Your message dated Mon, 17 Feb 2014 08:14:26 -0500
with message-id <[email protected]>
and subject line Re: Bug#525785: sasl2-bin: saslauthd with kerberos5 doesn't
work
has caused the Debian Bug report #525785,
regarding sasl2-bin: saslauthd with kerberos5 doesn't work
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
525785: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=525785
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: sasl2-bin
Version: 2.1.22.dfsg1-23
Severity: minor
Dear Maintainers,
when using saslauthd with kerberos5 authentication mechanism it simply fails
with:
"saslauthd[10678]: do_auth: auth failure: [user=xxx] [service=ldap]
[realm=xxxxxxxxxxxxx] [mech=kerberos5] [reason=saslauthd internal error]"
Fix:
Explicitly set the environment in "/etc/default/saslauthd" and point to the
keytab:
KRB5_KTNAME=/etc/krb5.keytab
Please include this environment in default configuration.
Regards
Friedemann
-- System Information:
Debian Release: 5.0.1
APT prefers stable
APT policy: (500, 'stable')
Architecture: amd64 (x86_64)
Kernel: Linux 2.6.26-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash
Versions of packages sasl2-bin depends on:
ii db4.6-util 4.6.21-11 Berkeley v4.6 Database Utilities
ii debconf [debcon 1.5.24 Debian configuration management sy
ii libc6 2.7-18 GNU C Library: Shared libraries
ii libcomerr2 1.41.3-1 common error description library
ii libdb4.6 4.6.21-11 Berkeley v4.6 Database Libraries [
ii libkrb53 1.6.dfsg.4~beta1-5lenny1 MIT Kerberos runtime libraries
ii libldap-2.4-2 2.4.11-1 OpenLDAP libraries
ii libpam0g 1.0.1-5+lenny1 Pluggable Authentication Modules l
ii libsasl2-2 2.1.22.dfsg1-23 Cyrus SASL - authentication abstra
ii libssl0.9.8 0.9.8g-15+lenny1 SSL shared libraries
ii lsb-base 3.2-20 Linux Standard Base 3.2 init scrip
sasl2-bin recommends no packages.
sasl2-bin suggests no packages.
-- debconf information excluded
--- End Message ---
--- Begin Message ---
On Sun, Feb 09, 2014 at 04:21:01PM +0100, Friedemann Stoyan wrote:
>
> I don't know if this is importend or not, but I'm using Heimdal Kerberos and
> not the MIT Libraries:
>
> dpkg -l | grep sasl
> ii libsasl2-2 2.1.23.dfsg1-7
> Cyrus SASL - authentication abstraction library
> ii libsasl2-modules 2.1.23.dfsg1-7
> Cyrus SASL - pluggable authentication modules
> ii libsasl2-modules-gssapi-heimdal 2.1.23.dfsg1-7
> Pluggable Authentication Modules for SASL (GSSAPI)
> ii sasl2-bin 2.1.23.dfsg1-7
> Cyrus SASL - administration programs for SASL users database
>
> But never mind. In the meantime I don't use saslauthd anymore.
>
Since I am not able to reproduce this and you are no longer using the
affected packages (making it unlikely this behavior will ever be
reproduced), I am closing this report. Please feel free to re-open it
if you encounter this problem again or if you are able to provide more
information.
Regards,
-Roberto
--
Roberto C. Sánchez
http://people.connexer.com/~roberto
http://www.connexer.com
signature.asc
Description: Digital signature
--- End Message ---