On Mon, 2006-09-18 at 18:13 -0500, Tim Steiner wrote:
In pop3-login/client-authenticate.c, when sasl_server_auth_begin() is called, it does so with the service name of "POP3". GSSAPI uses this service name when obtaining its service credentials. The problem is that according to http://www.iana.org/assignments/gssapi-service-names , the service name should instead be simply "pop". This causes GSSAPI authentication to fail when used with a POP3 account.
I have created a small patch that corrects this problem for GSSAPI only, as I do not know if other mechanisms are affected by this.
Might have been better if I had used "pop" from the beginning, but I think changing it now would just break things..
I fixed it for GSSAPI anyway, with a slightly different patch.