On Thu, 2006-02-23 at 13:14 +0000, Casey Allen Shobe wrote:
I have built dovecot with kerberos support, however am not able to log in using GSSAPI support in my mail client. I receive the following error:
SASL(-4): no mechanism available: No worthy mechs found
I don't really know about the Kerberos code in Dovecot.. Did you check if there was anything in Dovecot's logs with auth_verbose=yes?
Additionally, Digest-MD5 does not work - I receive an authentication failed (as though I have an incorrect password) if I try to use it.
This could have something to do with realms. I just tested this for a while and it looks like Cyrus SASL client wants to send a realm always, even if Dovecot doesn't advertise any realms.
Are all your usernames in user@domain format? In that case you could set auth_realms to the list of domains. Or alternatively try if the attached patch helps.