On Sun, 2011-05-01 at 23:19 +0000, brian m. carlson wrote:
> From /etc/dovecot/conf.d/10-auth.conf:
>
> # Kerberos keytab to use for the GSSAPI mechanism. Will use the system
> # default (usually /etc/krb5.keytab) if not specified.
>
> This is not true. The system default keytab is generally root-owned and
> 600 [0]. Dovecot's new authentication mechanism cannot read this file
> and therefore all GSSAPI authentication fails. The IMAP server
> responds:
Updated the comment to:
# Kerberos keytab to use for the GSSAPI mechanism. Will use the system
# default (usually /etc/krb5.keytab) if not specified. You may need to change
# the auth service to run as root to be able to read this file.
Meaning, you can do:
service auth {
user = root
}
--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
