cyrus IMAP works!

You MUST:

1.  Specify a FQDN for your IMAP server in Thunderbird's
    account settings.  I was specifying an IP address.  Not
    good enough.

2.  The FQDN must resolve somehow.  For me, it was a matter
    of adding info to C:\WINDOWS\System32\drivers\etc\hosts

        192.168.168.100   noodle.foo.com

3.  Your domain, of course, must map to some Kerberos realm.
    This is done in your /etc/krb5.conf or krb5.ini for
    Windows.  Here's how mine was setup when working:

        [realms]
            JBTEST = {
                kdc = 192.168.168.100
                admin_server = 192.168.168.100
            }

        [domain_realm]
            foo.com = JBTEST
            .foo.com = JBTEST

4.  Obviously specify 'Secure Authentication' in the IMAP
    account's properties.

5.  In Thunderbird: Tools | Options | Advanced, Config editor
    set network.auth.use-sspi to false.

Jeff Blaine wrote:
If anyone wants to assist in testing, here is the bug report
I filed just now:

https://bugzilla.mozilla.org/show_bug.cgi?id=370178

----
Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Reply via email to