[Dovecot] Troube with GSSAPI auth

[asd dsa]

>Maybe you need to set auth_gssapi_hostname?

I added auth_gssapi_hostname = servertd.td.pmz.com.ua (its the KDC) to dovecot.conf and generated again service principals:

slot KVNO Principal
---- ---- ---------------------------------------------------------------------
   1   14 imap/melchior.td.pmz.com.ua at TD.PMZ.COM.UA
   2   13 host/melchior.td.pmz.com.ua at TD.PMZ.COM.UA
   3    1 imap/melchior.td.pmz.com.ua at TD.PMZ.COM.UA
   4    1 host/melchior.td.pmz.com.ua at TD.PMZ.COM.UA

Then i got:

auth: Debug: gssapi(?,192.168.1.50): Obtaining credentials for imap at servertd.td.pmz.com.ua
auth: Info: gssapi(?,192.168.1.50): While acquiring service credentials: Unspecified GSS failure.  Minor code may provide more$
auth: Info: gssapi(?,192.168.1.50): While acquiring service credentials: No principal in keytab matches desired name

Something wrong with service principals, but what?