On 2012-02-17 at 08:38 -0500, Phil Pennock wrote:
> I have:
>
> auth_gssapi:
> driver = heimdal_gssapi
> public_name = GSSAPI
> server_hostname = smtp.spodhuis.org
> server_realm = SPODHUIS.ORG
> server_keytab = /etc/kerberos/tabs/exim.keytab
> server_set_id = $auth1
*cough* "server_realm" is unused and there doesn't seem to be anything
sane to do with it in GSSAPI; the concept exists in Kerberos, but really
any tickets for the specified principal in the keytab will be used.
So I'm removing that option.
Oops.
(Bright side: I found this while documenting the driver, thus there will
shortly exist documentation for this.)
-Phil