Il 17/02/22 20:33, Sergey Poznyakoff ha scritto:
To begin with, enable transcript in your server section:
server 0.0.0.0:993 {
transcript yes;
...
}
Could the segfaults be related with the attempt Thunderbird does to
create the other folders (Sent, Drafts and Trash),
Judging by the output you got, it doesn't get this far. It looks like the
coredump occurs during TLS handshake.
It seems to occur in the authentication phase.
I attached 2 syslog snippets obtained with 'transcript yes':
- auth_plain.log is the result of an authentication attempt in PLAIN mode
Also contains the output of ltrace and strace during a PLAIN auth attempt.
- auth_cram-md5.log is the result of two authentication attempt in "encrypted"
mode: the client reports that password wasn't accepted and I tried to input
it a second time, then I cancelled the attempt.
I also tried with other MUAs getting identical outcomes (some also attempt to
login with 'authenticate LOGIN', but fail just the same).
I checked and reinstalled all the dependencies.
Summing up: the only authentication method accepted seems to be from command
line, openssl s_connect, '. LOGIN <username> <password>' (which doesn't require
any hashing), every other method fails.
Can you figure out what's going on? Is there a way to get further info?
That's intended. If you don't need your home directory to be visible
within your personal namespace, create a directory for imap
(e.g. ~/.imap) and add the following to your imap4d configuration:
namespace personal {
prefix "";
directory "$home/.imap";
}
Please read
https://mailutils.org/manual/html_node/Namespace.html
for a detailed discussion on how to configure imap4d namespaces.
Thanks, this seems indeed to stop $home listing.
Thank you!
Feb 18 00:29:16 mybox imap4d[64428]: TLS established using AES-128-GCM-AEAD
(TLS1.3)
Feb 18 00:29:16 mybox imap4d[64428]: S: * OK IMAP4rev1
Feb 18 00:29:16 mybox imap4d[64429]: TLS established using AES-128-GCM-AEAD
(TLS1.3)
Feb 18 00:29:16 mybox imap4d[64429]: S: * OK IMAP4rev1
Feb 18 00:29:16 mybox imap4d[64429]: C: 26 capability
Feb 18 00:29:16 mybox imap4d[64429]: S: * CAPABILITY IMAP4rev1 NAMESPACE ID
IDLE LITERAL+ UNSELECT AUTH=GSSAPI AUTH=ANONYMOUS AUTH=EXTERNAL AUTH=LOGIN
AUTH=PLAIN AUTH=SECURID AUTH=DIGEST-MD5 AUTH=CRAM-MD5 AUTH=SCRAM-SHA-1
AUTH=SCRAM-SHA-1-PLUS AUTH=SCRAM-SHA-256 AUTH=SCRAM-SHA-256-PLUS AUTH=SAML20
AUTH=OPENID20 AUTH=GSSAPI AUTH=GS2-KRB5
Feb 18 00:29:16 mybox imap4d[64429]: S: 26 OK CAPABILITY Completed
Feb 18 00:29:16 mybox imap4d[64428]: C: 43 capability
Feb 18 00:29:16 mybox imap4d[64428]: S: * CAPABILITY IMAP4rev1 NAMESPACE ID
IDLE LITERAL+ UNSELECT AUTH=GSSAPI AUTH=ANONYMOUS AUTH=EXTERNAL AUTH=LOGIN
AUTH=PLAIN AUTH=SECURID AUTH=DIGEST-MD5 AUTH=CRAM-MD5 AUTH=SCRAM-SHA-1
AUTH=SCRAM-SHA-1-PLUS AUTH=SCRAM-SHA-256 AUTH=SCRAM-SHA-256-PLUS AUTH=SAML20
AUTH=OPENID20 AUTH=GSSAPI AUTH=GS2-KRB5
