Hello David 2009/11/5 david l goodrich <d...@dsrw.org>: > I'm running 2.2.13-14+lenny3 on service-n2.dsrw.org, running > Debian/lenny with Heimdal kerberos. The built-in GSSAPI is functional, > but on my KDC I see that it requests a ticket for > host/service-n2.dsrw....@dsrw.org, digest/d...@dsrw.org and finally > krbtgt/d...@dsrw.org. > > Why? I see no obvious need for a host/* ticket to authorize imap, and > digest/DSRW and krbtgt/DSRW simply make no sense.
I'm not sure I can help you. I have a similar setup but I use WIndows domain controller as KDC and Cyrus Imap -> Cyrus SALS (saslauthd) -> PAM -> Kerberos5. Should I send you any hints for this way? Regards, -- Martin Schweizer schweizer.mar...@gmail.com Tel.: +41 32 512 48 54 (VoIP) Fax: +1 619 3300587 ---- Cyrus Home Page: http://cyrusimap.web.cmu.edu/ Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
