GSSAPI authentication setup

[Braden McDaniel]

On Sun, 2016-04-17 at 21:49 +0300, aki.tuomi at dovecot.fi wrote:
> > 
> > Did you check your setup against
> http://wiki2.dovecot.org/Authentication/Kerberos

I did.  Of course, it's possible I've still managed to overlook
something. 

> Also can you provide klist -k on server?

I assume you mean the kerberos server:

    [    root at knock     ~]# klist -k
    Keytab name: FILE:/etc/krb5.keytab
    KVNO Principal
    ---- --------------------------------------------------------------------------
       2     host/knock.endoframe.net at ENDOFRAME.NET
   2 host/knock.endoframe.net at ENDOFRAME.NET
   2 host/knock.endoframe.net at ENDOFRAME.NET
   2 host/knock.endoframe.net at ENDOFRAME.NET
   2 host/knock.endoframe.net at ENDOFRAME.NET
   2 host/knock.endoframe.net at ENDOFRAME.NET
   4 host/rail.endoframe.net at ENDOFRAME.NET
   4 host/rail.endoframe.net at ENDOFRAME.NET
   4 host/rail.endoframe.net at ENDOFRAME.NET
   4 host/rail.endoframe.net at ENDOFRAME.NET
   4 host/rail.endoframe.net at ENDOFRAME.NET
   4 host/rail.endoframe.net at ENDOFRAME.NET
   3 nfs/rail.endoframe.net at ENDOFRAME.NET
   5 host/hinge.endoframe.net at ENDOFRAME.NET
   5 host/hinge.endoframe.net at ENDOFRAME.NET
   5 host/hinge.endoframe.net at ENDOFRAME.NET
   5 host/hinge.endoframe.net at ENDOFRAME.NET
   5 host/hinge.endoframe.net at ENDOFRAME.NET
   5 host/hinge.endoframe.net at ENDOFRAME.NET
   5 host/hinge.endoframe.net at ENDOFRAME.NET
   5 host/hinge.endoframe.net at ENDOFRAME.NET


-- 
Braden McDaniel <braden at endoframe.com>