On Fri, 2012-03-02 at 00:49 +1300, Mark Davies wrote: > so what bit of the code should I be looking at to see what happens > between the "security context state completed" and the "client out"? All of the code is in mech-gssapi.c Are these working vs. non-working Dovecots in same or different servers?