Kerberos Version 5 error

I can't seem to get "Mountain Lion" mail to work connecting via IMAP (993) on Kerberos Authentication. I have a OS X Server 10.8 or 2.2.1 running with the mail service turned on. I also have made sure that all possible allowed authentication methods are turned on, in the server app.

Back on the mail app in mountain lion when running connection doctor SMTP logs in fine on Kerberos, however IMAP or POP i keep getting the erorr that I need to check if the server supports Kerberos Version 5 authentication...?

The reason for this is that I want to use single-sign on for network accounts for services running on the server.

Please can someone shed light on this.

Thanks

Mac mini, OS X Server

Posted on Jun 11, 2013 2:49 PM

20 replies

Miggl

Level 1

89 points

Feb 24, 2014 12:06 PM in response to Justin William Smith

Thanks, I did try this, but it had no effect. Looking at that config file, all items are commented out, making it appear that this file is not being used at all.

I made the changes highlighted in that KB, but they don't seem to have any effect.

Did you only change the one line described in the KB article, or did you make more changes?

Thanks 🙂

Feb 24, 2014 12:10 PM in response to Miggl

I believe I uncommented them and changed it then restarted the server and it has worked ever since.

Miggl

Level 1

89 points

Feb 24, 2014 1:09 PM in response to Justin William Smith

Ah, thank you! 🙂 Restarting the server did the trick. All's working now here as well.

May 11, 2014 4:49 AM in response to Miggl

I am on Mavericks Server and I am unable to get this working.

Can you guys be more specific because I tried doing what the article mentions and then rebooting but no change. I also tried putting the FQDN instead of the "ALL$" and that didn't work either. Am I supposed to be uncommenting anything else in there?

Everything else seems ok in terms of Kerberos, I am using the right Realm from klist, I can get a valid ticket with Ticket Viewer, I forced an authenticated bind on the client but I can't get Single Sign-On to work with Mail.

tim_r_66

Level 1

51 points

May 11, 2014 7:26 AM in response to MoisesRuiz

When using klist, do you get an entry where the principal starts with imap?

In Server.app, what authentication option(s) do you have selected for Mail?

Tim

p.s., I see you've started a new thread on this. I will go and comment on that one. This was older and focused on ML.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Kerberos Version 5 error