Interesting. Do you end up getting tickets for the host service or just a tgt? Is any error logged on the Kerberos KDC?
Does the sasl sample pass the hostname into the sasl library? Many mechanisms such as digest-md5 and cram-md5 will mostly work without a hostname passed in, but gssapi requires it. I rather assume the sample got that right because I'd actually expect that CMU often tests with gssapi. --Sam -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
