Re: [Dovecot] [PATCH] Allow GSSAPI to work with multihomed hosts

2008-08-13 Thread Timo Sirainen
On Aug 12, 2008, at 2:28 AM, Jason Gunthorpe wrote: I choose to just use the magic configurable: auth_gssapi_hostname = $ALL rather than introduce more configurables Yes, the less different settings there are the better. :) Committed to v1.2 tree:

Re: [Dovecot] [PATCH] Allow GSSAPI to work with multihomed hosts

2008-08-13 Thread Jason Gunthorpe
On Wed, Aug 13, 2008 at 03:07:55PM -0400, Timo Sirainen wrote: + auth_request_log_info(request, gssapi, +Using all keytab entires); I'm beginning to wonder about the logging in the code though. To me it looks like all of these should rather be log_debug

[Dovecot] [PATCH] Allow GSSAPI to work with multihomed hosts

2008-08-12 Thread Jason Gunthorpe
I saw some past chatter on this in the list archives, but here is another stab and another rational. This patch follows a similar patch to openssh in that it allows any key in the specified keytab to match the incoming host key. This is necessary for multihomed hosts. See: