1. Forum
  2. Usenet
  3. LINUX.DEBIAN.BUGS.RC

  • Bug#1104411: gsasl: autopkgtests fail with dovecot 2.4

    From Noah Meyerhans@21:1/5 to All on Tue Apr 29 21:30:01 2025
    Source: gsasl
    Version: 2.2.0-1
    Severity: serious
    Justification: autopkgtest regression

    Dovecot 2.4 is currently in unstable and trying to migrate to testing. It's currently blocked because its configuration file format changes introduce regressions in autopkgtests for some packages, including gsasl.

    I've prepared a patch to update the dovecot configuration used in gsasl's
    test suite to support dovecot 2.4, but GSSAPI authentication fails,
    resulting in a test failure. Please see [1] for my proposed patch and [2]
    for an example of the failure. It's not clear from either gsasl's or
    dovecot's output what's going wrong, and I'm hoping you're able to provide
    some insight.

    Once the test suite is fixed, I'm happy to NMU the fixes if that's useful to you, or I can leave it for you.

    Thanks
    noah

    1. https://salsa.debian.org/noahm/gsasl/-/commit/031d36258471a2645b5600acc71396e0948ac03f
    2. https://salsa.debian.org/noahm/gsasl/-/jobs/7508765#L2616

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Simon Josefsson@21:1/5 to All on Tue Apr 29 23:00:01 2025
    Okay that would help to confirm if this is a dovecot problem or gsasl problem. You could try increasing the dovecot debug logging during the gsasl test, the generic error in dovecot must be caused by something and understanding what could explain things
    a bit. Maybe some file ownership/permissions problem or additional GSSAPI flag check that dovecot didn’t do before.

    Alas I am traveling without laptop for the next few days so will have no ability to debug anything.

    /Simon

    29 apr. 2025 kl. 22:33 skrev Noah Meyerhans <noahm@debian.org>:

    On Tue, Apr 29, 2025 at 10:22:21PM +0200, Simon Josefsson wrote:
    Thanks for report! Did you confirm that your new dovecot version has
    working GSSAPI support, with some other client? Or is this gsasl
    autopkgtest the only one that test that functionality?

    Gsasl (and libgssglue) tests are the only end-to-end tests currently exercising the krb5/GSSAPI authentication mechanism, so I haven't
    validated GSSAPI functionality at all yet. So that's probably the next
    step. I haven't seen any reports of broken GSSAPI on the dovecot
    mailing lіsts yet, but that doesn't mean much.

    I'll work on setting up a krb5 environment and will let you know how
    things go...

    noah


    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Noah Meyerhans@21:1/5 to All on Thu May 1 22:00:01 2025
    I've traced the regression to a specific commit in dovecot. Details at https://dovecot.org/mailman3/archives/list/dovecot@dovecot.org/message/LMUX23ZRYPOJ6RRZWBPBUBSBYK4FLI6O/

    I'm still not sure exactly how dovecot broke, but I do suspect the fix
    will have to happen there.

    So for gsasl (and libgssglue) expect a merge request soon to update
    their autopkgtests to the dovecot 2.4 configuration language.

    noah

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Noah Meyerhans@21:1/5 to Noah Meyerhans on Thu May 1 23:00:02 2025
    Control: tags -1 + patch

    On Thu, May 01, 2025 at 03:56:11PM -0400, Noah Meyerhans wrote:
    So for gsasl (and libgssglue) expect a merge request soon to update
    their autopkgtests to the dovecot 2.4 configuration language.

    And that is now https://salsa.debian.org/xmpp-team/gsasl/-/merge_requests/2

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Debian Bug Tracking System@21:1/5 to All on Thu May 1 23:00:01 2025
    Processing control commands:

    tags -1 + patch
    Bug #1104411 [src:gsasl] gsasl: autopkgtests fail with dovecot 2.4
    Added tag(s) patch.

    --
    1104411: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1104411
    Debian Bug Tracking System
    Contact owner@bugs.debian.org with problems

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Debian Bug Tracking System@21:1/5 to All on Fri May 2 22:00:02 2025
    This is a multi-part message in MIME format...

