Package: mon
Version: 1.2.0-1
Severity: important
Tags: upstream

/usr/lib/mon/mon.d/imap.monitor has substantial undocumented changes
from the Lenny version (0.99.2-13), which likely break existing
installations.

In Lenny, the IMAP monitor would cheack only that the IMAP server
displayed a correct banner; in Squeeze, the IMAP monitor attempts to 
login with the command

A1 LOGIN ANONYMOUS ANONYMOUS

which requires an account called ANONYMOUS with the password ANONYMOUS
(as distinct from, say, attempting to use the ANONYMOUS authentication
scheme documented in RFC4505 and supported by dovecot).

This change is not documented and is not something I'm prepared to setup
on production systems; I would expect this behaviour to not be the default,
and that it should at a minimum require the user to specify the credentials
to use with command-line options, falling back to the existing behaviour if
none are supplied.


Thanks,


John Pearson

-- System Information:
Debian Release: squeeze/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.35.7-0briar (SMP w/2 CPU cores)
Locale: LANG=en_AU.UTF-8, LC_CTYPE=en_AU.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages mon depends on:
ii  adduser                       3.112      add and remove users and groups
ii  libc6                         2.11.2-7   Embedded GNU C Library: Shared lib
ii  libtime-period-perl           1.20-8     Perl library for testing if a time
ii  mon-client                    1.2.0-1    modules for interfacing with the m

Versions of packages mon recommends:
ii  fping                 2.4b2-to-ipv6-16.1 sends ICMP ECHO_REQUEST packets to
ii  libauthen-pam-perl    0.16-2             Perl interface to PAM library
ii  libcrypt-ssleay-perl  0.57-2             Support for https protocol in LWP
ii  libfilesys-diskspace- 0.05-13            fetch filesystem size and usage in
ii  libnet-dns-perl       0.66-2             Perform DNS queries from a Perl sc
ii  libnet-ldap-perl      1:0.4001-2         client interface to LDAP servers
ii  libnet-telnet-perl    3.03-3             Script telnetable connections
pn  libsnmp-perl          <none>             (no description available)
pn  libstatistics-descrip <none>             (no description available)
ii  libtime-modules-perl  2006.0814-2        Various Perl modules for time/date
ii  perl-modules [libnet- 5.10.1-16          Core Perl modules

mon suggests no packages.

-- Configuration Files:
/etc/init.d/mon changed [not included]

-- no debconf information



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to