Your message dated Mon, 17 Feb 2014 08:14:26 -0500
with message-id <[email protected]>
and subject line Re: Bug#525785: sasl2-bin: saslauthd with kerberos5 doesn't 
work
has caused the Debian Bug report #525785,
regarding sasl2-bin: saslauthd with kerberos5 doesn't work
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


-- 
525785: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=525785
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: sasl2-bin
Version: 2.1.22.dfsg1-23
Severity: minor

Dear Maintainers,

when using saslauthd with kerberos5 authentication mechanism it simply fails 
with:
"saslauthd[10678]: do_auth: auth failure: [user=xxx] [service=ldap] 
[realm=xxxxxxxxxxxxx] [mech=kerberos5] [reason=saslauthd internal error]"

Fix:
Explicitly set the environment in "/etc/default/saslauthd" and point to the 
keytab:
KRB5_KTNAME=/etc/krb5.keytab

Please include this environment in default configuration.

Regards
Friedemann
-- System Information:
Debian Release: 5.0.1
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.26-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages sasl2-bin depends on:
ii  db4.6-util      4.6.21-11                Berkeley v4.6 Database Utilities
ii  debconf [debcon 1.5.24                   Debian configuration management sy
ii  libc6           2.7-18                   GNU C Library: Shared libraries
ii  libcomerr2      1.41.3-1                 common error description library
ii  libdb4.6        4.6.21-11                Berkeley v4.6 Database Libraries [
ii  libkrb53        1.6.dfsg.4~beta1-5lenny1 MIT Kerberos runtime libraries
ii  libldap-2.4-2   2.4.11-1                 OpenLDAP libraries
ii  libpam0g        1.0.1-5+lenny1           Pluggable Authentication Modules l
ii  libsasl2-2      2.1.22.dfsg1-23          Cyrus SASL - authentication abstra
ii  libssl0.9.8     0.9.8g-15+lenny1         SSL shared libraries
ii  lsb-base        3.2-20                   Linux Standard Base 3.2 init scrip

sasl2-bin recommends no packages.

sasl2-bin suggests no packages.

-- debconf information excluded



--- End Message ---
--- Begin Message ---
On Sun, Feb 09, 2014 at 04:21:01PM +0100, Friedemann Stoyan wrote:
> 
> I don't know if this is importend or not, but I'm using Heimdal Kerberos and
> not the MIT Libraries:
> 
> dpkg -l | grep sasl
> ii  libsasl2-2                                        2.1.23.dfsg1-7          
>             Cyrus SASL - authentication abstraction library
> ii  libsasl2-modules                                  2.1.23.dfsg1-7          
>             Cyrus SASL - pluggable authentication modules
> ii  libsasl2-modules-gssapi-heimdal                   2.1.23.dfsg1-7          
>             Pluggable Authentication Modules for SASL (GSSAPI)
> ii  sasl2-bin                                         2.1.23.dfsg1-7          
>             Cyrus SASL - administration programs for SASL users database
> 
> But never mind. In the meantime I don't use saslauthd anymore.
> 

Since I am not able to reproduce this and you are no longer using the
affected packages (making it unlikely this behavior will ever be
reproduced), I am closing this report.  Please feel free to re-open it
if you encounter this problem again or if you are able to provide more
information.

Regards,

-Roberto

-- 
Roberto C. Sánchez
http://people.connexer.com/~roberto
http://www.connexer.com

Attachment: signature.asc
Description: Digital signature


--- End Message ---

Reply via email to