Re: [Dovecot] auth_krb5_keytab ignored ?

On Fri, 2012-06-08 at 18:59 +0200, Leon Meßner wrote:

Hi list,

i noticed that when doing imap gssapi authentication with kerberos, dovecot (here 2.1.7) always searches /etc/krb5.keytab although i have auth_krb5_keytab = /etc/mail3.krb5.keytab in my etc/dovecot/dovecot.conf and doveconf -n also show this setting. If i combine the keytabs in krb5.keytab it works. Is there another location where i should put my configuration regarding gssapi/kerberos ?

Try if this works:

import_environment = TZ GDB DEBUG_SILENT KRB5_KTNAME

Then start Dovecot with:

KRB5_KTNAME=/etc/mail3.krb5.keytab dovecot

I'm wondering if the code in mech-gssapi.c that sets KRB5_KTNAME environment is being called too late.