Your message dated Mon, 21 Jan 2019 16:34:43 +0000
with message-id <e1glcx5-0002gj...@fasolo.debian.org>
and subject line Bug#880393: fixed in cyrus-sasl2 2.1.27+dfsg-1~exp1
has caused the Debian Bug report #880393,
regarding libsasl2-modules-gssapi-heimdal seems built against MIT
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
880393: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=880393
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: libsasl2-modules-gssapi-heimdal
Version: 2.1.27~101-g0780600+dfsg-3
Severity: important
Dear Maintainer,
I think something is fishy with the package "libsasl2-modules-gssapi-heimdal".
I suspect that the package is built against MIT instead of Heimdal.
Trying to migrate a Xenial machine to Stretch I noticed a difference in
behavior when using `saslauthd` in a Postfix chroot - configs that
haven't been required before was now required and `saslauthd` is
complaing about settings that I have never seen with our previous setup. We
have always used the Heimdal Kerberos libraries and therefore always
used "libsasl2-modules-gssapi-heimdal" for `saslauthd`.
Couldn't find any upstream changes in either Heimdal or Cyrus SASL which
would explain my issuses so I went digging in the Debian package
instead.
Found that Heimdal was ripped out from the package(s) in October 24
2016:
* 004977091b89363daa04301e89a045e7e2ffbad8
* b9158ab7d2bc71a026d417982fee61bc854935f4
* b334c34bce70f20d85ef0e86e79c6310b69f7345
And added again on Dec 31:
* f382638d18a1e1e75560076d0cb1482e0b4dc613
Unfortunately the package(s) has moved a lot between removal and reinstatement
so I can't get a clean diff over the changes. But I suspect that the
reinstatement didn't go as planned.
>From Jessie:
```
# dpkg -S /usr/lib/x86_64-linux-gnu/sasl2/libgssapiv2.so.2.0.25
libsasl2-modules-gssapi-heimdal:amd64:
/usr/lib/x86_64-linux-gnu/sasl2/libgssapiv2.so.2.0.25
# ldd /usr/lib/x86_64-linux-gnu/sasl2/libgssapiv2.so.2.0.25
linux-vdso.so.1 (0x00007fffc877e000)
libgssapi.so.3 => /usr/lib/x86_64-linux-gnu/libgssapi.so.3
(0x00007fd5b206a000)
libkrb5.so.26 => /usr/lib/x86_64-linux-gnu/libkrb5.so.26
(0x00007fd5b1ddb000)
libasn1.so.8 => /usr/lib/x86_64-linux-gnu/libasn1.so.8
(0x00007fd5b1b2b000)
libroken.so.18 => /usr/lib/x86_64-linux-gnu/libroken.so.18
(0x00007fd5b1915000)
libcrypt.so.1 => /lib/x86_64-linux-gnu/libcrypt.so.1
(0x00007fd5b16de000)
libcrypto.so.1.0.0 => /usr/lib/x86_64-linux-gnu/libcrypto.so.1.0.0
(0x00007fd5b12e1000)
libcom_err.so.2 => /lib/x86_64-linux-gnu/libcom_err.so.2
(0x00007fd5b10dd000)
libresolv.so.2 => /lib/x86_64-linux-gnu/libresolv.so.2
(0x00007fd5b0ec6000)
libc.so.6 => /lib/x86_64-linux-gnu/libc.so.6 (0x00007fd5b0b1a000)
libheimntlm.so.0 => /usr/lib/x86_64-linux-gnu/libheimntlm.so.0
(0x00007fd5b0911000)
libhcrypto.so.4 => /usr/lib/x86_64-linux-gnu/libhcrypto.so.4
(0x00007fd5b06dc000)
libpthread.so.0 => /lib/x86_64-linux-gnu/libpthread.so.0
