GSSAPI authentication doesn't work in a murder environment running on RHEL10, while PLAIN, LOGIN and CRAM-MD5 work just fine. Imtest fails with the following error"
"cyr_imtest -u usertest -m GSSAPI mbdb.xxx.com -p 143 S: * OK [CAPABILITY IMAP4rev1 IMAP4rev2 AUTH=PLAIN AUTH=LOGIN AUTH=GSSAPI AUTH=CRAM-MD5 ENABLE ID LITERAL+ SASL-IR MUPDATE=mupdate://xxx.xxx.com/] xxx.xxx.com Cyrus IMAP 3.12.4-1.el10 Fedora server ready C: A01 AUTHENTICATE GSSAPI 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 S: + YIGZBgkqhkiG9xIBAgICAG+BiTCBhqADAgEFoQMCAQ+iejB4oAMCARKicQRvysrY7EbDklzjOJXvrDkVWjcGcKPj8r9TmQm4ksNNCfVAA7+/MViA4QD6q6l3+FzBOr2xtnFiEuWREf8M0niz47jOTfUvuetIGSvzOobZ2RBDq5UrjVYxuuxe3aLMrDLIxQicuI62IGOls0PirD2k C: S: + BQQF/wAYAAAAAAAAO22C3QcAEAD3LMrcFjrQEENLXwnQd5wJurMQXYfRIpQ= C: BQQE/wAYAAAAAAAADCMIHwIABAB1c2VydGVzdEMFPz4NyrzpjtZUsc6cEV4v5SqFs9uLSA== S: C: * Authentication failed. generic failure Security strength factor: 1 C: C01 CAPABILITY �AS: ��U>7��5����q�H�7����WARNING: possible MITM attack: list of available SASL mechanisms changed Connection closed." The maillog on the server with imapd.conf "degub: 1" settings: Sep 14 12:11:04 mbdb cyrus/imap[74617]: accepted connection Sep 14 12:11:04 mbdb cyrus/imap[74617]: extractor_init(0x5602fb033b50) Sep 14 12:11:05 mbdb cyrus/imap[74617]: SASL GSSAPI server step failed: 2 Sep 14 12:11:05 mbdb cyrus/imap[74617]: SASL GSSAPI server step failed: 3 Sep 14 12:11:05 mbdb cyrus/imap[74617]: login: xxx.xxx.com [192.168.2.10] usertest GSSAPI User logged in SESSIONID=<cyrus-1789369864-74617-1-11413953613957169481> Sep 14 12:11:05 mbdb cyrus/imap[74617]: decoding error: generic failure; SASL(-1): generic failure: , closing connection Sep 14 12:11:05 mbdb cyrus/imap[74617]: session ended: sessionid=<cyrus-1789369864-74617-1-11413953613957169481> userid=<usertest> id.vendor=<> id.name=<> id.version=<> Sep 14 12:11:05 mbdb cyrus/imap[74617]: extractor_destroy((nil)) Sep 14 12:12:43 mbdb cyrus/imap[74616]: extractor_destroy((nil)) Sep 14 12:12:43 mbdb cyrus/master[74584]: process type:SERVICE name:imap path:/usr/libexec/cyrus-imapd/imapd age:3873.939s pid:74616 exited normally I'm quite sure the configurations are ok, as the 3.8.x with same configurations has no GSSAPI authentication issues. Should I install the debugs packages to increase the log verbosity? Thanks Khalid MK ------------------------------------------ Cyrus: Info Permalink: https://cyrus.topicbox.com/groups/info/T722c8e40ecfcd8cd-Me3df57a1e795d3df1c299d2a Delivery options: https://cyrus.topicbox.com/groups/info/subscription
