[Dovecot] Small LOGIN_MAX_INBUF_SIZE for GSSAPI with samba4 (AD)

[Ludek Finstrle]

Hi Timo,

Tue, Jan 03, 2012 at 01:16:29PM +0200, Timo Sirainen napsal(a):
> On Mon, 2012-01-02 at 19:20 +0100, Ludek Finstrle wrote:
> 
> > Jan  2 17:58:42 server dovecot: imap-login: Disconnected: Input buffer full (no auth attempts): rip=192.167.14.16, lip=192.167.14.16, secured
> ..
> > I fixed this problem with enlarging LOGIN_MAX_INBUF_SIZE. I also red about wrong lower/uppercase
> > but it's not definitely my problem (I tried all possibilities of lower/uppercas in login).
> > 
> > I sniffed the plain communication and the "a0000 AUTHENTICATE GSSAPI" line has around 1873 chars.
> > When I enlarged the LOGIN_MAX_INBUF_SIZE to 2048 the problem disappeared and I'm now able to login
> > to dovecot using gssapi in mutt client.
> 
> There was already code that allowed 16kB SAS messages, but that didn't
> work for initial SASL reponse with IMAP SASL-IR extension.
> 
> > The simple patch I have to use is attached.
> 
> I increased it to 4 kB:
> http://hg.dovecot.org/dovecot-2.0/rev/d06061408f6d

  thank you very much for such fast reaction and for such good piece of SW.

Luf