12 Mar
2011
12 Mar
'11
4:07 p.m.
On Sat, 2011-03-12 at 13:26 +0100, Arne Nordmark wrote:
For reasons best known to its authors, libc-client first initiates GSSAPI authentication, then checks if there is a Kerberos ticket it can use (there is none), then realizes its mistake and aborts SASL, and tries PLAIN. At this point dovecot delays for 5000ms.
Yeah, it's a bug. v2.0 doesn't have this problem.
I am lost as how to get around this without changing the code.
You can't.
I would be inclined to call always call client_auth_failed with nodelay=TRUE in the SASL_SERVER_REPLY_AUTH_ABORTED case.