I've enabled the GSS code in dovecot, but our Kerberos nerds are complaining that it doesn't work :) I probably have the thing totally misconfigured (so don't worry about that part for now), but I do have a crash:

Info: imap-login: Disconnected: rip=XXX.YYY.229.8, lip= XXX.YYY.17.59, TLS handshake Error: auth(default): gssapi(?,XXX.YYY.229.8): While acquiring service credentials: No credentials were supplied, or the credentials were unavailable or inaccessible Error: auth(default): gssapi(?,XXX.YYY.229.8): While acquiring service credentials: No principal in keytab matches desired name Info: imap-login: Disconnected: method=GSSAPI, rip=129.146.229.8, lip=XXX.YYY.17.59 Error: child 188558 (auth) killed with signal 11 Info: imap-login: Disconnected: method=PLAIN, rip=129.146.229.8, lip=XXX.YYY.17.59

The dovecot auth process SIGSEGV's and dies at login time (I think). Here's the backtrace:

(gdb) bt full #0 0xfef25e1a in gss_release_name () from /usr/lib/libgss.so.1 No symbol table info available. #1 0x08064ccf in mech_gssapi_auth_free (request=0xfef3c000) at mech-gssapi.c:394 minor_status = 0 #2 0x08060551 in auth_request_handler_flush_failures () at auth-request-handler.c:493 auth_request = (struct auth_request **) 0x8047b5c i = 1 size = 1 __PRETTY_FUNCTION__ = "auth_request_handler_flush_failures" #3 0x0806f54a in io_loop_handle_timeouts (ioloop=0x8096f78) at ioloop.c:276 t = (struct timeout *) 0x8098048 called_timeouts = (struct timeout *) 0x8098048 tv = {tv_sec = 134852200, tv_usec = 0} t_id = 2 #4 0x0806fb42 in io_loop_handler_run (ioloop=0x8096f78) at ioloop-poll.c:159 ctx = (struct ioloop_handler_context *) 0x8096fb0 pollfd = (struct pollfd *) 0x8096f78 tv = {tv_sec = 0, tv_usec = 0} io = (struct io *) 0x8047f99 t_id = 134836088 msecs = 134894204 ret = 0 call = true #5 0x0806f65d in io_loop_run (ioloop=0x8096f78) at ioloop.c:311 No locals. #6 0x08062bb2 in main (argc=1, argv=0x809ae68) at main.c:321 foreground = false

Thanks,

    -dp

-- Daniel Price - Solaris Kernel Engineering - dp@eng.sun.com - blogs.sun.com/dp