Getting Postfix to work with cyrus-sasl GSSAPI mechanism

Matthew Larsen utegrad at gmail.com
Tue Apr 30 15:31:59 EDT 2013


On 4/30/2013 12:15 PM, Ken Hornstein wrote:
>> This is what is shown in the postfix log:
>>
>> Apr 30 10:58:18 SBSMTPNV03 postfix/smtpd[17554]: warning: SASL
>> authentication failure: GSSAPI Error: Unspecified GSS failure.  Minor
>> code may provide more information ()
>> Apr 30 10:58:18 SBSMTPNV03 postfix/smtpd[17554]: warning:
>> nvit01b.EXAMPLE.com[10.20.2.0]: SASL GSSAPI authentication failed:
>> generic failure
> So this looks like the ticket is being passed to GSSAPI correctly, but
> (for whatever reason) GSSAPI isn't working.  It's not clear to me that
> you actually got the same problem with sasl2-sample-server; you didn't
> show any GSSAPI messages from sasl2-sample-server.
>
> --Ken
Where should I look for those messages?  I don't see anything from the 
shell when I run the command other than:

# sasl2-sample-server -m GSSAPI -s smtp
trying 2, 1, 6
trying 10, 1, 6
socket: Address family not supported by protocol

and in the syslog:

Apr 30 12:30:24 SBSMTPNV03 sasl2-sample-server: auxpropfunc error 
invalid parameter supplied




More information about the Cyrus-sasl mailing list