[Dovecot] Kerberos GSSAPI - proper item name in keytab

[Trever L. Adams]

On 08/31/2011 10:30 AM, Nikolay Shopik wrote:
>
> Can you do kinit -k imap/imap/efim.test.local at ROMASHKA.LAN and then
> klist, does it work for you?
>
> I do recommend tcpdump kerberos traffic between your client and
> server, this is usually helps me much better then any logging, flow
> easy to read in wireshark.
>
Under active directory, you cannot kinit as an SPN, only UPN (including
MACHINE$ accounts). At least this is my experience.

Trever
-- 
"Selfishness is really self-destruction in slow motion." -— Elder Neal
A. Maxwell - Ensign, May 1999, 23

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 261 bytes
Desc: OpenPGP digital signature
URL: <http://dovecot.org/pipermail/dovecot/attachments/20110831/2f87baf8/attachment-0001.bin>