[Pkg-sympa-devel] Bug#863701: sympa: insists that cookie has changed when it hasn't

[Dominik George]

Package: sympa
Version: 6.2.16~dfsg-3
Severity: grave
Justification: renders package unusable

SYMPA suddenly refuses to start with:

May 30 09:35:20 terra sympa_msg.pl[22389]: DIED: sympa.conf/cookie parameter has changed. You may have severe inconsitencies into password storage. Restore previous cookie or write some tool to re-encrypt password in database and check spools contents (look at /etc/sympa/cookies.history file). at /usr/lib/sympa/bin/sympa_msg.pl line 310.
May 30 09:35:20 terra sympa_msg.pl[22389]:  at /usr/lib/sympa/bin/sympa_msg.pl line 310.
May 30 09:35:20 terra sympa_msg.pl[22389]:         main::_load() called at /usr/lib/sympa/bin/sympa_msg.pl line 87

Now, while I see why this protection is in place, unfortunately, the
cookie has not changed. Neither has the parameter in the config file
changed (checked with etckeeper), nor has the contents of the cookie
file changed (checked with etckeeper), nor is anything different in
cookies.history.

SYMPA just decided to block startup.

-- System Information:
Debian Release: 9.0
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64
 (x86_64)

Kernel: Linux 4.9.0-2-amd64 (SMP w/4 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages sympa depends on:
ii  adduser                           3.115
ii  ca-certificates                   20161130+nmu1
ii  dbconfig-common                   2.0.8
ii  debconf [debconf-2.0]             1.5.60
ii  fonts-font-awesome                4.7.0~dfsg-1
ii  init-system-helpers               1.48
ii  libarchive-zip-perl               1.59-1
ii  libc6                             2.24-10
ii  libcgi-fast-perl                  1:2.12-1
ii  libcgi-pm-perl                    4.35-1
ii  libclass-singleton-perl           1.5-1
ii  libcrypt-openssl-x509-perl        1.8.7-3
ii  libcrypt-smime-perl               0.19-2
ii  libdatetime-format-mail-perl      0.4030-1
ii  libdbd-csv-perl                   0.4900-1
ii  libdbd-mysql-perl                 4.041-2
ii  libdbd-pg-perl                    3.5.3-1+b2
ii  libdbd-sqlite3-perl               1.54-1
ii  libdbi-perl                       1.636-1+b1
ii  libfcgi-perl                      0.78-2
ii  libfile-copy-recursive-perl       0.38-1
ii  libfile-nfslock-perl              1.27-1
ii  libhtml-format-perl               2.12-1
ii  libhtml-stripscripts-parser-perl  1.03-1
ii  libhtml-tree-perl                 5.03-2
ii  libintl-perl                      1.26-2
ii  libio-stringy-perl                2.111-2
ii  libjs-jquery                      3.1.1-2
ii  libjs-jquery-migrate-1            1.4.1-1
ii  libjs-jquery-placeholder          2.3.1-2
ii  libjs-jquery-ui                   1.12.1+dfsg-4
ii  libjs-modernizr                   2.6.2+ds1-1
ii  libjs-twitter-bootstrap           2.0.2+dfsg-10
ii  libmail-dkim-perl                 0.40-1
ii  libmailtools-perl                 2.18-1
ii  libmime-charset-perl              1.012-2
ii  libmime-encwords-perl             1.014.3-2
ii  libmime-lite-html-perl            1.24-2
ii  libmime-tools-perl                5.508-1
ii  libmsgcat-perl                    1.03-6+b3
ii  libnet-cidr-perl                  0.18-1
ii  libnet-dns-perl                   1.07-1
ii  libnet-ldap-perl                  1:0.6500+dfsg-1
ii  libnet-netmask-perl               1.9022-1
ii  libregexp-common-perl             2016060801-1
ii  libsoap-lite-perl                 1.20-1
ii  libtemplate-perl                  2.24-1.2+b3
ii  libterm-progressbar-perl          2.18-1
ii  libunicode-linebreak-perl         0.0.20160702-1+b1
ii  libxml-libxml-perl                2.0128+dfsg-1+b1
ii  lsb-base                          9.20161125
ii  mhonarc                           2.6.19-2
ii  perl                              5.24.1-2
pn  perl:any                          <none>
ii  postfix [mail-transport-agent]    3.1.4-4
ii  rsyslog [system-log-daemon]       8.24.0-1
ii  sqlite3                           3.16.2-3

Versions of packages sympa recommends:
ii  apache2-suexec-pristine [apache2-suexec]  2.4.25-3
ii  doc-base                                  0.10.7
ii  libapache2-mod-fcgid                      1:2.3.9-1+b1
pn  libcrypt-ciphersaber-perl                 <none>
ii  libio-socket-ssl-perl                     2.044-1
ii  locales                                   2.24-10
ii  logrotate                                 3.11.0-0.1
ii  postgresql                                9.6+181

Versions of packages sympa suggests:
ii  apache2 [httpd-cgi]  2.4.25-3
pn  libauthcas-perl      <none>
pn  libdbd-odbc-perl     <none>
pn  libdbd-oracle-perl   <none>

-- Configuration Files:
/etc/sympa/auth.conf changed [not included]

-- debconf information excluded