I'm running 2.2.13-14+lenny3 on service-n2.dsrw.org, running Debian/lenny with Heimdal kerberos. The built-in GSSAPI is functional, but on my KDC I see that it requests a ticket for host/service-n2.dsrw.org@xxxxxxxx, digest/DSRW@xxxxxxxx and finally krbtgt/DSRW@xxxxxxxxx Why? I see no obvious need for a host/* ticket to authorize imap, and digest/DSRW and krbtgt/DSRW simply make no sense. Thanks! --david ---- Cyrus Home Page: http://cyrusimap.web.cmu.edu/ Cyrus Wiki/FAQ: http://cyrusimap.web.cmu.edu/twiki List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