Feb 18 00:29:16 mybox imap4d[64428]: S: 43 OK CAPABILITY Completed
Feb 18 00:29:24 mybox imap4d[64428]: C: 44 authenticate PLAIN
Feb 18 00:29:24 mybox imap4d[64429]: C: 27 authenticate PLAIN
Feb 18 00:29:24 mybox imap4d[64428]: S: +
Feb 18 00:29:24 mybox imap4d[64429]: S: +
Feb 18 00:29:24 mybox kernel: [13885.517632] imap4d[64429]: segfault at 0 ip
00007f02d3006479 sp 00007fff3bcf7b10 error 4 in
libmailutils.so.8.0.0[7f02d2f70000+a4000]
Feb 18 00:29:24 mybox imap4d[64429]: C: [redacted]
Feb 18 00:29:24 mybox imap4d[63697]: process 64429 terminated on signal 11
Feb 18 00:29:24 mybox imap4d[64428]: C: [redacted]
Feb 18 00:29:24 mybox imap4d[63697]: process 64428 terminated on signal 11
Feb 18 00:29:24 mybox kernel: [13885.522479] imap4d[64428]: segfault at 0 ip
00007f02d3006479 sp 00007fff3bcf7b10 error 4 in
libmailutils.so.8.0.0[7f02d2f70000+a4000]
Feb 18 00:29:24 mybox imap4d[64473]: TLS established using AES-128-GCM-AEAD
(TLS1.3)
Feb 18 00:29:24 mybox imap4d[64473]: S: * OK IMAP4rev1
Feb 18 00:29:24 mybox imap4d[64474]: TLS established using AES-128-GCM-AEAD
(TLS1.3)
Feb 18 00:29:24 mybox imap4d[64474]: S: * OK IMAP4rev1
Feb 18 00:29:24 mybox imap4d[64473]: C: 21 capability
Feb 18 00:29:24 mybox imap4d[64473]: S: * CAPABILITY IMAP4rev1 NAMESPACE ID
IDLE LITERAL+ UNSELECT AUTH=GSSAPI AUTH=ANONYMOUS AUTH=EXTERNAL AUTH=LOGIN
AUTH=PLAIN AUTH=SECURID AUTH=DIGEST-MD5 AUTH=CRAM-MD5 AUTH=SCRAM-SHA-1
AUTH=SCRAM-SHA-1-PLUS AUTH=SCRAM-SHA-256 AUTH=SCRAM-SHA-256-PLUS AUTH=SAML20
AUTH=OPENID20 AUTH=GSSAPI AUTH=GS2-KRB5
Feb 18 00:29:24 mybox imap4d[64473]: S: 21 OK CAPABILITY Completed
Feb 18 00:29:24 mybox imap4d[64474]: C: 40 capability
Feb 18 00:29:24 mybox imap4d[64474]: S: * CAPABILITY IMAP4rev1 NAMESPACE ID
IDLE LITERAL+ UNSELECT AUTH=GSSAPI AUTH=ANONYMOUS AUTH=EXTERNAL AUTH=LOGIN
AUTH=PLAIN AUTH=SECURID AUTH=DIGEST-MD5 AUTH=CRAM-MD5 AUTH=SCRAM-SHA-1
AUTH=SCRAM-SHA-1-PLUS AUTH=SCRAM-SHA-256 AUTH=SCRAM-SHA-256-PLUS AUTH=SAML20
AUTH=OPENID20 AUTH=GSSAPI AUTH=GS2-KRB5
Feb 18 00:29:24 mybox imap4d[64474]: S: 40 OK CAPABILITY Completed
Feb 18 00:29:24 mybox imap4d[64473]: C: 22 authenticate PLAIN
Feb 18 00:29:24 mybox imap4d[64473]: S: +
Feb 18 00:29:24 mybox imap4d[64473]: C: [redacted]
Feb 18 00:29:24 mybox kernel: [13885.839712] imap4d[64473]: segfault at 0 ip
00007f02d3006479 sp 00007fff3bcf7b10 error 4 in
libmailutils.so.8.0.0[7f02d2f70000+a4000]
Feb 18 00:29:24 mybox imap4d[63697]: process 64473 terminated on signal 11
Feb 18 00:29:24 mybox imap4d[64474]: C: 41 authenticate PLAIN
Feb 18 00:29:24 mybox imap4d[64474]: S: +
Feb 18 00:29:24 mybox imap4d[64474]: C: [redacted]
Feb 18 00:29:24 mybox imap4d[63697]: process 64474 terminated on signal 11
Feb 18 00:29:24 mybox kernel: [13885.843863] imap4d[64474]: segfault at 0 ip
00007f02d3006479 sp 00007fff3bcf7b10 error 4 in
libmailutils.so.8.0.0[7f02d2f70000+a4000]
##############
### ltrace ###
##############
[...]
