Bug#416295: Same behaviour seen on bug #145766 is still present on this

2007-06-18 Thread Benjamin Seidenberg
reassign 416295 libnss-ldap
thanks

Based on the fact that rebuilding libnss-ldap solved the submitter's
problem, I'm moving this bug to the libnss-ldap package.

Benjamin
Debian Cyrus Team


[EMAIL PROTECTED] wrote:
> I built my own libnss-ldap package for version 254 with the patches found on 
> Gentoo and, so far, everything is working.
> 
> I'm attaching what I've built here.
> 
> Some of the Gentoo patches didn't apply cleanly, but I managed to get the 
> rejected parts into the correct files on the right spots.
> 
> Still, this does not seem to be the solution since the etch release is just 
> next month and versions are locked, so there might be no way to include this 
> version of libnss-ldap into etch's packages.
> 
> Regards,
> Pedro Algarvio.
> 
> 
> 
> 
> ___
> Pkg-Cyrus-imapd-Debian-devel mailing list
> [EMAIL PROTECTED]
> http://lists.alioth.debian.org/mailman/listinfo/pkg-cyrus-imapd-debian-devel





Bug#416295: Same behaviour seen on bug #145766 is still present on this

2007-03-27 Thread Pedro Algarvio, aka, s0undt3ch
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

If it helps, I also get this info mailed from amavis:

perl: ldap-nss.c:1368: do_init: Assertion
`cfg->ldc_uris[__session.ls_current_uri]
!= ((void *)0)' failed.
/bin/sh: line 1:  5519 Aborted
/usr/sbin/amavisd-new-cronjob sa-sync

Regards,
- --
Pedro Algarvio
   __ ___  ___ ______ __
|   Y   .'  _|   _   .-.'  _|  |_   .-..-.
|.  |   |   _|   1___|  _  |   _|   _|__|  _  |   _|  _  |
|.  |   |__| |   |_|__| ||__|_|__| |___  |
|:  1   ||:  1   | |_|
|::.. . ||::.. . |  ufs [AT] ufsoft [DOT] org
`---'`---'ufs [AT] sapo [DOT] pt
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.2.2 (GNU/Linux)

iD8DBQFGCSeRniPxVTX2hA4RAq55AKCwJ0kBUZ49e/1PVf46r4ECAAZSpQCeKNvi
qqr5Xf3kfKSojUzwZ9nKnZ8=
=tvKP
-END PGP SIGNATURE-


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#416295: Same behaviour seen on bug #145766 is still present on this

2007-03-26 Thread Pedro Algarvio, aka, s0undt3ch
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Henrique de Moraes Holschuh wrote:
> On Tue, 27 Mar 2007, Pedro Algarvio, aka, s0undt3ch wrote:
>> Also, while googl'ing for this problem, it actually seems that it's the
>> libsasl circular re-entrance problem like the one also reported but for
>> libsasl 1.5
> 
> Hmm... yes, it could be.  And that is an extremely bad thing, if it is
> indeed what is happening.
> 
> Does any other application that uses sasl AND getpwent() or some other
> ldap-exported map, fails?   That would mean it is indeed a SASL problem, and
> not a cyrus imap one...
> 
> I am cc'ing the SASL devel list, maybe they can help.
> 

So far my setup is idled because of this issue, I need both libnss-ldap
libpam-ldap and saslauthd working here which aparently is the working
scenario for such thing to happen as stated in
/usr/share/doc/cyrus-common-2.2/README.Debian.gz

"The Debian libldap2 and cyrus-imapd packages are both compiled using
the SASL library.  If you use cyrus-imapd together with libnss-ldap, or
saslauthd together with libpam-ldap, the resulting double calls to SASL
library functions can trigger a double-free bug which may cause the
calling process to crash.  To avoid such a crash, you must recompile the
libldap2 package --without-cyrus-sasl."
 http://bugs.debian.org/145766
[EMAIL PROTECTED] I didn't expect SASL 2.1 to still have this annoying problem]

I also compiled my libldap2 without sasl support, just to test, and it
did *not* solve the issue.

Regards,
- --
Pedro Algarvio
   __ ___  ___ ______ __
|   Y   .'  _|   _   .-.'  _|  |_   .-..-.
|.  |   |   _|   1___|  _  |   _|   _|__|  _  |   _|  _  |
|.  |   |__| |   |_|__| ||__|_|__| |___  |
|:  1   ||:  1   | |_|
|::.. . ||::.. . |  ufs [AT] ufsoft [DOT] org
`---'`---'ufs [AT] sapo [DOT] pt
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.2.2 (GNU/Linux)

iD8DBQFGCGpkniPxVTX2hA4RAvqeAKCkkAKtRlVb6WBAeLMz6xkDxgphUACdEbB6
k2GFvhH2hHynTBcpqiT3PDQ=
=mzNV
-END PGP SIGNATURE-


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#416295: Same behaviour seen on bug #145766 is still present on this

2007-03-26 Thread Henrique de Moraes Holschuh
On Tue, 27 Mar 2007, Pedro Algarvio, aka, s0undt3ch wrote:
> Also, while googl'ing for this problem, it actually seems that it's the
> libsasl circular re-entrance problem like the one also reported but for
> libsasl 1.5

Hmm... yes, it could be.  And that is an extremely bad thing, if it is
indeed what is happening.

