SASL + IMAP + GSSAPI failure (other gssapi stuff works)

[Will Fiveash]

On Wed, Feb 07, 2007 at 05:04:48PM -0500, Jeff Blaine wrote:
> [ Next 6 paragraphs added after writing the stuff further down ]
> 
> I'm not sure when this changed, but the error is now the
> following.  Perhaps when I started using a real 'jblaine'
> shell with k5 creds via Russ Alberry's pam_krb5.so
> 
>     Feb  7 16:50:38 noodle.foo.com imtest[25918]: GSSAPI Error:
>     Unspecified GSS failure.  Minor code may provide more information
>     (Server not found in Kerberos database)
> 
> As an aside, you know, the whole SEAM stuff really kind of pisses
> me off.  It just completely gets in my way.

How does it get in your way?  For open source that I've compiled that
requires the MIT krb lib API, I've compiled the MIT krb distribution and
installed it in /usr/local and other open source distributions find what
they need there without any conflict with Solaris krb libs or config
files.  Of course when I use the MIT krb I make sure my PATH is set so I
pick up the MIT krb commands and not the native Solaris versions.  I do
see that there could be cred cache issues but it seems like one should
either use just MIT or Solaris for krb and not mix use of the two on the
same system.

> If they're not going to provide Kerberos API files so I can build
> OpenAFS against it, it's garbage to me.  I've checked the latest
> official Solaris 10 release via Sun Download and the stuff STILL isn't
> there.

Solaris support for the Kerberos API (similar to that in MIT) is coming
but our dev. process does take some time (testing, docs, packaging,
etc...).  There will be a S10 update with that support.

Also note that there is support in Solaris 10 for libsasl and the gssapi
plugin for both client and server use.  Search for SASL in the Solaris
10 docs section on docs.sun.com.

-- 
Will Fiveash
Sun Microsystems Inc.
Austin, TX, USA (TZ=CST6CDT)