[Bug 218899] mail/mutt GSSAPI oddity

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=218899

--- Comment #6 from dereks at lifeofadishwasher.com ---
I think we're starting to get in to mutt-user's mailing list questions due to
my limited (0) use of these features. However, I'd like to guess without
GSSAPI_* selected this disables mutt's ability to authenticate directly with
IMAP servers with GSSAPI.  But if SASL is enabled mutt will attempt to use SASL
with cyrus-sasl via the cyrus-sasl-gssapi plugin will attempt to authenticate
with GSSAPI.  This would move the GSSAPI code from mutt to cyrus-sasl and its
plugins?

If you look at cyrus-sasl-gssapi you'll see almost the same GSSAPI_* options as
mail/mutt's Makefile.  

I'm unsure if you tested this from comment 0 but does GSS authentication work
if you disable SASL and enable a compatible GSS implementation with mail/mutt?

Based off mutt's manual mutt should attempt SASL then GSSAPI however it needs
to be compiled in.  http://www.mutt.org/doc/manual/#imap-authentication
If you've only tested with the default options or the FreeBSD repo package then
I would like to guess mutt would never attempt to try GSSAPI directly since
--with-gss (Compile in GSSAPI authentication for IMAP) wouldn't be set at
compile time.

Looking at this a bit more it seems that maybe cyrus-sasl-gssapi shouldn't be
installed if a non-GSSAPI_NONE is picked and the attached patch should be
replaced.

Possible changes:

- Install cyrus-sasl-gssapi if you have SASL selected.
- Add a new option to install cygrus-sasl-gssapi.
- A pkg-message explaining if you need GSSAPI install cyrus-sasl-gssapi
(security/cyrus-sasl2 already does this)

-- 
You are receiving this mail because:
You are the assignee for the bug.