I am new to Kerberos authentication so I have been poking things to see how they react.
I have a local test network of VMs with cyrus imap, postgres and a webserver running roundcube 1.2. I can log into roundcube and authenticate through the imap server.
I then point roundcube to an already established IMAP server on another test network that uses Kerberos authentication. I have the krb5 extension installed.
When I try to authenticate with imap_auth_type='LOGIN' it fails as expected as LOGIN is turned off on the IMAP server. Twitch achieved.
If I set imap_auth_type as the default null I get complaints about gssapi_cn and gssapi_context not set. Looking at the php code I am not sure if theseconfig items are something I am supposed to set somewhere and, if so, what format. Google'd around and there is not much there.
Any suggestions?