<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 TRANSITIONAL//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; CHARSET=UTF-8">
<META NAME="GENERATOR" CONTENT="GtkHTML/4.6.6">
</HEAD>
<BODY>
Moin!<BR>
<BR>
Ich probier grade einen neuen (aktuellen) Dovecot mit Kerberos-Authentifizierung (Kerberos-Server läuft bereits für Client-PC Anmeldung) einzurichten.<BR>
Wenn ich im Mail-Client Evolution versuche den IMAP-Ordner zu öffnen kommt eine Fehlermeldung:<BR>
<BR>
"Ordner konnte nicht geöffnet werden<BR>
<BR>
The reported error was "GSSAPI-Legitimation ist fehlgeschlagen".<BR>
<BR>
Beiliegend hoffentlich hilfreiche Informationen. Kann mir jemand helfen?<BR>
<BR>
Danke, Sandra<BR>
<BR>
Dovecot Version: 2.1.17<BR>
<BR>
Konfiguration:<BR>
<BR>
auth_mechanisms = gssapi<BR>
auth_debug = yes<BR>
auth_gssapi_hostname = kerberosServer.domain<BR>
auth_realms = REALM<BR>
auth_default_realm = REALM<BR>
auth_krb5_keytab = /etc/krb5.keytab<BR>
auth_verbose = yes<BR>
disable_plaintext_auth = yes<BR>
userdb {<BR>
driver = static<BR>
args = uid=vmail gid=vmail home=/service/mailServer_Kommunikations-Server/mails/%u<BR>
}<BR>
mail_location = maildir:/service/mailServer_Kommunikations-Server/mails/imap/%u/:INBOX=/service/mailServer_Kommunikations-Server/mails/maildir/%u<BR>
log_timestamp = "%Y-%m-%d %H:%M:%S "<BR>
managesieve_notify_capability = mailto<BR>
managesieve_sieve_capability = fileinto reject envelope encoded-character vacation subaddress comparator-i;ascii-numeric relational regex imap4flags copy include variables body enotify environment mailbox date ihave<BR>
protocols = imap pop3<BR>
ssl = no<BR>
service auth {<BR>
unix_listener /var/spool/postfix/private/auth_dovecot {<BR>
group = postfix<BR>
mode = 0660<BR>
user = postfix<BR>
}<BR>
unix_listener auth-master {<BR>
mode = 0600<BR>
user = mail<BR>
}<BR>
user = root<BR>
}<BR>
protocol pop3 {<BR>
pop3_uidl_format = %08Xu%08Xv<BR>
}<BR>
protocol lda {<BR>
auth_socket_path = /var/run/dovecot/auth-master<BR>
postmaster_address = root@mailServer.domain<BR>
}<BR>
mail_privileged_group = mail<BR>
<BR>
Logfile:<BR>
<BR>
2014-06-09T09:59:22.596608+02:00 highlands dovecot: auth: Debug: Loading modules from directory: /usr/lib64/dovecot/modules/auth<BR>
2014-06-09T09:59:22.598243+02:00 highlands dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/modules/auth/libdriver_mysql.so<BR>
2014-06-09T09:59:22.598559+02:00 highlands dovecot: auth: Debug: Loading modules from directory: /usr/lib64/dovecot/modules/auth<BR>
2014-06-09T09:59:22.600354+02:00 highlands dovecot: auth: Debug: Module loaded: /usr/lib64/dovecot/modules/auth/libmech_gssapi.so<BR>
2014-06-09T09:59:22.600982+02:00 highlands dovecot: auth: Debug: auth client connected (pid=5770)<BR>
2014-06-09T09:59:22.602211+02:00 highlands dovecot: auth: Debug: client in: AUTH#0111#011GSSAPI#011service=imap#011session=E7rSlmL70wDAqEWd#011lip=mailServerIP#011rip=clientIP#011lport=143#011rport=46035<BR>
2014-06-09T09:59:22.602498+02:00 highlands dovecot: auth: Debug: gssapi(?,clientIP,<E7rSlmL70wDAqEWd>): Obtaining credentials for <A HREF="mailto:imap@dartmoor.outback">imap@dartmoor.outback</A><BR>
2014-06-09T09:59:22.610815+02:00 highlands dovecot: auth: gssapi(?,clientIP,<E7rSlmL70wDAqEWd>): While acquiring service credentials: Unspecified GSS failure. Minor code may provide more information<BR>
2014-06-09T09:59:22.611097+02:00 highlands dovecot: auth: gssapi(?,clientIP,<E7rSlmL70wDAqEWd>): While acquiring service credentials: No key table entry found matching imap/dartmoor.outback@<BR>
2014-06-09T09:59:24.113071+02:00 highlands dovecot: auth: Debug: client passdb out: FAIL#0111#011temp<BR>
2014-06-09T09:59:24.113818+02:00 highlands dovecot: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=<>, method=GSSAPI, rip=clientIP, lip=mailServerIP, session=<E7rSlmL70wDAqEWd><BR>
<BR>
</BODY>
</HTML>