On Tue, 2009-08-04 at 11:31 +1000, Phillip Macey wrote:
In the release notes for v1.2.2, Timo said:
Found and fixes several v1.2-specific bugs. Hopefully it's now stable for most people's usage.
- GSSAPI: More changes to authentication. Hopefully good now.
What were the GSSAPI changes? I am having problems with _some_ of my users using GSSAPI auth. I am using version 1.2.1. The client (thunderbird) reports that the server does not support 'secure authentication'.
I think "secure authentication" usually means CRAM-MD5 in Thunderbird. But maybe they use it for GSSAPI too, no idea.
Aug 3 16:45:57 fury dovecot: imap-login: Disconnected: Input buffer full (auth failed, 1 attempts): method=GSSAPI, rip=10.8.5.72, lip=10.1.0.20
Does it help if you increase
#define LOGIN_MAX_INBUF_SIZE 4096
to e.g. 8192 in src/login-common/client-common.h?