Nikolay Shopik
2009-Feb-18 19:33 UTC
[Dovecot] kerberos trying to obtain credentials for wrong machine
Hi, I'm currently trying to configure Dovecot to use kerberos. My KDC is Windows 2003 and I successful generated keytab file for Dovecot machine. Problem is when I'm trying to use GSSAPI it told me Obtaining credentials for imap at debian5 - and of course this fails because debian5 isn't KDC, it should look for imap/debian5.inblock.local at INBLOCK.LOCAL. What I'm missing?
Jason Gunthorpe
2009-Feb-18 22:25 UTC
[Dovecot] kerberos trying to obtain credentials for wrong machine
On Wed, Feb 18, 2009 at 10:33:09PM +0300, Nikolay Shopik wrote:> I'm currently trying to configure Dovecot to use kerberos. My KDC is > Windows 2003 and I successful generated keytab file for Dovecot machine. > Problem is when I'm trying to use GSSAPI it told me > Obtaining credentials for imap at debian5 - and of course this fails because > debian5 isn't KDC, it should look for > imap/debian5.inblock.local at INBLOCK.LOCAL. > What I'm missing?You need to make sure that 'hostname -f' returns a full hostname, and you need to put default_realm = INBLOCK.LOCAL into your krb5.conf Then confirm that 'kvno imap/debian5.inblock.local' works Jason