Bug#455983: libsasl2-modules-gssapi-heimdal: SASL<->SASL GSSAPI failure (likely in -mit version as well)

[Richard A Nelson]

On Wed, 12 Dec 2007, Richard A Nelson wrote:

> /etc/mail/authinfo:
> AuthInfo:<fqdn> "U:?" "P:?" "R:<REALM>" "M:GSSAPI"

With that format of entry, the odd error is gone:
GSSAPI Error:  An unsupported mechanism was requested (unknown mech-code 0 for mech unknown)

But smtptest still shows:
S: 535 5.7.0 authentication failed

Even though I have the apropriate ticket on my cache
# klist
Credentials cache: FILE:/tmp/krb5cc_0_RBIrI12346
         Principal: root at COBPLI.SVL.IBM.COM

   Issued           Expires          Principal
Dec 13 02:17:50  Dec 27 02:17:50 krbtgt/COBPLI.SVL.IBM.COM at COBPLI.SVL.IBM.COM
Dec 13 02:18:09  Dec 27 02:17:50 smtp/corkscrew.svl.ibm.com at COBPLI.SVL.IBM.COM
Dec 13 02:18:38  Dec 27 02:17:50 smtp/bandit-hall.svl.ibm.com at COBPLI.SVL.IBM.COM
Dec 13 02:36:58  Dec 27 02:17:50 smtp/el-ghor.svl.ibm.com at COBPLI.SVL.IBM.COM

And, I can validate a failing principle:
# kinit -t /etc/mail/sendmail.keytab smtp/corkscrew.svl.ibm.com
/root# klist
Credentials cache: FILE:/tmp/krb5cc_0_TnLVx31462
         Principal: smtp/corkscrew.svl.ibm.com at COBPLI.SVL.IBM.COM

   Issued           Expires          Principal
Dec 13 03:57:09  Dec 27 03:59:48 krbtgt/COBPLI.SVL.IBM.COM at COBPLI.SVL.IBM.COM


-- 
Rick Nelson
<Knghtbrd> I really don't want much at all...  Just a kind word, an
            attractive woman, and UNLIMITED BANDWIDTH!!