On Thursday 18 May 2006 18:14, Quanah Gibson-Mount wrote:
> --On Thursday, May 18, 2006 7:27 AM -0400 Dennis Putnam
>
> <[EMAIL PROTECTED]> wrote:

[...Net::POP3...]

> I was able to use Authen::SASL to do GSSAPI authentication via finger &
> whois, using the Authen-SASL-GSSAPI-server package.

Net::POP3 2.28

accepts SASL objects for doing SASL authentication and plays
together with Authen::SASL::Perl::GSSAPI.

The problem was that Net::POP3 2.28 uses the wrong servivename 'pop3'
in 

| my $client = $sasl->client_new('pop3',${*$self}{'net_pop3_host'},0);

what makes GSSAPI fail because the servivcename is part of the principal
( "pop3/theserver.domain.tld" for example) and a principal 
"pop3/theserver.domain.tld" does not exist
in KDC database.

Correct is 'pop' instead as specified in  
<http://www.iana.org/assignments/gssapi-service-names>.

That means only

| my $client = $sasl->client_new('pop',${*$self}{'net_pop3_host'},0);

works when connecting to a POP3 server.

Achim

Attachment: pgpUsnxQmyeCM.pgp
Description: PGP signature

Reply via email to