    Your message dated Fri, 02 May 2025 19:51:55 +0000
    with message-id <E1uAwQN-0074xn-3C@fasolo.debian.org>
    and subject line Bug#1104411: fixed in gsasl 2.2.2-1.1
    has caused the Debian Bug report #1104411,
    regarding gsasl: autopkgtests fail with dovecot 2.4
    to be marked as done.

    This means that you claim that the problem has been dealt with.
    If this is not the case it is now your responsibility to reopen the
    Bug report if necessary, and/or fix the problem forthwith.

    (NB: If you are a system administrator and have no idea what this
    message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact owner@bugs.debian.org
    immediately.)


    --
    1104411: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1104411
    Debian Bug Tracking System
    Contact owner@bugs.debian.org with problems

    Received: (at submit) by bugs.debian.org; 29 Apr 2025 19:18:21 +0000 X-Spam-Checker-Version: SpamAssassin 3.4.6-bugs.debian.org_2005_01_02
    (2021-04-09) on buxtehude.debian.org
    X-Spam-Level:
    X-Spam-Status: No, score=-110.7 required=4.0 tests=BAYES_00,DKIMWL_WL_HIGH,
    DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FROMDEVELOPER,
    MD5_SHA1_SUM,SPF_HELO_NONE,SPF_NONE,UNPARSEABLE_RELAY,
    USER_IN_DKIM_WELCOMELIST,USER_IN_DKIM_WHITELIST,XMAILER_REPORTBUG
    autolearn=ham autolearn_force=no
    version=3.4.6-bugs.debian.org_2005_01_02
    X-Spam-Bayes: score:0.0000 Tokens: new, 19; hammy, 148; neutral, 35; spammy,
    0. spammytokens:
    hammytokens:0.000-+--Hx-spam-relays-external:sk:stravin,
    0.000-+--H*RT:sk:stravin, 0.000-+--Hx-spam-relays-external:311,
    0.000-+--H*RT:311, 0.000-+--H*RT:108
    Return-path: <noahm@debian.org>
    Received: from stravinsky.debian.org ([
  • From Simon Josefsson@21:1/5 to Noah Meyerhans on Thu May 8 10:20:01 2025
    Noah Meyerhans <noahm@debian.org> writes:

    On Thu, May 01, 2025 at 05:04:33PM -0400, Noah Meyerhans wrote:
    For dovecot in trixie, I'm considering reverting channel binding support
    altogether. That'll force us to drop SCRAM-SHA-1-PLUS and
    SCRAM-SHA-256-PLUS support, but I'd rather do that than ship dovecot 2.3
    again, which is the most likely alternative. (This assumes that I don't
    find a proper fix for the regression.)

    For the record, dovecot upstream was able to come up with a fix. See

    https://dovecot.org/mailman3/archives/list/dovecot@dovecot.org/message/O54EAGLIXXHMOH7BQCCKHHB3Z32HDWVR/

    I've incorporated their fix into the package and uploaded it with
    version 1:2.4.1+dfsg1-3

    I've confirmed that this resolves the autopkgtest failures in gsasl and
    will go ahead with an NMU to update it for dovecot 2.4's configuration syntax.

    The testing migration seems a bit unclear to me, can you take a look if
    this will actually migrate? It is scheduled for autoremoval right now.

    https://tracker.debian.org/pkg/gsasl
    https://tracker.debian.org/pkg/libgssglue

    I think you need a dependence on 'dovecot (>= 2.4~)' in
    gsasl/libgssglue, and a 'Breaks: gsasl (<< 2.2.2-1.1~), libgsasl (<<
    0.9-1.1~)' in dovecot.

