30 Apr
2025
30 Apr
'25
8:40 p.m.
On Wed, Apr 30, 2025 at 08:30:16PM +0300, Aki Tuomi wrote:
GSSAPI is one of these pretty opaque protocols. Since it works with mutt, and does not work with gsasl, it could be some thing with gsasl.
It could, but the same gsasl version can authenticate against dovecot 2.3.31. I will attempt to repro the issue with other clients.
I can only see one change in mech-gssapi, we use mech_gssapi_krb5_userok() always. Also we have added support for final response prosessing, which was missing in 2.3.21.1.
I'm testing a build with the mech_gssapi_krb5_userok() change reverted, because I agree that it's the only change that appears relevant. Will post results when I have them.
noah