Kerberos enabled mail server error

[Entrepreneur-AJ]

Our mail server allows GSSAPI, Plain and Login authentication but can't connect.

running the check_config utility I get the following response;

`=== GENERAL INFORMATION ===

• OS information: Linux 6.2.14-300.fc38.x86_64 #1 SMP PREEMPT_DYNAMIC Mon May 1 00:55:28 UTC 2023 x86_64
• PHP version: 8.2.5

=== EXTENSIONS ===

• pdo_mysql...................... Ok
• xmlreader...................... Ok
• zip............................ Ok
• json........................... Ok

=== CONFIG FILE ===

• Checking if the file exists.... Ok
• Checking read permission....... Ok
• Checking write permission...... Ok
• Checking access by other users. Ok === GENERAL INFORMATION ===
• OS information: Linux 6.2.14-300.fc38.x86_64 #1 SMP PREEMPT_DYNAMIC Mon May 1 00:55:28 UTC 2023 x86_64
• PHP version: 8.2.5

=== EXTENSIONS ===

• pdo_mysql...................... Ok
• xmlreader...................... Ok
• zip............................ Ok
• json........................... Ok

=== CONFIG FILE ===

• Checking if the file exists.... Ok
• Checking read permission....... Ok
• Checking write permission...... Ok
• Checking access by other users. Ok

=== DATABASE ===

• Accessibility check............ Ok
• Checking for integrity......... Ok

=== MAILBOXES ===

• Checking mailboxes config...... Ok Message: 1 mailbox found
• Imap extension................. Ok
  • Dmarc-Rua
    • Accessibility.............. dmarc-srg [error]: IMAP error: GSSAPI mechanism status: No Kerberos credentials available (default cache: KCM:) dmarc-srg [error]: imap_getacl: ACL not available on this IMAP server Ok

=== DIRECTORIES ===

• Checking directories config.... Ok Message: No directories found

=== Success! === DATABASE ===

• Accessibility check............ Ok
• Checking for integrity......... Ok

=== MAILBOXES ===

• Checking mailboxes config...... Ok Message: 1 mailbox found
• Imap extension................. Ok
  • Dmarc-Rua
    • Accessibility.............. dmarc-srg [error]: IMAP error: GSSAPI mechanism status: No Kerberos credentials available (default cache: KCM:) dmarc-srg [error]: imap_getacl: ACL not available on this IMAP server Ok

=== DIRECTORIES ===

• Checking directories config.... Ok Message: No directories found

=== Success!`

[liuch]

Hello Entrepreneur-AJ, I just have added a small fix. Can you check it?

[Entrepreneur-AJ]

Seems to have cleared the issue on the cli, will await to see if it successfully parses the next batch of DMARC reports and before closing this issue.

[liuch]

I'm going to make this solution an option in the conf.php, since someone might be successfully using gssapi on their server for this tool. After your confirmation, there will be another commit.

[Entrepreneur-AJ]

Commit seems to have worked, been able to pull the first set of DMARC Reports today, so ready to move on to next commit. Want me to leave this issue open and test your next relevant commit or close it?

[liuch]

Yes, if you don't mind.

[Entrepreneur-AJ]

No problem will await next commit

[liuch]

Done. You need to add a parameter named auth_exclude to your conf.php file. You can see an example here: https://github.com/liuch/dmarc-srg/blob/master/config/conf.sample.php#L50

Feel free to ask if you have any questions.

[Entrepreneur-AJ]

Latest commit pulled will update once next batch of dmarc reports processed.

[Entrepreneur-AJ]

All working properly, hard work is apreciated.

[liuch]

Thank you for the report. Have a good day.