    Feel free to merge your merge requests and push release tags into the
    git repository, I gave them thumbs up:

    https://salsa.debian.org/xmpp-team/gsasl/-/merge_requests/2 https://salsa.debian.org/debian/libgssglue/-/merge_requests/3

    /Simon

    -----BEGIN PGP SIGNATURE-----

    iQNoBAEWCAMQFiEEo8ychwudMQq61M8vUXIrCP5HRaIFAmgcZt4UHHNpbW9uQGpv c2Vmc3Nvbi5vcmfCHCYAmDMEXJLOtBYJKwYBBAHaRw8BAQdACIcrZIvhrxDBkK9f V+QlTmXxo2naObDuGtw58YaxlOu0JVNpbW9uIEpvc2Vmc3NvbiA8c2ltb25Aam9z ZWZzc29uLm9yZz6IlgQTFggAPgIbAwULCQgHAgYVCAkKCwIEFgIDAQIeAQIXgBYh BLHSvRN1vst4TPT4xNc89jjFPAa+BQJn0XQkBQkNZGbwAAoJENc89jjFPAa+BtIA /iR73CfBurG9y8pASh3cbGOMHpDZfMAtosu6jbpO69GHAP4p7l57d+iVty2VQMsx +3TCSAvZkpr4P/FuTzZ8JZe8BrgzBFySz4EWCSsGAQQB2kcPAQEHQOxTCIOaeXAx I2hIX4HK9bQTpNVei708oNr1Klm8qCGKiPUEGBYIACYCGwIWIQSx0r0Tdb7LeEz0 +MTXPPY4xTwGvgUCZ9F0SgUJDWRmSQCBdiAEGRYIAB0WIQSjzJyHC50xCrrUzy9R cisI/kdFogUCXJLPgQAKCRBRcisI/kdFoqdMAQCgH45aseZgIrwKOvUOA9QfsmeE 8GZHYNuFHmM9FEQS6AD6A4x5aYvoY6lo98pgtw2HPDhmcCXFItjXCrV4A0GmJA4J ENc89jjFPAa+wUUBAO64fbZek6FPlRK0DrlWsrjCXuLi6PUxyzCAY6lG2nhUAQC6 qobB9mkZlZ0qihy1x4JRtflqFcqqT9n7iUZkCDIiDbg4BFySz2oSCisGAQQBl1UB BQEBB0AxlRumDW6nZY7A+VCfek9VpEx6PJmdJyYPt3lNHMd6HAMBCAeIfgQYFggA JgIbDBYhBLHSvRN1vst4TPT4xNc89jjFPAa+BQJn0XTSBQkNZGboAAoJENc89jjF PAa+0M0BAPPRq73kLnHYNDMniVBOzUdi2XeF32idjEWWfjvyIJUOAP4wZ+ALxIeh is3Uw2BzGZE6ttXQ2Q+DeCJO3TPpIqaXDAAKCRBRcisI/kdFojC3AP9agVTA8WBD l4IUf3MBpE6qtd+Y6ud/Ja2R4A5fsNnOsQEAr40Iy7MWh9Musq3o8V5Xhmu5Y4zY MxkO8Mu2IdkzcwM=
    =gc2c
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Paul Gevers@21:1/5 to Noah Meyerhans on Thu May 8 15:10:01 2025
    Copy: 1100698@bugs.debian.org
    Copy: 1104411@bugs.debian.org

    This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --------------l0MN0MabjzkJ7fsXUb1A2qFU
    Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: base64

