[Dovecot] kerberos trying to obtain credentials for wrong machine

[Nikolay Shopik]

Hi,

I'm currently trying to configure Dovecot to use kerberos. My KDC is 
Windows 2003 and I successful generated keytab file for Dovecot machine. 
Problem is when I'm trying to use GSSAPI it told me
Obtaining credentials for i...@debian5 - and of course this fails 
because debian5 isn't KDC, it should look for 
imap/debian5.inblock.lo...@inblock.local.

What I'm missing?

Re: [Dovecot] kerberos trying to obtain credentials for wrong machine

[Jason Gunthorpe]

On Wed, Feb 18, 2009 at 10:33:09PM +0300, Nikolay Shopik wrote:

 I'm currently trying to configure Dovecot to use kerberos. My KDC is 
 Windows 2003 and I successful generated keytab file for Dovecot machine. 
 Problem is when I'm trying to use GSSAPI it told me
 Obtaining credentials for i...@debian5 - and of course this fails because 
 debian5 isn't KDC, it should look for 
 imap/debian5.inblock.lo...@inblock.local.
 What I'm missing?

You need to make sure that 'hostname -f' returns a full hostname, and
you need to put default_realm = INBLOCK.LOCAL into your krb5.conf

Then confirm that 'kvno imap/debian5.inblock.local' works

Jason