Bug#628525: libsasl2-modules-gssapi-mit: authentication now fails always

[Ondřej Surý]

I have confirmed that Dan's patch fixes the issue against
CRUSTYTOOTHPASTE.NET and will be uploading -3 shortly after it builds.

Thanks to both for helping fixing this bug.

Brian, you can probably tear down the ondrej account now, but if you
can just keep it inactive and re-enable it again if needed, it would
be great help when debugging the GSSAPI issues.

Thanks again to both,
Ondrej

On Fri, Jun 3, 2011 at 09:30, Dan White <dwhite at olp.net> wrote:
> On 02/06/11 21:22 -0500, Dan White wrote:
>>
>> I'm starting to suspect this is a client side problem (with imtest). With
>> the patch below, this command works:
>>
>> cyradm --auth gssapi --tlskey "" imap.example.org
>>
>> but this command still produces the error you're seeing:
>>
>> imtest -m gssapi -t "" imap.example.org
>>
>> I wonder if this might have something to do with changes due to the recent
>> starttls vulnerability. I'll take a closer look.
>
> This was also due to a bug in gssapi.c. See:
>
> http://bugzilla.cyrusimap.org/bugzilla3/show_bug.cgi?id=3480
>
>> The segfaulting problem is fixed for me after applying the patch tied to
>> this bug report:
>>
>> http://bugzilla.cyrusimap.org/bugzilla3/show_bug.cgi?id=3445
>
> --
> Dan White
>
>
>
> _______________________________________________
> Pkg-cyrus-sasl2-debian-devel mailing list
> Pkg-cyrus-sasl2-debian-devel at lists.alioth.debian.org
> http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-cyrus-sasl2-debian-devel
>



-- 
Ondřej Surý <ondrej at sury.org>