    SGkgTm9haCwNCg0KT24gVGh1LCAwOCBNYXkgMjAyNSAxMDoxMDowNiArMDIwMCBTaW1vbiBK b3NlZnNzb24gPHNpbW9uQGpvc2Vmc3Nvbi5vcmc+IA0Kd3JvdGU6DQo+IFRoZSB0ZXN0aW5n IG1pZ3JhdGlvbiBzZWVtcyBhIGJpdCB1bmNsZWFyIHRvIG1lLCBjYW4geW91IHRha2UgYSBs b29rIGlmDQo+IHRoaXMgd2lsbCBhY3R1YWxseSBtaWdyYXRlPyAgSXQgaXMgc2NoZWR1bGVk IGZvciBhdXRvcmVtb3ZhbCByaWdodCBub3cuDQo+IA0KPiBodHRwczovL3RyYWNrZXIuZGVi aWFuLm9yZy9wa2cvZ3Nhc2wNCj4gaHR0cHM6Ly90cmFja2VyLmRlYmlhbi5vcmcvcGtnL2xp Ymdzc2dsdWUNCj4gDQo+IEkgdGhpbmsgeW91IG5lZWQgYSBkZXBlbmRlbmNlIG9uICdkb3Zl Y290ICg+PSAyLjR+KScgaW4NCj4gZ3Nhc2wvbGliZ3NzZ2x1ZSwgYW5kIGEgJ0JyZWFrczog Z3Nhc2wgKDw8IDIuMi4yLTEuMX4pLCBsaWJnc2FzbCAoPDwNCj4gMC45LTEuMX4pJyBpbiBk b3ZlY290Lg0KDQpXaXRob3V0IGhhdmluZyBzcGVuZCBhIGxvdCBvZiB0aW1lIGNoZWNraW5n LCB0aGlzIGFwcGVhcnMgdG8gYmUgY29ycmVjdCANCnRvIG1lLiBUbyBnZXQgbW9yZSBjb25m aWRlbmNlLCBpcyB0aGUgZmFpbHVyZSBvZiB0aGUgYXV0b3BrZ3Rlc3Qgb25seSBhIA0KKnRl c3QqIHJlZ3Jlc3Npb24sIG9yIGlzIHRoaXMgYWxzbyBpbXBhY3RpbmcgcmVndWxhciB1c2Ug Y2FzZXMgZm9yIA0KdXNlcnM/IEluIHRoZSBsYXR0ZXIgY2FzZSwgdGhlIEJyZWFrcyBhbmQg dmVyc2lvbmVkIERlcGVuZHMgYXJlIA0KYXBwcm9wcmlhdGUuIEluIHRoZSBmb3JtZXIgY2Fz ZSBJIGNhbiBnZXQgdGhlIHRlc3RzIHRvIGJlIHNjaGVkdWxlZCB0byANCnVzZSBib3RoIHBh Y2thZ2VzIGZyb20gdW5zdGFibGUuIChBbmQgSSB3b25kZXIgdGhlIHNhbWUgYWJvdXQgdGhl IG90aGVyIA0KYXV0b3BrZ3Rlc3QgZmFpbHVyZXMgdHJpZ2dlcmVkIGJ5IGRvdmVjb3QpLg0K DQpGb3IgYXZvaWRhbmNlIG9mIGRvdWJ0LCBpZiB3ZSB0aGluayB0aGVzZSBhcmUgb25seSB0 ZXN0IGZhaWx1cmVzIGFuZCBub3QgDQp1c2VyIGZhY2luZyBmYWlsdXJlcywgSSByYXRoZXIg YXZvaWQgZnVydGhlciB1cGxvYWQgYmVmb3JlIHRoaW5ncyANCm1pZ3JhdGUgdG8gdGVzdGlu Zy4NCg0KUGF1bA0KDQo=

    --------------l0MN0MabjzkJ7fsXUb1A2qFU--

    -----BEGIN PGP SIGNATURE-----

    wsB5BAABCAAjFiEEWLZtSHNr6TsFLeZynFyZ6wW9dQoFAmgcqzEFAwAAAAAACgkQnFyZ6wW9dQqj pggAxiDq/EFVNTHdUYjDQJYyTyzhlVkIoYvwiOUapILi5U8YmS9qYMK5+oLpVeKe8Jj5mggFddwT 31HFTjCfvbNS+qsKGxWrb2s448wLwGSF93yQQpRKXip5bDU57yg7SnbGm//EytHcFFrP8oYh6Tnm OL1SETj6We5f2a5xFVcZcqVcFA4dAR2l2PKuLrIvfawVYfo3hlJOmu/2f0Ti0NthhP6qAMo7JLVS 8A5uR0zc9pFRNFXTEdtoDlbGKCt4valQXD7cdbTCQLWW+IBOTYl6fTaJSdY1CdhMk+EpXDdVgPUH J2cPMtp97gJ9VZmzktx6Om4kWP6lEzHwOy+nNkSV4g==
    =T41c
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)