[Dovecot] GSSAPI auth failing for kmail

[Mark Davies]

Hi,
  have dovecot 2.0.13 running fine on a NetBSD box, with lots of clients
happily authenticating to it with GSSAPI.

I've just updated an ArchLinux box to latest new version which has meant
its switched from using heimdal to using mit krb5 and its kmail is now
also slightly newer.

Thunderbird successfully authenticates to dovecot from this machine but
kmail now fails.  Kmail reports:


  Unable to authenticate via GSSAPI.
  The server ... replied:
  SASL(-1): generic failure: GSSAPI
  Error: Invalid token was supplied
  (Token header is malformed or corrupt)


The dovecot log reports:

Feb 27 13:42:18 bats dovecot: auth:
GSSAPI(mark at ECS.VUW.AC.NZ,130.195.5.88): Invalid base64 data in
continued response


Any suggestions on how to track down what specifically has changed and
how to fix it?

cheers
mark