On Wed, Apr 30, 2025 at 08:30:16PM +0300, Aki Tuomi wrote:
> GSSAPI is one of these pretty opaque protocols. Since it works with
> mutt, and does not work with gsasl, it could be some thing with gsasl.

It could, but the same gsasl version can authenticate against dovecot
2.3.31.  I will attempt to repro the issue with other clients.

> I can only see one change in mech-gssapi, we use
> mech_gssapi_krb5_userok() always. Also we have added support for final
> response prosessing, which was missing in 2.3.21.1. 

I'm testing a build with the mech_gssapi_krb5_userok() change reverted,
because I agree that it's the only change that appears relevant.  Will
post results when I have them.

noah

_______________________________________________
dovecot mailing list -- dovecot@dovecot.org
To unsubscribe send an email to dovecot-le...@dovecot.org

Reply via email to