Re: imapd GSSAPI requests host/ ticket

2009-11-12 Thread Martin Schweizer 
Hello David

2009/11/5 david l goodrich d...@dsrw.org:
 I'm running 2.2.13-14+lenny3 on service-n2.dsrw.org, running
 Debian/lenny with Heimdal kerberos.  The built-in GSSAPI is functional,
 but on my KDC I see that it requests a ticket for
 host/service-n2.dsrw@dsrw.org, digest/d...@dsrw.org and finally
 krbtgt/d...@dsrw.org.

 Why?  I see no obvious need for a host/* ticket to authorize imap, and
 digest/DSRW and krbtgt/DSRW simply make no sense.

I'm not sure I can help you. I have a similar setup but I use WIndows
domain controller as KDC and Cyrus Imap - Cyrus SALS (saslauthd) -
PAM - Kerberos5. Should I send you any hints for this way?

Regards,


-- 
Martin Schweizer
schweizer.mar...@gmail.com
Tel.: +41 32 512 48 54 (VoIP)
Fax: +1 619 3300587

Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

imapd GSSAPI requests host/ ticket

2009-11-04 Thread david l goodrich 
I'm running 2.2.13-14+lenny3 on service-n2.dsrw.org, running 
Debian/lenny with Heimdal kerberos.  The built-in GSSAPI is functional, 
but on my KDC I see that it requests a ticket for 
host/service-n2.dsrw@dsrw.org, digest/d...@dsrw.org and finally 
krbtgt/d...@dsrw.org.

Why?  I see no obvious need for a host/* ticket to authorize imap, and 
digest/DSRW and krbtgt/DSRW simply make no sense.

Thanks!
   --david

Cyrus Home Page: http://cyrusimap.web.cmu.edu/
Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html