Dear Maintainer,

when I have a valid Kerberos TGT and start gajim, it fails to
connect to the xmpp-server but prints the following error:

Traceback (most recent call last):
  File "/usr/lib/python2.7/dist-packages/nbxmpp/dispatcher_nb.py", line 497, in
dispatch
    handler['func'](session, stanza)
  File "/usr/lib/python2.7/dist-packages/nbxmpp/auth_nb.py", line 304, in
SASLHandler
    data=base64.b64decode(incoming_data.encode('utf-8')).decode('utf-8')
  File "/usr/lib/python2.7/encodings/utf_8.py", line 16, in decode
    return codecs.utf_8_decode(input, errors, True)
UnicodeDecodeError: 'utf8' codec can't decode byte 0x81 in position 1: invalid
start byte


klist shows that it already obtained new tickets for the xmpp-server.

This same setup works fine on a system running debian 7.7 with gajim
0.15.1-4-1.

If I remove my TGT and start gajim anew, it asks me for a password and then
connects
successfully.

Apart from the real problem that caused this traceback, I think gajim should
catch
such errors and fall back to prompting for a password if external
authentication
failed.

Thanks,
    Thomas

Dear Maintainer,

the bug has been analysed and was reported to upstream:
https://python-nbxmpp.gajim.org/ticket/30

As this bug was fixed by a trivial patch, which has already been accepted
by the developers, I would ask you to raise severity to serious, as
it renders gajim unusable for everyone doing authentication via GSSAPI.
My hopes are to get a usable version of gajim into jessie.

Please note that this bug should actually be reassigned to python-nbxmpp.

Kind regards,
    Thomas

It seems, that kerberos authentication is broken on Gajim.