Bug#455983: libsasl2-modules-gssapi-heimdal: SASL<->SASL GSSAPI failure (likely in -mit version as well)

[Richard A Nelson]

Thanks for the quick responses, and tools to help !
Abbreviated output of the two commands is below - and confirms that
the infrastructure is setup.

I installed libsasl2-gssapi-mit (which seems somewhat downlevel
compared to the other sasl packages in Sid) on one of the machines
and see the same failure:
GSSAPI Error:  An unsupported mechanism was requested (unknown mech-code 0 for mech unknown)

#saslpluginviewer  (I checked both client and server machines)
Installed SASL (server side) mechanisms are:
PLAIN ANONYMOUS NTLM LOGIN DIGEST-MD5 CRAM-MD5 GSSAPI EXTERNAL
...
Plugin "gssapiv2" [loaded],     API version: 4
         SASL mechanism: GSSAPI, best SSF: 56, supports setpass: no
         security flags: NO_ANONYMOUS|NO_PLAINTEXT|NO_ACTIVE|PASS_CREDENTIALS|MUTUAL_AUTH
         features: WANT_CLIENT_FIRST|PROXY_AUTHENTICATION
...
Installed SASL (client side) mechanisms are:
PLAIN ANONYMOUS NTLM LOGIN DIGEST-MD5 CRAM-MD5 GSSAPI EXTERNAL
...
Plugin "gssapiv2" [loaded],     API version: 4
         SASL mechanism: GSSAPI, best SSF: 56
         security flags: NO_ANONYMOUS|NO_PLAINTEXT|NO_ACTIVE|PASS_CREDENTIALS|MUTUAL_AUTH
         features: WANT_CLIENT_FIRST|PROXY_AUTHENTICATION|NEED_SERVER_FQDN

#smtptest -v -f /dev/null <fqdn>
...
S: 250-ETRN
S: 250-AUTH GSSAPI DIGEST-MD5 CRAM-MD5 NTLM LOGIN PLAIN
S: 250-STARTTLS
S: 250-DELIVERBY
S: 250 HELP
C: AUTH GSSAPI
S: 334 
C:
YIICxQYJKoZIhvcSAQICAQBuggK0MIICsKADAgEFoQMCAQ6iBwMFACAAAACjggF1YYIBcTCCAW2gA
wIBBaEMGwpDQVZFSU4uT1JHoiowKKADAgEBoSEwHxsEc210cBsXdWx0aW1hLXRodWxlLmNhdmVpbi5vc
mejggEqMIIBJqADAgESoQMCAQKiggEYBIIBFNQkVdWJi84mFBMxNz/EuowkHQYow8JmZDm0MrizsNFgp
k4FA9lv7MV76SzvRlHDSOLNQD2Hw36oQY+zYlC2RcpyC/x/TZ05MYc8rFAPkyr4qn5IN6TlIDlZtAWR4
t5Xcvm3WS2MRSGJ5UcrDETOD0CSI+AfbWGQqbW9mSs2CzVLHXkQgo2LMNUx/PxPEIoukXzGrEhZbNKOy
pId9k4i9JnRTYYpTGVZfrOa2uhPXg4jzT3uZYs43H/MYwtyALlzj9s6JfBY2g5uh6Au9Yx+Pd+DXxb5E
SRQqTEgzpKdYzJZlMYJtCLF30fVghsKeeypyurXcSKU2facY+lUzizUp7JLti3zYSzmFZEcA3hg7S00S
zumsqSCASAwggEcoAMCARKiggETBIIBD8Kw3QAkLFd6s8KYL0ek3JxrqvglEDI1HrTMDro7KAA+rZq1r
RmyJG2Q2Kn/+hzqhsMO+HX/ZICJS2ABwUZUcH8113RvHTiaf9Kjj4SYUJf5GdTfn5wQHtNzPasqUwrdM
0l6qvoKEuUqFYdp04gHTUsF9a8lp7rCk7INqOjOv27XIHuIR5Pj9DQMUCYE+v+8/26MADH1fGeOcP3ky
sEkcPUuZAsKNgVzw+8T6JoJ34murdD+3VBHmFYmH5apE0GysTggFdtwOc9TJfCDFemcGtrFbf1mOR+yE
zriMVEOQnbvP1bnnuSWG3Xs4awPNWczb1I2Yq313ifRlEnA8gKVW9bqQzur3p67lH8OFW1+1Dw=
S: 535 5.7.0 authentication failed
Authentication failed. generic failure
Security strength factor: 0
C: QUIT
Connection closed.

-- 
Rick Nelson
A subversive is anyone who can out-argue their government.