From 82e1d66f6bee1a8837d8d6c89c7ed6b11f2c0a48 Mon Sep 17 00:00:00 2001 From: Matthias Andree Date: Sat, 21 Aug 2010 15:38:16 +0200 Subject: Avoid wedging Exchange 2007 with GSSAPI. Exchange 2007 wedges if we try GSSAPI authentication and fail for lack of suitable credentails (for instance, because the user did not run kinit). Only try GSSAPI automatically if we have credentials. Reported by Patrick Rynhart, Debian Bug #568455, and Alan Murrell, to the fetchmail-users list. --- pop3.c | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) (limited to 'pop3.c') diff --git a/pop3.c b/pop3.c index 741a5319..f5e727c1 100644 --- a/pop3.c +++ b/pop3.c @@ -565,7 +565,8 @@ static int pop3_getauth(int sock, struct query *ctl, char *greeting) #if defined(GSSAPI) if (has_gssapi && (ctl->server.authenticate == A_GSSAPI || - ctl->server.authenticate == A_ANY)) + (ctl->server.authenticate == A_ANY + && check_gss_creds("pop", ctl->server.truename) == PS_SUCCESS))) { ok = do_gssauth(sock,"AUTH","pop",ctl->server.truename,ctl->remotename); if (ok == PS_SUCCESS || ctl->server.authenticate != A_ANY) -- cgit v1.2.3