Hello,

i have a test-system with 2 cyrus mail servers (squeeze and squeeze-slave) running cyrus-imapd 2.4.13. When plaintext logins are not allowed (allowplaintext: no) sync_client crashes after some time.



Here is what the kernel log shows after crash...



Jan 18 18:36:08 squeeze cyrus/sync_client[19784]: sync_client RESTART succeeded Jan 18 18:36:08 squeeze kernel: [20819.197061] sync_client[19784] general protection ip:7f1fcef7d1f9 sp:7fffaa8f4e10 error:0 in libcrypto.so.0.9.8[7f1fcee6c000+175000]

Jan 21 12:10:04 squeeze-slave cyrus/sync_client[18798]: sync_client RESTART succeeded Jan 21 12:10:04 squeeze-slave kernel: [125161.364980] sync_client[18798] general protection ip:7f9db3cbe1f9 sp:7fff8b8ba9c0 error:0 in libcrypto.so.0.9.8[7f9db3bad000+175000]




Both servers are configured as sync_client and sync_server, so they replicate each other. I KNOW this is not recommended (on our productive-system we have this running over 2 years now without any problems but with "plaintext logins allowed" because of one stupid app which can't handle encrypted connections). To prevent any problems only one server has the "magic" failover-ip-address which allows access.

Both servers are runnung debian squeeze and using ldap authentication via saslauthd. cyrus-imapd is compiled with openssl and openldap with gnutls (installed from apt-repo).

When I compile openldap with openssl there are the same sync_client crashes too.

I don't know if this is a sync_client tls connection problem or a problem with libcrypto.so.0.9.8 from openssl. What I can tell is that there are no problems with imap, pop3 and sieve tls (starttls) connections via saslauthd with openldap.

Can you help me out so I can disable plaintext logins?



Regards

Darius

Reply via email to