Thanks a lot Patrick for such a detailed reply, but I'm still stuck at gssapi/murder setup. Do one needs "mupdate/hostFQDN" service principle to make murder/gssapi work? I have "host/FQDN", "imap/FQDN" but still things doesn't work. The relevent part of imapd.conf on my frontend machine:
sasl_pwcheck_method: saslauthd sasl_mech_list: GSSAPI keytab: /etc/imap/krb5.keytab mupdate_admin: cyrus mupdate_server: abc.example.com mupdate_username: cyrus abc_mechs: GSSAPI Do I need something more to make this work? Thanks KMK __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com ---- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html