[Dovecot] SASL abort causes 5s delay, triggered by UW libc-client

Timo Sirainen tss at iki.fi
Sat Mar 12 16:07:18 EET 2011


On Sat, 2011-03-12 at 13:26 +0100, Arne Nordmark wrote:

> For reasons best known to its authors, libc-client first initiates 
> GSSAPI authentication, then checks if there is a Kerberos ticket it can 
> use (there is none), then realizes its mistake and aborts SASL, and 
> tries PLAIN. At this point dovecot delays for 5000ms.

Yeah, it's a bug. v2.0 doesn't have this problem.

> I am lost as how to get around this without changing the code. 

You can't.

> I would be inclined to call always call client_auth_failed with 
> nodelay=TRUE in the SASL_SERVER_REPLY_AUTH_ABORTED case.

Done: http://hg.dovecot.org/dovecot-1.2/rev/e7721f67688a



More information about the dovecot mailing list