After emerging net-mail/cyrus-imapd-2.2.12 with the "kerberos" USE-flag set, authenticating via GSSAPI with principals that have instances did not work. For example, principal "foo@EXAMPLE.COM" could authenticate in `imtest localhost` when holding a TGT, but "foo/admin@EXAMPLE.COM" could not. Instead, an error "[SASL(-13): authentication failure: bad userid authenticated]" was returned. This comes from the fact that "/" is not a valid character for UNIX usernames. Since version 2.2, Cyrus IMAPd offers a configure-option "--with-auth=krb5" that solves this issue. It should therefore be used when the kerberos USE-flag is set. Attached is a patch for cyrus-imapd-2.2.12.ebuild that does just this. ("--with-auth=krb5" is used when the kerberos USE-flag is set, "--with-auth=unix" otherwise.)
Created attachment 84649 [details, diff] Patch that sets "--with-auth=krb5" for configure if kerberos USE-flag is set
Fixed in 2.3.7.
