Your message dated Fri, 28 Jun 2024 12:14:44 +0200
with message-id <77448807-5e36-9ec1-5e28-3e2b1bd17...@debian.org>
and subject line courierpassd has been removed from Debian
has caused the Debian Bug report #884920,
regarding courierpassd: fails to change the password
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
884920: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=884920
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: courierpassd
Version: 1.1.2-3
Severity: important
Tags: upstream

Dear Maintainer,

I'm running courier with virtual mailboxes and userdb authentication.

For a specific user, the current password is 

$@D_/B=qcpj>3<@7

If I test the authentication with that password, it succeeds:

# authtest u...@example.com '$@D_/B=qcpj>3<@7'
Authentication succeeded.

     Authenticated: u...@example.com  (uid 5000, gid 5000)
    Home Directory: /home/mail/example.com/user
           Maildir: (none)
             Quota: (none)
Encrypted Password: $1$...
Cleartext Password: $@D_/B=qcpj>3<@7
           Options: (none)

but, if I test courierpassd via telnet, I get:

# telnet localhost 106
Trying ::1...
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
200 courierpassd v1.1.2 hello, who are you?
user u...@example.com
200 Your password please.
pass $@D_/B=qcpj>3<@7
200 Your new password please.
newpass mynewsecret17
500 Server error, password not changed.
Connection closed by foreign host.

I suspect it's being caused by the "strange" characters in the current 
password, becasue the same works correctly with other users that have a more 
dictionary based password, but I'm not sure.

I'm running courierpassd via xinetd with the following configuration:

service poppassd
{
        port = 106
        socket_type = stream
        protocol = tcp
        user = root
        server = /usr/sbin/courierpassd
        server_args = -s imap
        wait = no
        only_from = localhost
        instances = 4
        disable = no
}


-- System Information:
Debian Release: 9.3
  APT prefers stable
  APT policy: (990, 'stable'), (600, 'unstable'), (400, 'oldstable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.9.0-4-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US:en (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages courierpassd depends on:
ii  courier-authlib  0.66.4-9
ii  libc6            2.24-11+deb9u1

courierpassd recommends no packages.

Versions of packages courierpassd suggests:
ii  xinetd  1:2.3.15-7

-- no debconf information

--- End Message ---
--- Begin Message ---
Version: 1.1.2-4+rm

src:courierpassd was last released with Debian 8 (jessie)
in April 2015 and has been removed from the Debian archive afterwards.
See https://bugs.debian.org/801591 for details on the removal.
After regular security support for jessie ended in June 2018 and LTS
support ended in June 2020, I'm closing the remaining bug reports now.

Andreas

--- End Message ---

Reply via email to