search for: mailman02

Hi Everyone, I'm currently using dovecot SASL in postfix and passwd-file in dovecot for authenticating my users. I want to switch to using IPA instead. I have both the postfix (mailman01) and dovecot (mailman02) servers joined to the IPA domain. I have GSSAPI working in dovecot for IMAP. But, the SASL GSSAPI authentication in postfix fails with this error: warning: unknown[10.200.5.100]: SASL GSSAPI authentication failed: This is what dovecot logs: Dec 12 22:31:54 mailman02 dovecot: auth: Debug: auth c...

...that are working properly. I read a number of articles on how to configure Dovecot for GSSAPI auth and they all said the same thing (even Red Hat's official how to on it agreed). But, when I set up Evolution on my Fedora 22 system to use GSSAPI, Dovecot's log records this: Sep 8 13:49:55 mailman02 dovecot: auth: Panic: file auth-request.c: line 733 (auth_request_is_disabled_master_user): assertion failed: (request->requested_login_user != NULL) Sep 8 13:49:55 mailman02 dovecot: auth: Error: Raw backtrace: /usr/lib64/dovecot/libdovecot.so.0(+0x6a02e) [0x7f27af22202e] -> /usr/lib64/dove...

...uding the server running Dovecot. I've followed official documentation from Red Hat and read numerous wiki articles on how to configure Dovecot to get it to use GSSAPI correctly. I don't think I've done anything incorrectly, but it refuses to work. This is the error I'm seeing: mailman02 dovecot: imap-login: Disconnected (tried to use unsupported auth mechanism): user=<>, method=PLAIN, rip=1.1.1.1, lip=2.2.2.2, TLS, session=<QhWSqxofyAAKyAkM> I don't understand why no username is being passed. My mail client is Evolution 3.10.4. FYI, Dovecot does work fine usi...

...gt; I read a number of articles on how to configure Dovecot for GSSAPI auth > and they all said the same thing (even Red Hat's official how to on it > agreed). But, when I set up Evolution on my Fedora 22 system to use > GSSAPI, Dovecot's log records this: > > Sep 8 13:49:55 mailman02 dovecot: auth: Panic: file auth-request.c: > line 733 (auth_request_is_disabled_master_user): assertion failed: > (request->requested_login_user != NULL) > Sep 8 13:49:55 mailman02 dovecot: auth: Error: Raw backtrace: > /usr/lib64/dovecot/libdovecot.so.0(+0x6a02e) [0x7f27af22202e] -...

...llowed official documentation from Red Hat and read numerous wiki > > articles on how to configure Dovecot to get it to use GSSAPI correctly. > > I don't think I've done anything incorrectly, but it refuses to work. > > This is the error I'm seeing: > > > > mailman02 dovecot: imap-login: Disconnected (tried to use unsupported > > auth mechanism): user=<>, method=PLAIN, rip=1.1.1.1, lip=2.2.2.2, TLS, > > session=<QhWSqxofyAAKyAkM> > > > > I don't understand why no username is being passed. My mail client is > > Evol...

...RKicQRv03ycmqWKFL9 foDag8BqF5je64ekOG0UCpcDfT4v3ZwNLLhZL/Fo0THb+xD09LJcGM2AtTzRMFFV8V7YHSV L1q+/X9exo0mxU6tMeHmXhMDq71PDcqB5zKdCpTmhakqny5x/vLM47xlnzj+oqwgnY 1441680001.087338 + BQQF/wAMAAAAAAAAJbP26AH///8IAt4FH+6nauwY4Oc= 1441680001.096713 B00001 NO [UNAVAILABLE] Temporary authentication failure. [mailman02.theinside.rnr:2015-09-08 02:40:01] 1441680001.096726 * OK Waiting for authentication process to respond.. Ranbir -- Kanwar R.S. Sandhu

...ote: > I've followed official documentation from Red Hat and read numerous wiki > articles on how to configure Dovecot to get it to use GSSAPI correctly. > I don't think I've done anything incorrectly, but it refuses to work. > This is the error I'm seeing: > > mailman02 dovecot: imap-login: Disconnected (tried to use unsupported > auth mechanism): user=<>, method=PLAIN, rip=1.1.1.1, lip=2.2.2.2, TLS, > session=<QhWSqxofyAAKyAkM> > > I don't understand why no username is being passed. My mail client is > Evolution 3.10.4. Anyone...

...difficult to identify the issue. Crap...I meant to include that. Here's what it looks like when I enable GSSAPI: # 2.2.10: /etc/dovecot/dovecot.conf # OS: Linux 3.10.0-229.11.1.el7.x86_64 x86_64 CentOS Linux release 7.1.1503 (Core) auth_default_realm = theinside.rnr auth_gssapi_hostname = mailman02.theinside.rnr auth_krb5_keytab = /etc/imap.keytab auth_mechanisms = gssapi auth_realms = theinside.rnr hostname = imap.thesandhufamily.ca listen = 1.1.0.0 mail_gid = virtual mail_location = maildir:~/Maildir mail_plugins = quota acl mail_uid = virtual managesieve_notify_capability = mailto managesi...

...running Dovecot. > > I've followed official documentation from Red Hat and read numerous wiki articles on how to configure Dovecot to get it to use GSSAPI correctly. I don't think I've done anything incorrectly, but it refuses to work. This is the error I'm seeing: > > mailman02 dovecot: imap-login: Disconnected (tried to use unsupported auth mechanism): user=<>, method=PLAIN, rip=1.1.1.1, lip=2.2.2.2, TLS, session=<QhWSqxofyAAKyAkM> It says "tried to use unsupported auth mechanism". In your later mail you say that telnet shows AUTH=GSSAPI in capabil...

On Mon, 2015-09-07 at 20:37 +0300, Timo Sirainen wrote: > It says "tried to use unsupported auth mechanism". In your later mail > you say that telnet shows AUTH=GSSAPI in capabilities. So that would > mean that the client isn't using AUTHENTICATE GSSAPI but something > else. I'd been considering that perhaps my version of Evolution was too old, so I upgraded from

...>> change password >> >> paste it >> >> is safe > > Here's the in rawlog: > > 1441680001.046492 B00001 AUTHENTICATE GSSAPI So it is using AUTHENTICATE GSSAPI. > 1441680001.096713 B00001 NO [UNAVAILABLE] Temporary authentication > failure. [mailman02.theinside.rnr:2015-09-08 02:40:01] > 1441680001.096726 * OK Waiting for authentication process to respond.. I guess it's now crashing with this: auth: Panic: file auth-request.c: line 733 (auth_request_is_disabled_master_user): assertion failed: (request->requested_login_user != NULL)...