<div dir="ltr">Thank you for your prompt reply :). I still don't discover what caused the problem, but now I could get more information about the problem. I run the command that you commented me, I did as follows: - kinit usuipa - kvno imap/<a href="mailto:zimbrafreeipa.example.com@FI.example.com">zimbrafreeipa.example.com@FI.example.com</a> (I said in my previous mail <a href="http://fi.example.com">fi.example.com</a> but should have said <a href="http://zimbrafreeipa.example.com">zimbrafreeipa.example.com</a>. Forgiveness!!). Then run klist and got this: 11/24/14 14:04:53 11/25/14 14:04:50 krbtgt/<a href="mailto:FI.EXAMPLE.COM@FI.EXAMPLE.COM">FI.EXAMPLE.COM@FI.EXAMPLE.COM</a> 11/24/14 14:05:52 11/25/14 14:04:50 imap/<a href="mailto:zimbrafreeipa.fi.example.com@FI.EXAMPLE.COM">zimbrafreeipa.fi.example.com@FI.EXAMPLE.COM</a> Then run KRB5_TRACE=/dev/stdout kvno imap/<a href="mailto:zimbrafreeipa.example.com@FI.EXAMPLE.COM">zimbrafreeipa.example.com@FI.EXAMPLE.COM</a> and got this: --------------------------------------- OUTPUT --------------------------------------------------------------- [20649] 1416845334.9690: Getting credentials <a href="mailto:usuipa@FI.EXAMPLE.COM">usuipa@FI.EXAMPLE.COM</a> -> imap/<a href="mailto:zimbrafreeipa.fi.example.com@FI.EXAMPLE.COM">zimbrafreeipa.fi.example.com@FI.EXAMPLE.COM</a> using ccache FILE:/tmp/krb5cc_0 [20649] 1416845334.27562: Retrieving <a href="mailto:usuipa@FI.EXAMPLE.COM">usuipa@FI.EXAMPLE.COM</a> -> imap/<a href="mailto:zimbrafreeipa.fi.example.com@FI.EXAMPLE.COM">zimbrafreeipa.fi.example.com@FI.EXAMPLE.COM</a> from FILE:/tmp/krb5cc_0 with result: 0/Conseguido imap/<a href="mailto:zimbrafreeipa.fi.example.com@FI.EXAMPLE.COM">zimbrafreeipa.fi.example.com@FI.EXAMPLE.COM</a>: kvno = 2 --------------------------------------- END OF OUTPUT --------------------------------------------------- When I rum KRB5_TRACE=/dev/stdout thunderbird this show: --------------------------------------- OUTPUT --------------------------------------------------------------- Gtk-Message: Failed to load module "canberra-gtk-module": libcanberra-gtk-module.so: no se puede abrir el fichero del objeto compartido: No existe el fichero o el directorio [20906] 1416845377.323420: ccselect module realm chose cache FILE:/tmp/krb5cc_0 with client principal <a href="mailto:usuipa@FI.EXAMPLE.COM">usuipa@FI.EXAMPLE.COM</a> for server principal imap/<a href="mailto:zimbrafreeipa.fi.example.com@FI.EXAMPLE.COM">zimbrafreeipa.fi.example.com@FI.EXAMPLE.COM</a> [20906] 1416845377.323834: Retrieving <a href="mailto:usuipa@FI.EXAMPLE.COM">usuipa@FI.EXAMPLE.COM</a> -> krb5_ccache_conf_data/proxy_impersonator@X-CACHECONF: from FILE:/tmp/krb5cc_0 with result: -1765328243/Matching credential not found [20906] 1416845377.323939: Getting credentials <a href="mailto:usuipa@FI.EXAMPLE.COM">usuipa@FI.EXAMPLE.COM</a> -> imap/<a href="mailto:zimbrafreeipa.fi.example.com@FI.EXAMPLE.COM">zimbrafreeipa.fi.example.com@FI.EXAMPLE.COM</a> using ccache FILE:/tmp/krb5cc_0 [20906] 1416845377.324677: Retrieving <a href="mailto:usuipa@FI.EXAMPLE.COM">usuipa@FI.EXAMPLE.COM</a> -> imap/<a href="mailto:zimbrafreeipa.fi.example.com@FI.EXAMPLE.COM">zimbrafreeipa.fi.example.com@FI.EXAMPLE.COM</a> from FILE:/tmp/krb5cc_0 with result: 0/Conseguido [20906] 1416845377.325617: Creating authenticator for <a href="mailto:usuipa@FI.EXAMPLE.COM">usuipa@FI.EXAMPLE.COM</a> -> imap/<a