Philip Martin wrote: > >> > >> Have you tried with "mech_list: gssapi" so that the client has no choice? > > > > Yes, in fact I wrote about it in the original post. I repeat: > > > > If I disable the digest-md5 mech on the server, like > > (mech_list: gssapi anonymous), I get: > > I'm not a SASL expert, what does anonymous do? Does that give the > client a choice?
Actually, it is not even advertised. What is advertised is: ( success ( ( GSSAPI DIGEST-MD5 ) 16:SIBPTUS.TOMSK.RU ) ) It is not being advertised because "anon-access = none" is configured for this repo. > Can you use "mech_list: gssapi"? Made no difference. -- Victor Sudakov, VAS4-RIPE, VAS47-RIPN sip:suda...@sibptus.tomsk.ru