[Dovecot] GSSAPI Authentication in v1.2.1

[Timo Sirainen]

On Tue, 2009-08-04 at 11:31 +1000, Phillip Macey wrote:
> In the release notes for v1.2.2, Timo said:
> > Found and fixes several v1.2-specific bugs. Hopefully it's now stable
> > for most people's usage.
> >
> > 	* GSSAPI: More changes to authentication. Hopefully good now.
> >   
> What were the GSSAPI changes? I am having problems with _some_ of my
> users using GSSAPI auth. I am using version 1.2.1. The client 
> (thunderbird) reports that the server does not support 'secure 
> authentication'. 

I think "secure authentication" usually means CRAM-MD5 in Thunderbird.
But maybe they use it for GSSAPI too, no idea.

> Aug  3 16:45:57 fury dovecot: imap-login: Disconnected: Input buffer
> full (auth failed, 1 attempts): method=GSSAPI, rip=10.8.5.72, lip=10.1.0.20

Does it help if you increase

#define LOGIN_MAX_INBUF_SIZE 4096

to e.g. 8192 in src/login-common/client-common.h?
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: This is a digitally signed message part
Url : http://dovecot.org/pipermail/dovecot/attachments/20090807/5d5e6c34/attachment.bin