href="mailto:zimbrafreeipa.fi.example.com@FI.EXAMPLE.COM">zimbrafreeipa.fi.example.com@FI.EXAMPLE.COM</a>, seqnum 138355536, subkey aes256-cts/3BB4, session key aes256-cts/A007 [20906] 1416845377.353847: ccselect module realm chose cache FILE:/tmp/krb5cc_0 with client principal <a href="mailto:usuipa@FI.EXAMPLE.COM">usuipa@FI.EXAMPLE.COM</a> for server principal imap/<a href="mailto:zimbrafreeipa.fi.example.com@FI.EXAMPLE.COM">zimbrafreeipa.fi.example.com@FI.EXAMPLE.COM</a> [20906] 1416845377.353971: Retrieving <a href="mailto:usuipa@FI.EXAMPLE.COM">usuipa@FI.EXAMPLE.COM</a> -> krb5_ccache_conf_data/proxy_impersonator@X-CACHECONF: from FILE:/tmp/krb5cc_0 with result: -1765328243/Matching credential not found [20906] 1416845377.354331: Read AP-REP, time 1416845380.325675, subkey (null), seqnum 1067232298 [20906] 1416845396.10173: ccselect module realm chose cache FILE:/tmp/krb5cc_0 with client principal <a href="mailto:usuipa@FI.EXAMPLE.COM">usuipa@FI.EXAMPLE.COM</a> for server principal imap/<a href="mailto:zimbrafreeipa.fi.example.com@FI.EXAMPLE.COM">zimbrafreeipa.fi.example.com@FI.EXAMPLE.COM</a> [20906] 1416845396.10290: Retrieving <a href="mailto:usuipa@FI.EXAMPLE.COM">usuipa@FI.EXAMPLE.COM</a> -> krb5_ccache_conf_data/proxy_impersonator@X-CACHECONF: from FILE:/tmp/krb5cc_0 with result: -1765328243/Matching credential not found [20906] 1416845396.10316: Getting credentials <a href="mailto:usuipa@FI.EXAMPLE.COM">usuipa@FI.EXAMPLE.COM</a> -> imap/<a href="mailto:zimbrafreeipa.fi.example.com@FI.EXAMPLE.COM">zimbrafreeipa.fi.example.com@FI.EXAMPLE.COM</a> using ccache FILE:/tmp/krb5cc_0 [20906] 1416845396.10391: Retrieving <a href="mailto:usuipa@FI.EXAMPLE.COM">usuipa@FI.EXAMPLE.COM</a> -> imap/<a href="mailto:zimbrafreeipa.fi.example.com@FI.EXAMPLE.COM">zimbrafreeipa.fi.example.com@FI.EXAMPLE.COM</a> from FILE:/tmp/krb5cc_0 with result: 0/Conseguido [20906] 1416845396.10469: Creating authenticator for <a href="mailto:usuipa@FI.EXAMPLE.COM">usuipa@FI.EXAMPLE.COM</a> -> imap/<a href="mailto:zimbrafreeipa.fi.example.com@FI.EXAMPLE.COM">zimbrafreeipa.fi.example.com@FI.EXAMPLE.COM</a>, seqnum 592157704, subkey aes256-cts/5F4D, session key aes256-cts/A007 [20906] 1416845396.35033: ccselect module realm chose cache FILE:/tmp/krb5cc_0 with client principal <a href="mailto:usuipa@FI.EXAMPLE.COM">usuipa@FI.EXAMPLE.COM</a> for server principal imap/<a href="mailto:zimbrafreeipa.fi.example.com@FI.EXAMPLE.COM">zimbrafreeipa.fi.example.com@FI.EXAMPLE.COM</a> [20906] 1416845396.35196: Retrieving <a href="mailto:usuipa@FI.EXAMPLE.COM">usuipa@FI.EXAMPLE.COM</a> -> krb5_ccache_conf_data/proxy_impersonator@X-CACHECONF: from FILE:/tmp/krb5cc_0 with result: -1765328243/Matching credential not found [20906] 1416845396.35293: Read AP-REP, time 1416845399.10477, subkey (null), seqnum 911725412 --------------------------------------- END OF OUTPUT --------------------------------------------------- About permissions on keytab file, I have as following: ls -l /opt/zimbra/conf/krb5.keytab -rwxrwxrwx 1 zimbra zimbra 366 nov 20 14:45 /opt/zimbra/conf/krb5.keytab Selinux (/etc/selinux/config) SELINUX=disabled What do you think about this?,<div style="display:inline-block" id="gt-input-tool"><div style id="itamenu"> I'm forgetting to do something?. </div></div> Have a nice day you too ^.^, and thanks for you help!. <div> -- <div class="gmail_signature">Maria José</div> </div></div>