cyradm auth failure with krb admin instances

[Jukka Salmi]

Hi,

I'm using Cyrus IMAP4 v2.2.13.

I haven't used cyradm for some time, but today I noticed I can't log
in as admin anymore because GSSAPI authentication fails. My imapd.conf
contains `admins: jukka/admin'; I successfully require a TGT for
jukka/admin, but authentication fails:

$ cyradm --user jukka/admin --authz jukka/admin host
cyradm: cannot authenticate to server with  as jukka/admin

The following is logged:

imap[15512]: accepted connection
imap[15512]: badlogin: [...] GSSAPI [SASL(-13): authentication failure: bad userid authenticated]

Using a principal without a "admin" instance as a cyrus admin works
fine. This used to work some time ago, but I can't remember when
exactly...

Any hints what could have cause this regression? Or even better how
to fix it? ;-)


TIA, Jukka

-- 
bashian roulette:
$ ((RANDOM%6)) || rm -rf ~