[28207] in Kerberos
Re: Thunderbird issues, KfW, Windows domain + separate KDC
daemon@ATHENA.MIT.EDU (Ken Hornstein)
Mon Aug 6 12:12:47 2007
Message-Id: <200708061612.l76GCGoX001316@ginger.cmf.nrl.navy.mil>
To: kerberos@mit.edu
In-Reply-To: <46B7419A.50403@kickflop.net>
Date: Mon, 06 Aug 2007 12:12:17 -0400
From: Ken Hornstein <kenh@cmf.nrl.navy.mil>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: kerberos-bounces@mit.edu
>
>Aug 6 11:29:20 mailsrv1.company.org imap[29443]: [ID 824502
>local6.notice] badlogin: client.company.org [XXX.XX.200.50] GSSAPI
>[SASL(-1): generic failure: protocol violation: client requested
>invalid layer]
>
>======================================================================
># /etc/imapd.conf
>...
>allowplaintext: false
>force_sasl_mech: gssapi
>sasl_log_level: 4
>sasl_minimum_layer: 1
Unfortunately, the last line of your imapd.conf is very likely the problem.
sasl_minimum_layer: 1 means that your SASL connection has to at least do
integrity checking, which Thunderbird does not support.
--Ken
________________________________________________
Kerberos mailing list Kerberos@mit.edu
https://mailman.mit.edu/mailman/listinfo/kerberos
