imapd GSSAPI requests host/ ticket

david l goodrich dlg at dsrw.org
Wed Nov 4 18:38:24 EST 2009


I'm running 2.2.13-14+lenny3 on service-n2.dsrw.org, running 
Debian/lenny with Heimdal kerberos.  The built-in GSSAPI is functional, 
but on my KDC I see that it requests a ticket for 
host/service-n2.dsrw.org at DSRW.ORG, digest/DSRW at DSRW.ORG and finally 
krbtgt/DSRW at DSRW.ORG.

Why?  I see no obvious need for a host/* ticket to authorize imap, and 
digest/DSRW and krbtgt/DSRW simply make no sense.

Thanks!
   --david


More information about the Info-cyrus mailing list