I'm authenticating IMAP users on one of our Unix boxes (Solaris 8)
against our Windows 200 domain using the pam krb5 module from sourceforge.
I thought this was working fine (and it was for most users) but it
seems that it doesn't work if the user's password contains a character
with the top bit set (I know it doesn't work with a password containing
a pound sterling sign (hex A3) - I've not tried others).
The same thing happens using kinit
kinit nph9
Password for [EMAIL PROTECTED]:
kinit: Preauthentication failed while getting initial credentials
This happens with the kinit supplied as part of the OS as well
as the ones from MIT Kerberos 1.2.2 and Heimdal 0.3f.
It _does_ work when authenticating against an MIT Kerberos server.
Any ideas about where I should be looking?
Paul
--
Paul Haldane
Unix Systems, Computing Service University of Newcastle
--