request_init(0x7ffd2ec054b0, 2, 0x55d12341f5e0, 1)
=
0x7ffd2ec054b0
sock_host(0x7ffd2ec054b0, 0, 0, 0x64347061)
= 0
hosts_access(0x7ffd2ec054b0, 0x7f702362eae0, 0x7ffd2ec0346c, 0x7f7023350ef7)
= 1
request_init(0x7ffd2ec054b0, 2, 0x55d12341f5e0, 1)
=
0x7ffd2ec054b0
sock_host(0x7ffd2ec054b0, 0, 0, 0x64347061)
= 0
hosts_access(0x7ffd2ec054b0, 0x7f702362eae0, 0x7ffd2ec0346c, 0x7f7023350ef7)
= 1
--- SIGCHLD (Child exited) ---
--- SIGCHLD (Child exited) ---
request_init(0x7ffd2ec054b0, 2, 0x55d12341f5e0, 1)
=
0x7ffd2ec054b0
sock_host(0x7ffd2ec054b0, 0, 0, 0x64347061)
= 0
hosts_access(0x7ffd2ec054b0, 0x7f702362eae0, 0x7ffd2ec0346c, 0x7f7023350ef7)
= 1
request_init(0x7ffd2ec054b0, 2, 0x55d12341f5e0, 1)
=
0x7ffd2ec054b0
sock_host(0x7ffd2ec054b0, 0, 0, 0x64347061)
= 0
hosts_access(0x7ffd2ec054b0, 0x7f702362eae0, 0x7ffd2ec0346c, 0x7f7023350ef7)
= 1
--- SIGCHLD (Child exited) ---
--- SIGCHLD (Child exited) ---
##############
### strace ###
##############
[...]
accept(3, {sa_family=AF_INET, sin_port=htons(33898),
sin_addr=inet_addr("127.0.0.1")}, [112->16]) = 5
getpid() = 79931
getpeername(5, {sa_family=AF_INET, sin_port=htons(33898),
sin_addr=inet_addr("127.0.0.1")}, [128->16]) = 0
getsockname(5, {sa_family=AF_INET, sin_port=htons(993),
sin_addr=inet_addr("127.0.0.1")}, [128->16]) = 0
openat(AT_FDCWD, "/etc/hosts.allow", O_RDONLY) = 6
newfstatat(6, "", {st_mode=S_IFREG|0644, st_size=580, ...}, AT_EMPTY_PATH) = 0
read(6, "# /etc/hosts.allow: list of host"..., 4096) = 580
read(6, "", 4096) = 0
close(6) = 0
openat(AT_FDCWD, "/etc/hosts.deny", O_RDONLY) = 6
newfstatat(6, "", {st_mode=S_IFREG|0644, st_size=880, ...}, AT_EMPTY_PATH) = 0
read(6, "# /etc/hosts.deny: list of hosts"..., 4096) = 880
read(6, "", 4096) = 0
close(6) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD,
child_tidptr=0x7f91fe275c50) = 79970
close(5) = 0
pselect6(4, [3], NULL, NULL, NULL, NULL) = 1 (in [3])
accept(3, {sa_family=AF_INET, sin_port=htons(33900),
sin_addr=inet_addr("127.0.0.1")}, [112->16]) = 5
getpid() = 79931
getpeername(5, {sa_family=AF_INET, sin_port=htons(33900),
sin_addr=inet_addr("127.0.0.1")}, [128->16]) = 0
getsockname(5, {sa_family=AF_INET, sin_port=htons(993),
sin_addr=inet_addr("127.0.0.1")}, [128->16]) = 0
openat(AT_FDCWD, "/etc/hosts.allow", O_RDONLY) = 6
newfstatat(6, "", {st_mode=S_IFREG|0644, st_size=580, ...}, AT_EMPTY_PATH) = 0
read(6, "# /etc/hosts.allow: list of host"..., 4096) = 580
