On 04/05/11 09:01 +0200, Martin Schweizer wrote:
Hello
My system:
FreeBSD 8.2-RELEASE FreeBSD 8.2-RELEASE #0: Fri Apr 29 15:58:00 CEST
2011 martin@acsvfbsd04:/usr/obj/usr/src/sys/GENERIC i386
acsvfbsd04# pkg_info|grep sasl
cyrus-sasl-2.1.23 RFC 2222 SASL (Simple Authentication and Security Layer)
cyrus-sasl-saslauthd-2.1.23 SASL authentication server for cyrus-sasl2
In /etc/rc.conf I have:
saslauthd_enable="YES"
saslauthd_flags="-a kerberos5"
In /var/log/auth.log I get always:
May 4 08:44:24 acsvfbsd04 saslauthd[38396]: do_auth : auth failure:
[user=martin] [service=imap] [realm=] [mech=kerberos5]
[reason=krb5_verify_user_opt failed]
All the Kerberos5 stuff is working because I can use sasltauthd -a pam
(which use the FreeBSD modul pam_kerb5). So it's not a Kerberos
related problem.
PS: On a amd64 plattform the same setup is working... So it seems to
be 32 bit problem...
Which kerberos library was saslauthd compiled with? Does that differ from
the library that pam_kerb5 was compiled with?
Does running saslauthd in debug mode provide additional information? Do you
see anything in your KDC logs?
--
Dan White
