On 07/26/15 13:52 +0200, Harald Barth wrote:
Cyrus IMAP v2.4.17-caldav-beta10-Debian-2.4.17+caldav~beta10-18 Transcript of session which shows the bug: TLS connection established: TLSv1.2 with cipher ECDHE-RSA-AES256-SHA (256/256 bits) S: * OK [CAPABILITY IMAP4rev1 LITERAL+ ID ENABLE AUTH=GSSAPI AUTH=PLAIN SASL-IR] jaja.besserwisser.org Cyrus IMAP v2.4.17-caldav-beta10-Debian-2.4.17+caldav~beta10-18 server ready C: A01 AUTHENTICATE GSSAPI (...) (...) Authenticated. (...) A01 SELECT INBOX * 36663 EXISTS * 0 RECENT * FLAGS (\Answered \Flagged \Draft \Deleted \Seen NonJunk Junk) * OK [PERMANENTFLAGS (\Answered \Flagged \Draft \Deleted \Seen NonJunk Junk \*)] Ok * OK [UNSEEN 13118] Ok * OK [UIDVALIDITY 1432645567] Ok * OK [UIDNEXT 43665] Ok * OK [HIGHESTMODSEQ 37813] Ok * OK [URLMECH INTERNAL] Ok A01 OK [READ-WRITE] Completed AO2 LOGOUT * BYE LOGOUT received AO2 OK Completed A03 SELECT INBOX * OK [CLOSED] Ok * 36663 EXISTS * 0 RECENT * FLAGS (\Answered \Flagged \Draft \Deleted \Seen NonJunk Junk) * OK [PERMANENTFLAGS (\Answered \Flagged \Draft \Deleted \Seen NonJunk Junk \*)] Ok * OK [UNSEEN 13118] Ok * OK [UIDVALIDITY 1432645567] Ok * OK [UIDNEXT 43665] Ok * OK [HIGHESTMODSEQ 37813] Ok * OK [URLMECH INTERNAL] Ok A03 OK [READ-WRITE] Completed After A02 LOGOUT the session should have been terminated by the server and a SELECT INBOX should _NOT_ have been possible.
Fascinating! Do you have an imap proxy in the mix? Can you capture telemetry logging on the server? -- Dan White _______________________________________________ Pkg-Cyrus-imapd-Debian-devel mailing list [email protected] http://lists.alioth.debian.org/cgi-bin/mailman/listinfo/pkg-cyrus-imapd-debian-devel
