[Dovecot] kerberos trying to obtain credentials for wrong machine

[Jason Gunthorpe]

On Wed, Feb 18, 2009 at 10:33:09PM +0300, Nikolay Shopik wrote:

> I'm currently trying to configure Dovecot to use kerberos. My KDC is 
> Windows 2003 and I successful generated keytab file for Dovecot machine. 
> Problem is when I'm trying to use GSSAPI it told me
> Obtaining credentials for imap at debian5 - and of course this fails because 
> debian5 isn't KDC, it should look for 
> imap/debian5.inblock.local at INBLOCK.LOCAL.
> What I'm missing?

You need to make sure that 'hostname -f' returns a full hostname, and
you need to put default_realm = INBLOCK.LOCAL into your krb5.conf

Then confirm that 'kvno imap/debian5.inblock.local' works

Jason