Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 1 Jun 2002 21:14:54 +0400 (MSD)
From:      Seva Gluschenko <gvs@rinet.ru>
To:        FreeBSD-gnats-submit@FreeBSD.org
Cc:        noc@rinet.ru
Subject:   ports/38801: sasl_apop_patch.gz breaks LOGIN mech (SMTP AUTH)
Message-ID:  <200206011714.g51HEs97001503@kolokol.ru>

next in thread | raw e-mail | index | archive | help

>Number:         38801
>Category:       ports
>Synopsis:       sasl_apop_patch.gz breaks LOGIN mech (SMTP AUTH)
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    freebsd-ports
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Sat Jun 01 10:20:01 PDT 2002
>Closed-Date:
>Last-Modified:
>Originator:     Kolokoa.Rul &
>Release:        FreeBSD 4.6-RC i386
>Organization:
Cronyx Plus LLC
>Environment:
System: FreeBSD kolokol.ru 4.6-RC FreeBSD 4.6-RC #4: Sat Jun 1 19:19:43 MSD 2002 root@kolokol.ru:/usr/obj/usr/src/sys/KOLOKOL i386


	
>Description:
	making Cyrus SASL library (used for SMTP AUTH) from ports results
	to non-working LOGIN authentication mechanism. Experiments show this
	situation to be result of sasl_apop_patch application.
>How-To-Repeat:
	cd /usr/ports/security/cyrus-sasl
	make
	make install

	then recompile sendmail with SASL (as described in /etc/mail/README,
	/etc/defaults/make.conf and sendmail documentation), install sendmail,
	change sendmail configuration file and restart sendmail.

	N.B.: It wasn't tested against pwcheck method, only with SaslDB.
	Try every MUA which is capable of LOGIN authentication (e.g. MSOE 5.5
	and higher). Sendmail will continuously re-request password, strings
	in maillog will look like

	Jun  1 20:37:39 kolokol sm-mta[26436]: g51GbdVS026436: demo.rinet.ru
	[195.54.192.69] did not issue MAIL/EXPN/VRFY/ETRN during connection
	to MTA

>Fix:

	Recompile SASL by yourself not applying sasl_apop_patch or edit
	/usr/ports/security/cyrus-sasl/Makefile and remove referral to this
	patch. Probably you may use the following patch (untested, however).

	My great thanks to port maintainer for returning me to distrust to
	sensitive ports %-/ as well as the time wasted in attempts to get
	rid of the problem.


--- Makefile.orig	Sat Jun  1 21:10:59 2002
+++ Makefile	Sat Jun  1 21:12:26 2002
@@ -22,8 +22,7 @@
 
 PATCH_SITES=	ftp://ftp.westbend.net/pub/cyrus-mail/contrib/ \
 		http://www.imasy.or.jp/~ume/ipv6/
-PATCHFILES=	sasl_apop_patch.gz \
-		${DISTNAME}-ipv6-${IPV6_VER}.diff.gz
+PATCHFILES=	${DISTNAME}-ipv6-${IPV6_VER}.diff.gz
 
 MAINTAINER=	hetzels@westbend.net
 


>Release-Note:
>Audit-Trail:
>Unformatted:

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-ports" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200206011714.g51HEs97001503>