Philip Martin wrote:
> >> 
> >> Have you tried with "mech_list: gssapi" so that the client has no choice?
> >
> > Yes, in fact I wrote about it in the original post. I repeat:
> >
> > If I disable the digest-md5 mech on the server, like
> > (mech_list: gssapi anonymous), I get:
> 
> I'm not a SASL expert, what does anonymous do?  Does that give the
> client a choice?  

Actually, it is not even advertised. What is advertised is:

( success ( ( GSSAPI DIGEST-MD5 ) 16:SIBPTUS.TOMSK.RU ) )

It is not being advertised because "anon-access = none" is configured
for this repo.

> Can you use "mech_list: gssapi"?

Made no difference.

-- 
Victor Sudakov,  VAS4-RIPE, VAS47-RIPN
sip:suda...@sibptus.tomsk.ru

Reply via email to