SASL + IMAP + GSSAPI failure (other gssapi stuff works)
Jeff Blaine
jblaine at kickflop.net
Thu Feb 8 15:03:56 EST 2007
w00t:
Patch applied
S: A01 OK Success (privacy protection)
Authenticated.
Security strength factor: 56
Ken Hornstein wrote:
>> C: A01 AUTHENTICATE GSSAPI YIICBwYJKoZIhvcSAQICA...HUGE_STRING_HERE
>> S: + YIGWBgkqhkiG9xIBAgIC...HUGE_STRING_HERE
>
> Okay, those look alright.
>
>> base64 decoding error
>
> Hm. This _doesn't_ seem right, at all.
>
>> Feb 7 17:02:37 noodle.foo.com imap[25920]: [ID 824502 local6.notice]
>> badlogin: noodle.foo.com [192.168.168.100] GSSAPI [SASL(0): successful
>> result: mech EXTERNAL is too weak]
>
> You've got me here. GSSAPI has completed; that's not a GSSAPI error.
> I've never actually used imtest, so I can't provide any wisdom.
>
> --Ken
More information about the Cyrus-sasl
mailing list