I've enabled the GSS code in dovecot, but our Kerberos nerds
are complaining that it doesn't work :) I probably have the
thing totally misconfigured (so don't worry about that part for
now), but I do have a crash:
Info: imap-login: Disconnected: rip=XXX.YYY.229.8, lip= XXX.YYY.17.59, TLS
handshake
Error: auth(default): gssapi(?,XXX.YYY.229.8): While acquiring service
credentials: No credentials were supplied, or the credentials were unavailable
or inaccessible
Error: auth(default): gssapi(?,XXX.YYY.229.8): While acquiring service
credentials: No principal in keytab matches desired name
Info: imap-login: Disconnected: method=GSSAPI, rip=129.146.229.8,
lip=XXX.YYY.17.59
Error: child 188558 (auth) killed with signal 11
Info: imap-login: Disconnected: method=PLAIN, rip=129.146.229.8,
lip=XXX.YYY.17.59
The dovecot auth process SIGSEGV's and dies at login time (I think).
Here's
the backtrace:
(gdb) bt full
#0 0xfef25e1a in gss_release_name () from /usr/lib/libgss.so.1
No symbol table info available.
#1 0x08064ccf in mech_gssapi_auth_free (request=0xfef3c000)
at mech-gssapi.c:394
minor_status = 0
#2 0x08060551 in auth_request_handler_flush_failures ()
at auth-request-handler.c:493
auth_request = (struct auth_request **) 0x8047b5c
i = 1
size = 1
__PRETTY_FUNCTION__ = "auth_request_handler_flush_failures"
#3 0x0806f54a in io_loop_handle_timeouts (ioloop=0x8096f78) at ioloop.c:276
t = (struct timeout *) 0x8098048
called_timeouts = (struct timeout *) 0x8098048
tv = {tv_sec = 134852200, tv_usec = 0}
t_id = 2
#4 0x0806fb42 in io_loop_handler_run (ioloop=0x8096f78) at ioloop-poll.c:159
ctx = (struct ioloop_handler_context *) 0x8096fb0
pollfd = (struct pollfd *) 0x8096f78
tv = {tv_sec = 0, tv_usec = 0}
io = (struct io *) 0x8047f99
t_id = 134836088
msecs = 134894204
ret = 0
call = true
#5 0x0806f65d in io_loop_run (ioloop=0x8096f78) at ioloop.c:311
No locals.
#6 0x08062bb2 in main (argc=1, argv=0x809ae68) at main.c:321
foreground = false
Thanks,
-dp
--
Daniel Price - Solaris Kernel Engineering - dp at eng.sun.com - blogs.sun.com/dp