|
Hello, I’ve got a a small problem with IMAP/Kerberos
and GSSAPI/Evolution. I want to authenticate against a Kerberos KDC. The
problem is that evolution uses the wrong principal name. Log snip: -----8<----------------------------------------------------------------------------------------------- Aug 02 23:04:55 judicator.lan krb5kdc[2086](info):
TGS_REQ (6 etypes {16 5 23 3 2 1}) 192.168.1.70: UNKNOWN_SERVER: authtime
1091478408, ktf JUDICATOR LAN for imap/judicator lan JUDICATOR LAN, Server not
found in Kerberos database -----8<----------------------------------------------------------------------------------------------- Other clients work just fine with Kerberos authentication
(like Eudora on windows). The principal name it should use is imap/judicator JUDICATOR LAN. This is my krb5.conf on the evolution and Eudora client: -----8<----------------------------------------------------------------------------------------------- [libdefaults] ticket_lifetime = 24000 default_realm = JUDICATOR.LAN default_tkt_enctypes = des3-hmac-sha1
des-cbc-crc default_tgs_enctypes = des3-hmac-sha1
des-cbc-crc [realms] JUDICATOR.LAN = { kdc = kerberos.judicator.lan:88 admin_server =
kerberos.judicator.lan:749 default_domain =
judicator.lan } [domain_realm] .judicator.lan = JUDICATOR.LAN judicator.lan = JUDICATOR.LAN -----8<----------------------------------------------------------------------------------------------- Does anyone why evolution picks the wrong principal
name? Thanks in advance, Jasper Siepkes |