Bug#628525: libsasl2-modules-gssapi-mit: authentication now fails always

[brian m. carlson]

On Mon, May 30, 2011 at 12:12:46PM +0200, Ondřej Surý wrote:
> is it auxprop or saslauthd based?

Sendmail uses saslauthd.  Dovecot (for IMAP) uses its own SASL
implementation.  On the server, the new version is installed.  It's only
when the client uses the new version that problems occur.

> Could you please test using sample-sasl-{client,server} for auxprop
> and testsaslauthd for saslauthd?
> 
> And post results here?

castro ok % sudo testsaslauthd -u bmc -p "not the real password" -r CRUSTYTOOTHPASTE.NET
0: OK "Success."

I can also point out that plaintext authentication against the Kerberos
database works fine.

> Also would you be willing to help us setup testing krb environment?
> I'll create a kvm image with krb5 and will test new releases with
> that, but it's very hard to debug something we don't use :(.

I can do that.  Since you're a DD, I'm also happy to give you an account
on the server so that you can try to send and receive mail normally.
Simply give me your preferred username and I'll generate a random
Kerberos password (which I'll send you encrypted under your public key)
that you can use to acquire and use Kerberos credentials.

For the /etc/krb5.conf:

[realms]
        CRUSTYTOOTHPASTE.NET = {
                kdc = castro.crustytoothpaste.net
                admin_server = castro.crustytoothpaste.net
        }


-- 
brian m. carlson / brian with sandals: Houston, Texas, US
+1 832 623 2791 | http://www.crustytoothpaste.net/~bmc | My opinion only
OpenPGP: RSA v4 4096b: 88AC E9B2 9196 305B A994 7552 F1BA 225C 0223 B187
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/pkg-cyrus-sasl2-debian-devel/attachments/20110530/fd8a7d86/attachment.pgp>