SASL + IMAP + GSSAPI failure (other gssapi stuff works)

Jeff Blaine jblaine at kickflop.net
Thu Feb 8 15:00:03 EST 2007


Ken Hornstein wrote:
>> C: A01 AUTHENTICATE GSSAPI YIICBwYJKoZIhvcSAQICA...HUGE_STRING_HERE
>> S: + YIGWBgkqhkiG9xIBAgIC...HUGE_STRING_HERE
> 
> Okay, those look alright.
> 
>> base64 decoding error
> 
> Hm.  This _doesn't_ seem right, at all.

I'm pretty good at hitting EVERY bug in EVERY piece of software
I touch.

http://cvs.mandriva.com/cgi-bin/cvsweb.cgi/SPECS/cyrus-imapd/cyrus-imapd-2.2.12-saslcompatfix.patch

Thread starts here:

http://www.irbs.net/internet/cyrus-sasl/0605/0042.html

Anyway, thanks again for the help, Ken.  I owe you dinner or beers
or something by now if you ever make it near Tampa, FL :)

>> Feb  7 17:02:37 noodle.foo.com imap[25920]: [ID 824502 local6.notice] 
>> badlogin: noodle.foo.com [192.168.168.100] GSSAPI [SASL(0): successful 
>> result: mech EXTERNAL is too weak]
> 
> You've got me here.  GSSAPI has completed; that's not a GSSAPI error.
> I've never actually used imtest, so I can't provide any wisdom.


More information about the Cyrus-sasl mailing list