Can't connect to public imapd cyrus.andrew.cmu.edu. GSSAPI problems

Can't connect to public imapd cyrus.andrew.cmu.edu. GSSAPI problems

[Steinar Bang]

Platform: Intel Pentium, debian woody, GNU Emacs 20.7.2,
	Oort Gnus v0.05 (CVS checkout from today)

I just tried creating an nnimap server for the cyrus.andrew.cmu.edu
machine, which
	<http://asg.web.cmu.edu/cyrus/imapd/>
lists as holding a the cyrus imapd mailing list archive on a public
access IMAP server.

When I pressed SPC on this server to list the available groups, the
following happened:
	Connecting to cyrus.andrew.cmu.edu...
	Opening nnimap server on cyrus.andrew.cmu.edu...
	imap: Connecting to cyrus.andrew.cmu.edu...
	Waiting for response from cyrus.andrew.cmu.edu...done
	imap: Connecting to cyrus.andrew.cmu.edu...done
	imap: Reconnecting with stream `gssapi'...
	Opening GSSAPI IMAP connection with `imtest -m gssapi -u %l -p %p %s'...
	GSSAPI IMAP connection: failed
	imap: Reconnecting with stream `gssapi'...failed
	Opening nnimap server on cyrus.andrew.cmu.edu...failed
	Unable to contact server cyrus.andrew.cmu.edu: nil
	Auto-saving...
	Unable to contact server cyrus.andrew.cmu.edu: nil

www.google.com seems to indicate that imtest is a command line IMAP
test tool.  A search on <http://www.debian.org/distrib/packages> finds
it as part of the cyrus-imapd debian package, which my client machine
doesn't have installed.  Does it need to have it to be able to use
GSSAPI?  Whatever that is...?  google seems to indicate that it is an
API, and so does the name.  But the messages over seems to indicate
that it is some kind of secure connection...?

Re: Can't connect to public imapd cyrus.andrew.cmu.edu. GSSAPI problems

[Simon Josefsson]

Steinar Bang <sb@dod.no> writes:

> I just tried creating an nnimap server for the cyrus.andrew.cmu.edu
> machine, which
> 	<http://asg.web.cmu.edu/cyrus/imapd/>
> lists as holding a the cyrus imapd mailing list archive on a public
> access IMAP server.

Try this method instead (from the manual):

             (nnimap "cyrus.andrew.cmu.edu"
                     (nnimap-authenticator anonymous)
                     (nnimap-list-pattern "archive.*")
                     (nnimap-stream network))

> When I pressed SPC on this server to list the available groups, the
> following happened:

They got a gazillion groups, the list-pattern limits it to interesting
groups.

> www.google.com seems to indicate that imtest is a command line IMAP
> test tool.  A search on <http://www.debian.org/distrib/packages> finds
> it as part of the cyrus-imapd debian package, which my client machine
> doesn't have installed.  Does it need to have it to be able to use
> GSSAPI?  Whatever that is...?  google seems to indicate that it is an
> API, and so does the name.  But the messages over seems to indicate
> that it is some kind of secure connection...?

And since you don't have an account at the machine, you need to tell
nnimap to login anonymously.  GSSAPI means Kerberos 5, in this case.

Re: Can't connect to public imapd cyrus.andrew.cmu.edu. GSSAPI problems

[Steinar Bang]

>>>>> Simon Josefsson <jas@extundo.com>:

> Steinar Bang <sb@dod.no> writes:

>> I just tried creating an nnimap server for the cyrus.andrew.cmu.edu
>> machine, which
>> 	<http://asg.web.cmu.edu/cyrus/imapd/>
>> lists as holding a the cyrus imapd mailing list archive on a public
>> access IMAP server.

> Try this method instead (from the manual):

Blush!  Two searches with `s' from the top, for "anonymous", and there
it was...:-)

>              (nnimap "cyrus.andrew.cmu.edu"
>                      (nnimap-authenticator anonymous)
>                      (nnimap-list-pattern "archive.*")
>                      (nnimap-stream network))

That worked fine, thanx.

BTW, where are the marks stored for anonymous IMAP groups?  In
~/.newsrc.eld?

Re: Can't connect to public imapd cyrus.andrew.cmu.edu. GSSAPI problems

[Simon Josefsson]

Steinar Bang <sb@dod.no> writes:

>>              (nnimap "cyrus.andrew.cmu.edu"
>>                      (nnimap-authenticator anonymous)
>>                      (nnimap-list-pattern "archive.*")
>>                      (nnimap-stream network))
>
> That worked fine, thanx.
>
> BTW, where are the marks stored for anonymous IMAP groups?  In
> ~/.newsrc.eld?

On the server if it allows it, but if nnimap can't save them to the
server it should use .newsrc.eld.  (Or rather the other way around, if
the server can save them, nnimap restore those flags from the server
instead of trusting .newsrc.eld.)  But it probably hasn't been tested
a lot.