[Dovecot] gssapi auth issue...

[Frank Cusack]

On March 26, 2007 10:37:08 PM -0700 Dan Price <dp at eng.sun.com> wrote:
>
> Hi all-- been away from the list for a few weeks so forgive me
> if this problem has been reported-- with the help of some
> of our Kerberos engineers, we tracked down why we can't
> authenticate our Solaris kerberos clients to Dovecot.
>
> Here's the deal: Our IT organization issued us kerberos tickets of the
> form
>
>         imap at foobar.sfbay.sun.com
>
> Which I presume is their standard-- and probably not negotiable.
> However, the hostname of the machine is: "foobar", not
> foobar.sfbay.sun.com (as reported by gethostname(3c)).

That's broken.  When using Kerberos, hostnames need to be FQDN's.

-frank