Ubuntu 18.04 msmtp:GSSAPI身份验证失败

我正在尝试使用带有NTLM或GSSAPI身份验证的MSMTP发送电子邮件。这在使用NTLM身份验证时可以正常工作，但在使用GSSAPI时失败

msmtp --version

输出

msmtp version 1.6.6
Platform: x86_64-pc-linux-gnu
TLS/SSL library: GnuTLS
Authentication library: GNU SASL
Supported authentication methods:
plain scram-sha-1 external gssapi cram-md5 digest-md5 login ntlm
IDN support: enabled
NLS: enabled, LOCALEDIR is /usr/share/locale
Keyring support: none
System configuration file name: /etc/msmtprc
User configuration file name: /home/XXXX/.msmtprc

用于发送电子邮件的命令

printf "Subject: Using GSSAPI\n\nTest message 1 using GSSAPI." | msmtp userid@somedomain.name

错误消息

msmtp: GNU SASL: GSSAPI error in client while negotiating security context in gss_init_sec_context() in SASL library.  This is most likely due insufficient credentials or malicious interactions.
msmtp: could not send mail (account default from /etc/msmtprc)

auth gssapi
timeout 10
tls on
#tls_trust_file /etc/ssl/certs/ca-certificates.crt
tls_certcheck off
logfile /var/log/xxxx/msmtp.log
host <<hostname>>
port 587
from username@somedomain.name
user username@somedomain.name
password <<password>>

系统配置文件

msmtp: GNU SASL: GSSAPI error in client while negotiating security context in gss_init_sec_context() in SASL library.  This is most likely due insufficient credentials or malicious interactions.
msmtp: could not send mail (account default from /etc/msmtprc)

auth gssapi
timeout 10
tls on
#tls_trust_file /etc/ssl/certs/ca-certificates.crt
tls_certcheck off
logfile /var/log/xxxx/msmtp.log
host <<hostname>>
port 587
from username@somedomain.name
user username@somedomain.name
password <<password>>

auth gssapi
超时10
tls on
#tls_信任文件/etc/ssl/certs/ca-certificates.crt
tls\U证书检查
日志文件/var/log/xxxx/msmtp.log
主办
587端口
从…起username@somedomain.name
使用者username@somedomain.name
密码

---

想知道我是否遗漏了任何配置步骤/命令或实现了一些错误。非常感谢您的帮助。提前感谢。

SASL将委托MIT Kerberos/Heimdal。你需要先做一个

kinit

。导出

KRB5_TRACE=/dev/stderr

，您将看到MIT Kerberos的功能。

我的系统上是否需要Heimdal？抱歉问了这个幼稚的问题，我是MSMTP GSSAPI认证的新手。@VikramV不，MIT Kerberos。据我所知，

KRB5_TRACE

仅适用于MIT Kerberos。与您的操作系统核实GNU SASL使用了什么。