read(6, "", 4096) = 0
close(6) = 0
openat(AT_FDCWD, "/etc/hosts.deny", O_RDONLY) = 6
newfstatat(6, "", {st_mode=S_IFREG|0644, st_size=880, ...}, AT_EMPTY_PATH) = 0
read(6, "# /etc/hosts.deny: list of hosts"..., 4096) = 880
read(6, "", 4096) = 0
close(6) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD,
child_tidptr=0x7f91fe275c50) = 79971
close(5) = 0
pselect6(4, [3], NULL, NULL, NULL, NULL) = ? ERESTARTNOHAND (To be restarted if
no handler)
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=79971, si_uid=0,
si_status=SIGSEGV, si_utime=1, si_stime=0} ---
rt_sigreturn({mask=[]}) = -1 EINTR (Interrupted system call)
wait4(-1, [{WIFSIGNALED(s) && WTERMSIG(s) == SIGSEGV}], WNOHANG, NULL) = 79971
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=79970, si_uid=0,
si_status=SIGSEGV, si_utime=0, si_stime=0} ---
rt_sigreturn({mask=[]}) = 140735474657840
getpid() = 79931
sendto(4, "<19>Feb 18 01:17:26 imap4d[79931"..., 72, MSG_NOSIGNAL, NULL, 0) = 72
wait4(-1, [{WIFSIGNALED(s) && WTERMSIG(s) == SIGSEGV}], WNOHANG, NULL) = 79970
getpid() = 79931
sendto(4, "<19>Feb 18 01:17:26 imap4d[79931"..., 72, MSG_NOSIGNAL, NULL, 0) = 72
wait4(-1, 0x7fff87f96cc4, WNOHANG, NULL) = -1 ECHILD (No child processes)
pselect6(4, [3], NULL, NULL, NULL, NULL) = 1 (in [3])
accept(3, {sa_family=AF_INET, sin_port=htons(33902),
sin_addr=inet_addr("127.0.0.1")}, [112->16]) = 5
wait4(-1, 0x7fff87f96ae4, WNOHANG, NULL) = -1 ECHILD (No child processes)
getpid() = 79931
getpeername(5, {sa_family=AF_INET, sin_port=htons(33902),
sin_addr=inet_addr("127.0.0.1")}, [128->16]) = 0
getsockname(5, {sa_family=AF_INET, sin_port=htons(993),
sin_addr=inet_addr("127.0.0.1")}, [128->16]) = 0
openat(AT_FDCWD, "/etc/hosts.allow", O_RDONLY) = 6
newfstatat(6, "", {st_mode=S_IFREG|0644, st_size=580, ...}, AT_EMPTY_PATH) = 0
read(6, "# /etc/hosts.allow: list of host"..., 4096) = 580
read(6, "", 4096) = 0
close(6) = 0
openat(AT_FDCWD, "/etc/hosts.deny", O_RDONLY) = 6
newfstatat(6, "", {st_mode=S_IFREG|0644, st_size=880, ...}, AT_EMPTY_PATH) = 0
read(6, "# /etc/hosts.deny: list of hosts"..., 4096) = 880
read(6, "", 4096) = 0
close(6) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD,
child_tidptr=0x7f91fe275c50) = 79977
close(5) = 0
pselect6(4, [3], NULL, NULL, NULL, NULL) = 1 (in [3])
accept(3, {sa_family=AF_INET, sin_port=htons(33904),
sin_addr=inet_addr("127.0.0.1")}, [112->16]) = 5
