Bug#638045: warning: xsasl_cyrus_server_get_mechanism_list: no mechanism available

[Luca Capello]

Hi there!

On Wed, 17 Aug 2011 11:59:19 +0200, Stefano Zacchiroli wrote:
> On Tue, Aug 16, 2011 at 09:54:14PM +0200, Johnny Morano wrote:
>> Postfix is unable to receive mail and unable to send mail via SASL
>> authentication, after installing the updates of today.  These are the
>> error messages:
>
> I can reproduce this in Sid.

/me too.

> Reverting both "libsasl2-2" and "libsasl2-modules" to version
> 2.1.23.dfsg1-7 fixes the problem.

FWIW, reverting to 2.1.24~rc1.dfsg1+cvs2011-05-23-4 is enough.

BTW, if you use Cyrus SASL authentication in Postfix, you can not
     actually revert libsasl2-2 and libsasl2-modules only, but you need
     to revert sasl2-bin as well because of its versioned dependency.

> I'm setting severity as serious, as it breaks pretty heavily mail
> delivery for SASL-based postfix configuration. I'm also marking the bug
> as affecting postfix, as many people will probably look for some issue
> there.

Thank you, indeed I did not find it during a first look, maybe the title
should be changed to reflect the IMHO most common error?  In my case:

  C61E120DDD     2071 Wed Aug 17 10:45:55  luca at pca.it
  (SASL authentication failed; cannot authenticate to server \
   home.pca.it[83.211.85.135]: no mechanism available)
                                         debian-publicity at lists.debian.org

Two notes, maybe they could be useful:

1) the upgrade from -4 to -5 created an /etc/sasldb2 file, is it really
   useful?  And why not in /etc/sasl2/ instead, already used by
   libvirt-bin?

2) the remote SMTP server uses Postfix_2.7.1-1+squeeze1, but SASL
   authentication is provided by Dovecot_1:1.2.15-7.gismo.gnus8959~1
   (see #632844).

Thx, bye,
Gismo / Luca

-- System Information:
Debian Release: wheezy/sid
  APT prefers unstable
  APT policy: (990, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 3.0.0-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages sasl2-bin depends on:
ii  db-util 5.1.4                            Berkeley Database Utilities
ii  debconf 1.5.41                           Debian configuration management sy
ii  libc6   2.13-16                          Embedded GNU C Library: Shared lib
ii  libcome 1.42~WIP-2011-07-02-1            common error description library
ii  libdb5. 5.1.25-11                        Berkeley v5.1 Database Libraries [
ii  libgssa 1.9.1+dfsg-2                     MIT Kerberos runtime libraries - k
ii  libk5cr 1.9.1+dfsg-2                     MIT Kerberos runtime libraries - C
ii  libkrb5 1.9.1+dfsg-2                     MIT Kerberos runtime libraries
ii  libldap 2.4.25-3                         OpenLDAP libraries
ii  libpam0 1.1.3-2                          Pluggable Authentication Modules l
ii  libsasl 2.1.24~rc1.dfsg1+cvs2011-05-23-5 Cyrus SASL - authentication abstra
ii  libssl1 1.0.0d-3                         SSL shared libraries
ii  lsb-bas 3.2-27                           Linux Standard Base 3.2 init scrip

sasl2-bin recommends no packages.

sasl2-bin suggests no packages.

-- Configuration Files:
/etc/default/saslauthd changed:
START=yes
DESC="SASL Authentication Daemon"
NAME="saslauthd"
MECHANISMS="pam"
MECH_OPTIONS=""
THREADS=5
OPTIONS="-c -m /var/spool/postfix/var/run/saslauthd"


-- debconf information:
  cyrus-sasl2/upgrade-sasldb2-failed:
  cyrus-sasl2/backup-sasldb2: /var/backups/sasldb2.bak
  cyrus-sasl2/upgrade-sasldb2-backup-failed:
  cyrus-sasl2/purge-sasldb2: false
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 835 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-cyrus-sasl2-debian-devel/attachments/20110817/0434e9c0/attachment.pgp>