imapd GSSAPI requests host/ ticket

[Martin Schweizer]

Hello David

2009/11/5 david l goodrich <dlg at dsrw.org>:
> I'm running 2.2.13-14+lenny3 on service-n2.dsrw.org, running
> Debian/lenny with Heimdal kerberos.  The built-in GSSAPI is functional,
> but on my KDC I see that it requests a ticket for
> host/service-n2.dsrw.org at DSRW.ORG, digest/DSRW at DSRW.ORG and finally
> krbtgt/DSRW at DSRW.ORG.
>
> Why?  I see no obvious need for a host/* ticket to authorize imap, and
> digest/DSRW and krbtgt/DSRW simply make no sense.

I'm not sure I can help you. I have a similar setup but I use WIndows
domain controller as KDC and Cyrus Imap -> Cyrus SALS (saslauthd) ->
PAM -> Kerberos5. Should I send you any hints for this way?

Regards,


-- 
Martin Schweizer
schweizer.martin at gmail.com
Tel.: +41 32 512 48 54 (VoIP)
Fax: +1 619 3300587