Debugging why KRB5_KTNAME isn't working

Ken Hornstein kenh at cmf.nrl.navy.mil
Thu Jan 27 14:55:43 EST 2022


>Yes.  That is the "for-purpose" mechanism that I alluded to earlier
>which is why I posited that if smtpd was clearing the environment it
>was doing so in violation of the specific mechanism that was supposed
>to make this all work.

Oh, hm.  I might be reading the code wrong, but it looks like the
SASL library (which is what eventually calls the Kerberos library) is
initialized _before_ the environment is reset.  So if you're not also
setting those variables in the environment in the "traditional" way then
it might not see them.

(And Jochen's suggestion is also good, I forgot about the SASL config
file).

--Ken


More information about the Kerberos mailing list