Does any other application that uses sasl AND getpwent() or some other
ldap-exported map, fails?   That would mean it is indeed a SASL problem, and
not a cyrus imap one...

I am cc'ing the SASL devel list, maybe they can help.

-- 
  "One disk to rule them all, One disk to find them. One disk to bring
  them all and in the darkness grind them. In the Land of Redmond
  where the shadows lie." -- The Silicon Valley Tarot
  Henrique Holschuh


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#416295: Same behaviour seen on bug #145766 is still present on this

2007-03-26 Thread Pedro Algarvio, aka, s0undt3ch
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Henrique de Moraes Holschuh wrote:
> On Mon, 26 Mar 2007, Pedro Algarvio, aka, s0undt3ch wrote:
>> While authenticating to cyradm, cyrus-imapd is signaled to death by
>> signal 6, which is similiar to what happens on #145766.
>>
>> I also tried to compile libldap2 without sasl support as sugested on the
>> Cyrus README doc, but same problem happens.
>>
>> My use case is what's shown on that doc. I use libpam-ldap libnss-ldap
>> and saslauthd.
>>
>> If any more info is need please ask, I'll gently provide it.
> 
> Copy of /etc/nssswitch.conf, /etc/imapd.conf and /etc/cyrus.conf please?
> 

Here they go attached.

Also, while googl'ing for this problem, it actually seems that it's the
libsasl circular re-entrance problem like the one also reported but for
libsasl 1.5

My conclusion is, if I remove those ldap entries from the nsswitch.conf
it all works good, if they're there, that's when problem occur.

Executing:
cyradm --user [EMAIL PROTECTED] deb
IMAP Password: at /usr/lib/perl5/Cyrus/IMAP/Admin.pm line 119
cyradm: cannot authenticate to server as [EMAIL PROTECTED]

Gives me:
Mar 27 01:02:52 deb cyrus/master[8816]: about to exec
/usr/lib/cyrus/bin/imapd
Mar 27 01:02:52 deb cyrus/imap[8816]: executed
Mar 27 01:02:52 deb cyrus/imap[8816]: accepted connection
Mar 27 01:02:54 deb cyrus/master[23729]: process 8816 exited, signaled
to death by 6
Mar 27 01:02:54 deb cyrus/master[23729]: service imap pid 8816 in BUSY
state: terminated abnormally

I also get a bunch of:
Mar 27 01:04:03 deb cyrus/imap[8869]: auxpropfunc error invalid
parameter supplied
Mar 27 01:04:03 deb cyrus/imap[8869]: _sasl_plugin_load failed on
sasl_auxprop_plug_init for plugin: ldapdb
Mar 27 01:04:03 deb perl: No worthy mechs found

Although I don't know if they're related.

Without those ldap entries in nsswitch.conf
Mar 27 01:05:07 deb cyrus/master[8896]: about to exec
/usr/lib/cyrus/bin/imapd
Mar 27 01:05:07 deb cyrus/imap[8896]: executed
Mar 27 01:05:07 deb cyrus/imap[8896]: accepted connection
Mar 27 01:05:09 deb cyrus/imap[8896]: login: deb.ufsoft.org
[80.69.34.154] [EMAIL PROTECTED] plaintext User logged in

Regards,
- --
Pedro Algarvio
   __ ___  ___ ______ __
|   Y   .'  _|   _   .-.'  _|  |_   .-..-.
|.  |   |   _|   1___|  _  |   _|   _|__|  _  |   _|  _  |
|.  |   |__| |   |_|__| ||__|_|__| |___  |
|:  1   ||:  1   | |_|
|::.. . ||::.. . |  ufs [AT] ufsoft [DOT] org
`---'`---'ufs [AT] sapo [DOT] pt
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.2.2 (GNU/Linux)

iD8DBQFGCGBgniPxVTX2hA4RAmRVAJ487aSGzwcHjTv3qy4WhrWgEbC/3QCgvmmV
pbNwpuhYzzt/9cKUwG5q5wY=
=YTRq
-END PGP SIGNATURE-
# Debian defaults for Cyrus IMAP server/cluster implementation
# see cyrus.conf(5) for more information
#
# All the tcp services are tcpd-wrapped. see hosts_access(5)
# $Id: cyrus.conf 567 2006-08-14 18:19:32Z sven $

