krb.equiv not working

[Giri Raichur]

Hello list,

I am trying to use krb.equiv to map kerberos principal names to mailbox
names when the names are not the same.

105375 at lanl.gov has a valid kerberos ticket and 
I have an entry 105375 at lanl.gov mapping to gzzr in krb.equiv but I see
the following in the logs:
Mar 30 11:10:12 pobox1663 imap[29501]: badlogin: gnome.lanl.gov
[128.165.114.73] GSSAPI [SASL(-13): authentication failure: user 105375
is not allowed to proxy

saslauthd is using pam for authentication.

GSSAPI works fine for users not in krb.equiv.

Any ideas? Thanks in advance for any help.

Regards,

Giri Raichur

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html