getpid() = 79931
getpeername(5, {sa_family=AF_INET, sin_port=htons(33904),
sin_addr=inet_addr("127.0.0.1")}, [128->16]) = 0
getsockname(5, {sa_family=AF_INET, sin_port=htons(993),
sin_addr=inet_addr("127.0.0.1")}, [128->16]) = 0
openat(AT_FDCWD, "/etc/hosts.allow", O_RDONLY) = 6
newfstatat(6, "", {st_mode=S_IFREG|0644, st_size=580, ...}, AT_EMPTY_PATH) = 0
read(6, "# /etc/hosts.allow: list of host"..., 4096) = 580
read(6, "", 4096) = 0
close(6) = 0
openat(AT_FDCWD, "/etc/hosts.deny", O_RDONLY) = 6
newfstatat(6, "", {st_mode=S_IFREG|0644, st_size=880, ...}, AT_EMPTY_PATH) = 0
read(6, "# /etc/hosts.deny: list of hosts"..., 4096) = 880
read(6, "", 4096) = 0
close(6) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD,
child_tidptr=0x7f91fe275c50) = 79978
close(5) = 0
pselect6(4, [3], NULL, NULL, NULL, NULL) = ? ERESTARTNOHAND (To be restarted if
no handler)
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=79978, si_uid=0,
si_status=SIGSEGV, si_utime=1, si_stime=0} ---
rt_sigreturn({mask=[]}) = -1 EINTR (Interrupted system call)
wait4(-1, [{WIFSIGNALED(s) && WTERMSIG(s) == SIGSEGV}], WNOHANG, NULL) = 79978
getpid() = 79931
sendto(4, "<19>Feb 18 01:17:27 imap4d[79931"..., 72, MSG_NOSIGNAL, NULL, 0) = 72
wait4(-1, 0x7fff87f96cc4, WNOHANG, NULL) = 0
pselect6(4, [3], NULL, NULL, NULL, NULL) = ? ERESTARTNOHAND (To be restarted if
no handler)
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_KILLED, si_pid=79977, si_uid=0,
si_status=SIGSEGV, si_utime=1, si_stime=0} ---
rt_sigreturn({mask=[]}) = -1 EINTR (Interrupted system call)
wait4(-1, [{WIFSIGNALED(s) && WTERMSIG(s) == SIGSEGV}], WNOHANG, NULL) = 79977
getpid() = 79931
sendto(4, "<19>Feb 18 01:17:27 imap4d[79931"..., 72, MSG_NOSIGNAL, NULL, 0) = 72
wait4(-1, 0x7fff87f96cc4, WNOHANG, NULL) = -1 ECHILD (No child processes)
pselect6(4, [3], NULL, NULL, NULL, NULL^C) = ? ERESTARTNOHAND (To be restarted
if no handler)
Feb 18 00:29:58 mybox imap4d[64652]: TLS established using AES-128-GCM-AEAD
(TLS1.3)
Feb 18 00:29:58 mybox imap4d[64652]: S: * OK IMAP4rev1
Feb 18 00:29:58 mybox imap4d[64653]: TLS established using AES-128-GCM-AEAD
(TLS1.3)
Feb 18 00:29:58 mybox imap4d[64653]: S: * OK IMAP4rev1
Feb 18 00:29:58 mybox imap4d[64653]: C: 60 capability
Feb 18 00:29:58 mybox imap4d[64653]: S: * CAPABILITY IMAP4rev1 NAMESPACE ID
IDLE LITERAL+ UNSELECT AUTH=GSSAPI AUTH=ANONYMOUS AUTH=EXTERNAL AUTH=LOGIN
