Re: GSSAPI authentication ceased working

2009-01-08 Thread Wesley Craig
On 02 Jan 2009, at 11:19, Lars Hanke wrote: > hermod: /var/log/auth.log > Jan 2 17:07:54 hermod imtest: GSSAPI Error: Unspecified GSS > failure. Minor code may provide more information (Decrypt > integrity check failed) > > hel: /var/log/syslog > Jan 2 16:07:54 hel krb5kdc[1652]: TGS_REQ (7

Re: GSSAPI authentication ceased working

2009-01-08 Thread Dave McMurtrie
Lars Hanke wrote: > BTW: It's still not working. I put it to PRI2, since the important > ldapdb stuff is running. Kerberized imap is rarely used here, so people > can do without. But still I'd like to understand, what is happening. Is the keytab readable by the cyrus user (the Unix uid)? Thank

Re: GSSAPI authentication ceased working

2009-01-07 Thread Lars Hanke
Hi Michael, > Shot in the dark here, but are you using AFS? If so, you can run into > some nasty things if it tries to grab libraries out of AFS that you > have access to when you have AFS tokens, but which become unavailable > when they expire. You start up the process with the tokens, but when

Re: GSSAPI authentication ceased working

2009-01-07 Thread Michael Bacon
Shot in the dark here, but are you using AFS? If so, you can run into some nasty things if it tries to grab libraries out of AFS that you have access to when you have AFS tokens, but which become unavailable when they expire. You start up the process with the tokens, but when you log back in, y