On Wed, Feb 18, 2009 at 10:33:09PM +0300, Nikolay Shopik wrote:

I'm currently trying to configure Dovecot to use kerberos. My KDC is Windows 2003 and I successful generated keytab file for Dovecot machine. Problem is when I'm trying to use GSSAPI it told me Obtaining credentials for imap@debian5 - and of course this fails because debian5 isn't KDC, it should look for imap/debian5.inblock.local@INBLOCK.LOCAL. What I'm missing?

You need to make sure that 'hostname -f' returns a full hostname, and you need to put default_realm = INBLOCK.LOCAL into your krb5.conf

Then confirm that 'kvno imap/debian5.inblock.local' works

Jason