I'm authenticating IMAP users on one of our Unix boxes (Solaris 8)
against our Windows 200 domain using the pam krb5 module from sourceforge.
I thought this was working fine (and it was for most users) but it
seems that it doesn't work if the user's password contains a character
with the top bit set (I know it doesn't work with a password containing
a pound sterling sign (hex A3) - I've not tried others).

The same thing happens using kinit

kinit nph9
Password for [EMAIL PROTECTED]: 
kinit: Preauthentication failed while getting initial credentials

This happens with the kinit supplied as part of the OS as well
as the ones from MIT Kerberos 1.2.2 and Heimdal 0.3f.

It _does_ work when authenticating against an MIT Kerberos server.

Any ideas about where I should be looking?  

Paul

-- 
Paul Haldane
Unix Systems, Computing Service University of Newcastle

--

Reply via email to