AUTH=PLAIN AUTH=SECURID AUTH=DIGEST-MD5 AUTH=CRAM-MD5 AUTH=SCRAM-SHA-1
AUTH=SCRAM-SHA-1-PLUS AUTH=SCRAM-SHA-256 AUTH=SCRAM-SHA-256-PLUS AUTH=SAML20
AUTH=OPENID20 AUTH=GSSAPI AUTH=GS2-KRB5
Feb 18 00:29:58 mybox imap4d[64653]: S: 60 OK CAPABILITY Completed
Feb 18 00:29:58 mybox imap4d[64652]: C: 40 capability
Feb 18 00:29:58 mybox imap4d[64652]: S: * CAPABILITY IMAP4rev1 NAMESPACE ID
IDLE LITERAL+ UNSELECT AUTH=GSSAPI AUTH=ANONYMOUS AUTH=EXTERNAL AUTH=LOGIN
AUTH=PLAIN AUTH=SECURID AUTH=DIGEST-MD5 AUTH=CRAM-MD5 AUTH=SCRAM-SHA-1
AUTH=SCRAM-SHA-1-PLUS AUTH=SCRAM-SHA-256 AUTH=SCRAM-SHA-256-PLUS AUTH=SAML20
AUTH=OPENID20 AUTH=GSSAPI AUTH=GS2-KRB5
Feb 18 00:29:58 mybox imap4d[64652]: S: 40 OK CAPABILITY Completed
Feb 18 00:29:58 mybox imap4d[64653]: C: 61 authenticate CRAM-MD5
Feb 18 00:29:58 mybox imap4d[64653]: S: +
PDEyOTA2NTA1NDE0MTc4MzAzNzg0LjBAbG9jYWxob3N0Pg==
Feb 18 00:29:58 mybox imap4d[64653]: C: [redacted]
Feb 18 00:29:58 mybox imap4d[64653]: GSASL error: Autenticazione non riuscita
poiché non è stata fornita la password.
Feb 18 00:29:58 mybox imap4d[64652]: C: 41 authenticate CRAM-MD5
Feb 18 00:29:58 mybox imap4d[64653]: S: 61 NO AUTHENTICATE CRAM-MD5
authentication failed
Feb 18 00:29:58 mybox imap4d[64652]: S: +
PDcyNDUxNjExNjE0MDY0MDc1NjUwLjBAbG9jYWxob3N0Pg==
Feb 18 00:29:58 mybox imap4d[64652]: C: [redacted]
Feb 18 00:29:58 mybox imap4d[64652]: GSASL error: Autenticazione non riuscita
poiché non è stata fornita la password.
Feb 18 00:29:58 mybox imap4d[64652]: S: 41 NO AUTHENTICATE CRAM-MD5
authentication failed
Feb 18 00:30:13 mybox imap4d[64652]: C: 43 authenticate CRAM-MD5
Feb 18 00:30:13 mybox imap4d[64652]: S: +
PDMxMzI0NDU5MTgzODkyMDM2MzUyLjBAbG9jYWxob3N0Pg==
Feb 18 00:30:13 mybox imap4d[64652]: C: [redacted]
Feb 18 00:30:13 mybox imap4d[64652]: GSASL error: Autenticazione non riuscita
poiché non è stata fornita la password.
Feb 18 00:30:13 mybox imap4d[64652]: S: 43 NO AUTHENTICATE CRAM-MD5
authentication failed
Feb 18 00:30:15 mybox imap4d[64652]: unexpected eof on input
Feb 18 00:30:15 mybox imap4d[64652]: read error on control stream
Feb 18 00:30:15 mybox imap4d[63697]: process 64652 finished with code 74 (I/O
error)
Feb 18 00:30:16 mybox imap4d[64653]: unexpected eof on input
Feb 18 00:30:16 mybox imap4d[64653]: read error on control stream
Feb 18 00:30:16 mybox imap4d[63697]: process 64653 finished with code 74 (I/O
error)
