Your message dated Tue, 12 Jun 2012 19:58:41 +0200
with message-id <[email protected]>
and subject line Re: Bug#594725: icedove: Kerberos support?
has caused the Debian Bug report #594725,
regarding icedove: Kerberos support?
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
594725: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=594725
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: icedove
Version: 3.0.6-1
Severity: normal
Somehow I cannot get Icedove to play nice with my Kerberos/Dovecot setup. Mutt
works fine, but with icedove, I get "... you have enabled secure authentication
and this server does not support it". But the Dovecot logs show that it is not
even trying:
Aug 28 18:45:23 gnome dovecot: auth: Debug: auth client connected (pid=22689)
Aug 28 18:45:27 gnome dovecot: imap-login: Disconnected (no auth attempts):
rip=172.22.21.58, lip=172.22.21.5, mpid=0, TLS
With mutt on the other hand, I get this:
Aug 28 18:46:59 gnome dovecot: auth: Debug: auth client connected (pid=22691)
[...]
Aug 28 18:47:01 gnome dovecot: imap-login: Login: user=<xxx>, method=GSSAPI,
rip=172.22.21.58, lip=172.22.21.5, mpid=22696, TLS
This is firstly a request for documentation, because so far I have not found a
single official document stating that Thunderbird/Icedove supports Kerberos
authentication. All information about it seems to come from third-party sources
(well, MozillaZine is somewhat official) and all indicate the same "check
Enable Secure Authentication and it works!". If only...
At this point I'm wondering whether Kerberos is even supported, or that only
SSPI-style (AD) authentication is available.
-- System Information:
Debian Release: squeeze/sid
APT prefers testing
APT policy: (990, 'testing'), (900, 'stable'), (300, 'squeeze'), (300,
'unstable'), (200, 'experimental')
Architecture: i386 (i686)
Kernel: Linux 2.6.34.6 (PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) (ignored: LC_ALL
set to en_US.UTF-8)
Shell: /bin/sh linked to /bin/dash
Versions of packages icedove depends on:
ii debianutils 3.4 Miscellaneous utilities specific t
ii fontconfig 2.8.0-2.1 generic font configuration library
ii libasound2 1.0.23-1 shared library for ALSA applicatio
ii libatk1.0-0 1.30.0-1 The ATK accessibility toolkit
ii libc6 2.11.2-2 Embedded GNU C Library: Shared lib
ii libcairo2 1.8.10-4 The Cairo 2D vector graphics libra
ii libdbus-1-3 1.2.24-3 simple interprocess messaging syst
ii libfontconfig1 2.8.0-2.1 generic font configuration library
ii libfreetype6 2.4.2-1 FreeType 2 font engine, shared lib
ii libgcc1 1:4.4.4-8 GCC support library
ii libglib2.0-0 2.24.1-1 The GLib library of C routines
ii libgtk2.0-0 2.20.1-1 The GTK+ graphical user interface
ii libjpeg62 6b1-1 The Independent JPEG Group's JPEG
ii libnspr4-0d 4.8.4-2 NetScape Portable Runtime Library
ii libnss3-1d 3.12.6-3 Network Security Service libraries
ii libpango1.0-0 1.28.1-1 Layout and rendering of internatio
ii libpng12-0 1.2.44-1 PNG library - runtime
ii libsqlite3-0 3.7.0-1.1 SQLite 3 shared library
ii libstartup-notification 0.10-1 library for program launch feedbac
ii libstdc++6 4.4.4-8 The GNU Standard C++ Library v3
ii libx11-6 2:1.3.3-3 X11 client-side library
ii libxrender1 1:0.9.6-1 X Rendering Extension client libra
ii libxt6 1:1.0.7-1 X11 toolkit intrinsics library
ii psmisc 22.11-1 utilities that use the proc file s
ii zlib1g 1:1.2.3.4.dfsg-3 compression library - runtime
Versions of packages icedove recommends:
ii myspell-de-de [myspell-dict 20091006-4.1 German dictionary for myspell
ii myspell-en-au [myspell-dict 2.1-5 English_australian dictionary for
ii myspell-en-gb [myspell-dict 1:3.2.1-2 English_british dictionary for mys
ii myspell-nl [myspell-diction 1:1.10-5 Dutch dictionary for MySpell and H
Versions of packages icedove suggests:
ii libdbus-glib-1-2 0.88-2 simple interprocess messaging syst
ii libgconf2-4 2.28.1-3 GNOME configuration database syste
ii libgnome2-0 2.30.0-1 The GNOME library - runtime files
ii libgnomevfs2-0 1:2.24.3-1 GNOME Virtual File System (runtime
ii libgssapi-krb5-2 1.8.3+dfsg~beta1-1 MIT Kerberos runtime libraries - k
ii ttf-lyx 1.6.7-1 TrueType versions of some TeX font
-- no debconf information
--- End Message ---
--- Begin Message ---
Hi,
On Sun, Nov 13, 2011 at 12:31:31AM +0100, Guido Günther wrote:
> On Wed, Sep 08, 2010 at 01:44:16PM +0200, Arno Schuring wrote:
> > Hi Christoph,
> >
> > Thanks for your reply. At least I know that it should be supported.
> >
> > On Tue, 31 Aug 2010 20:52:27 +0200
> > Christoph Goehre <[email protected]> wrote:
> > > Type this two lines in a terminal:
> > >
> > > export NSPR_LOG_MODULES=negotiateauth:5
> > > export NSPR_LOG_FILE=/tmp/negotiateauth.log
> > >
> > There are only 6 lines logged:
> >
> > -1319117968[a9826710]: entering nsAuthGSSAPI::nsAuthGSSAPI()
> > -1319117968[a9826710]: entering nsAuthGSSAPI::Init()
> > -1319117968[a9826710]: entering nsAuthGSSAPI::GetNextToken()
> > -1319117968[a9826710]: gss_init_sec_context() failed: An invalid name
> > was supplied
> > Hostname cannot be canonicalized
> > -1319117968[a9826710]: leaving nsAuthGSSAPI::GetNextToken
> > [rv=80004005]
> >
> >
> > I don't understand why it is complaining about the hostname, and about
> > which hostname it is complaining. It's probably not the name of the IMAP
> > server, because I get the same error if I enter the server IP address
> > instead of the hostname.
> Your KDCs log should provide more information. You don't get an
> imap/<hostname> ticket so this fails pretty early. Check your KDC's
> logs.
Since there wasn't any feedback I'm closing this report.
Cheers,
-- Guido
--- End Message ---
