SASL + IMAP + GSSAPI failure (other gssapi stuff works)

Jeff Blaine jblaine at kickflop.net
Thu Feb 8 15:03:56 EST 2007


w00t:

Patch applied

S: A01 OK Success (privacy protection)
Authenticated.
Security strength factor: 56

Ken Hornstein wrote:
>> C: A01 AUTHENTICATE GSSAPI YIICBwYJKoZIhvcSAQICA...HUGE_STRING_HERE
>> S: + YIGWBgkqhkiG9xIBAgIC...HUGE_STRING_HERE
> 
> Okay, those look alright.
> 
>> base64 decoding error
> 
> Hm.  This _doesn't_ seem right, at all.
> 
>> Feb  7 17:02:37 noodle.foo.com imap[25920]: [ID 824502 local6.notice] 
>> badlogin: noodle.foo.com [192.168.168.100] GSSAPI [SASL(0): successful 
>> result: mech EXTERNAL is too weak]
> 
> You've got me here.  GSSAPI has completed; that's not a GSSAPI error.
> I've never actually used imtest, so I can't provide any wisdom.
> 
> --Ken


More information about the Cyrus-sasl mailing list