START {
# do not delete this entry!
recover cmd="/usr/sbin/ctl_cyrusdb -r"
  
# this is only necessary if idlemethod is set to "idled" in imapd.conf
#idled  cmd="idled"

# this is useful on backend nodes of a Murder cluster
# it causes the backend to syncronize its mailbox list with
# the mupdate master upon startup
#mupdatepush   cmd="/usr/sbin/ctl_mboxlist -m"

# this is recommended if using duplicate delivery suppression
delprunecmd="/usr/sbin/cyr_expire -E 3"
# this is recommended if caching TLS sessions
tlsprunecmd="/usr/sbin/tls_prune"
}

# UNIX sockets start with a slash and are absolute paths
# you can use a maxchild=# to limit the maximum number of forks of a service
# you can use babysit=true and maxforkrate=# to keep tight tabs on the service
# most services also accept -U (limit number of reuses) and -T (timeout)
SERVICES {
# --- Normal cyrus spool, or Murder backends ---
# add or remove based on preferences
imapcmd="imapd -U 30" listen="imap" prefork=0 maxchild=100
#imaps  cmd="imapd -s -U 30" listen="imaps" prefork=0 
maxchild=100
#pop3   cmd="pop3d -U 30" listen="pop3" prefork=0 maxchild=50
#pop3s  cmd="pop3d -s -U 30" listen="pop3s" prefork=0 
maxchild=50
#nntp   cmd="nntpd -U 30" listen="nntp" prefork=0 maxchild=100
#nntps  cmd="nntpd -s -U 30" listen="nntps" prefork=0 
maxchild=100

# At least one form of LMTP is required for delivery
# (you must keep the Unix socket name in sync with imap.conf)
lmtpcmd="lmtpd" listen="80.69.34.154:lmtp" prefork=0 
maxchild=20
lmtpunixcmd="lmtpd" listen="/var/run/cyrus/socket/lmtp" 
prefork=0 maxchild=20
# --

# useful if you need to give users remote access to sieve
# by default, we

Bug#416295: Same behaviour seen on bug #145766 is still present on this

2007-03-26 Thread Henrique de Moraes Holschuh
On Mon, 26 Mar 2007, Pedro Algarvio, aka, s0undt3ch wrote:
> While authenticating to cyradm, cyrus-imapd is signaled to death by
> signal 6, which is similiar to what happens on #145766.
> 
> I also tried to compile libldap2 without sasl support as sugested on the
> Cyrus README doc, but same problem happens.
> 
> My use case is what's shown on that doc. I use libpam-ldap libnss-ldap
> and saslauthd.
> 
> If any more info is need please ask, I'll gently provide it.

Copy of /etc/nssswitch.conf, /etc/imapd.conf and /etc/cyrus.conf please?

-- 
  "One disk to rule them all, One disk to find them. One disk to bring
  them all and in the darkness grind them. In the Land of Redmond
  where the shadows lie." -- The Silicon Valley Tarot
  Henrique Holschuh


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]



Bug#416295: Same behaviour seen on bug #145766 is still present on this

2007-03-26 Thread Pedro Algarvio, aka, s0undt3ch
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Package: cyrus-2.2
Version: 2.2
Severity: grave
Justification: renders package unusable

*** Please type your report below this line ***
While authenticating to cyradm, cyrus-imapd is signaled to death by
signal 6, which is similiar to what happens on #145766.

I also tried to compile libldap2 without sasl support as sugested on the
Cyrus README doc, but same problem happens.

My use case is what's shown on that doc. I use libpam-ldap libnss-ldap
and saslauthd.

If any more info is need please ask, I'll gently provide it.


- -- System Information:
Debian Release: 4.0
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18.5-vs2.1.1.3-p3-squash-drbd-256ip-ipv6
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
- --
Pedro Algarvio
   __ ___  ___ ______ __
|   Y   .'  _|   _   .-.'  _|  |_   .-..-.
|.  |   |   _|   1___|  _  |   _|   _|__|  _  |   _|  _  |
|.  |   |__| |   |_|__| ||__|_|__| |___  |
|:  1   ||:  1   | |_|
|::.. . ||::.. . |  ufs [AT] ufsoft [DOT] org
`---'`---'ufs [AT] sapo [DOT] pt
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.2.2 (GNU/Linux)

iD8DBQFGB/5NniPxVTX2hA4RAkjnAJ44Uy5v3Uw7qS0yMx5u8mdISqFojgCgm9gf
9KO/DkegJIxmVnQR10d4c8g=
=ehnd
-END PGP SIGNATURE-


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]