(0x00007fd5b04be000)
libwind.so.0 => /usr/lib/x86_64-linux-gnu/libwind.so.0
(0x00007fd5b0295000)
libheimbase.so.1 => /usr/lib/x86_64-linux-gnu/libheimbase.so.1
(0x00007fd5b0086000)
libhx509.so.5 => /usr/lib/x86_64-linux-gnu/libhx509.so.5
(0x00007fd5afe39000)
libsqlite3.so.0 => /usr/lib/x86_64-linux-gnu/libsqlite3.so.0
(0x00007fd5afb70000)
libdl.so.2 => /lib/x86_64-linux-gnu/libdl.so.2 (0x00007fd5af96c000)
/lib64/ld-linux-x86-64.so.2 (0x00007fd5b24ba000)
# strings /usr/lib/x86_64-linux-gnu/sasl2/libgssapiv2.so.2.0.25 | egrep
"MIT|HEIM"
HEIMDAL_GSS_2.0
```
>From Ubuntu Xenial:
```
# dpkg -S /usr/lib/x86_64-linux-gnu/sasl2/libgssapiv2.so.2.0.25
libsasl2-modules-gssapi-heimdal:amd64:
/usr/lib/x86_64-linux-gnu/sasl2/libgssapiv2.so.2.0.25
# ldd /usr/lib/x86_64-linux-gnu/sasl2/libgssapiv2.so.2.0.25
linux-vdso.so.1 => (0x00007ffd967d4000)
libgssapi.so.3 => /usr/lib/x86_64-linux-gnu/libgssapi.so.3
(0x00007f818c61c000)
libc.so.6 => /lib/x86_64-linux-gnu/libc.so.6 (0x00007f818c252000)
libheimntlm.so.0 => /usr/lib/x86_64-linux-gnu/libheimntlm.so.0
(0x00007f818c048000)
libkrb5.so.26 => /usr/lib/x86_64-linux-gnu/libkrb5.so.26
(0x00007f818bdbe000)
libasn1.so.8 => /usr/lib/x86_64-linux-gnu/libasn1.so.8
(0x00007f818bb1c000)
libcom_err.so.2 => /lib/x86_64-linux-gnu/libcom_err.so.2
(0x00007f818b917000)
libhcrypto.so.4 => /usr/lib/x86_64-linux-gnu/libhcrypto.so.4
(0x00007f818b6e4000)
libroken.so.18 => /usr/lib/x86_64-linux-gnu/libroken.so.18
(0x00007f818b4ce000)
libpthread.so.0 => /lib/x86_64-linux-gnu/libpthread.so.0
(0x00007f818b2b0000)
/lib64/ld-linux-x86-64.so.2 (0x0000559426341000)
libwind.so.0 => /usr/lib/x86_64-linux-gnu/libwind.so.0
(0x00007f818b087000)
libheimbase.so.1 => /usr/lib/x86_64-linux-gnu/libheimbase.so.1
(0x00007f818ae78000)
libhx509.so.5 => /usr/lib/x86_64-linux-gnu/libhx509.so.5
(0x00007f818ac2c000)
libsqlite3.so.0 => /usr/lib/x86_64-linux-gnu/libsqlite3.so.0
(0x00007f818a957000)
libcrypt.so.1 => /lib/x86_64-linux-gnu/libcrypt.so.1
(0x00007f818a71f000)
libdl.so.2 => /lib/x86_64-linux-gnu/libdl.so.2 (0x00007f818a51a000)
libresolv.so.2 => /lib/x86_64-linux-gnu/libresolv.so.2
(0x00007f818a2ff000)
# strings /usr/lib/x86_64-linux-gnu/sasl2/libgssapiv2.so.2.0.25 | egrep
"MIT|HEIM"
HEIMDAL_GSS_2.0
```
>From Stretch:
```
# dpkg -S /usr/lib/x86_64-linux-gnu/sasl2/libgssapiv2.so.2.0.25
libsasl2-modules-gssapi-heimdal:amd64:
/usr/lib/x86_64-linux-gnu/sasl2/libgssapiv2.so.2.0.25
# ldd /usr/lib/x86_64-linux-gnu/sasl2/libgssapiv2.so.2.0.25
linux-vdso.so.1 (0x00007ffd97762000)
libgssapi_krb5.so.2 => /usr/lib/x86_64-linux-gnu/libgssapi_krb5.so.2
(0x00007f218ad06000)
libkrb5.so.3 => /usr/lib/x86_64-linux-gnu/libkrb5.so.3
(0x00007f218aa2c000)
libk5crypto.so.3 => /usr/lib/x86_64-linux-gnu/libk5crypto.so.3
(0x00007f218a7f9000)
libcom_err.so.2 => /lib/x86_64-linux-gnu/libcom_err.so.2
(0x00007f218a5f5000)
libresolv.so.2 => /lib/x86_64-linux-gnu/libresolv.so.2
(0x00007f218a3de000)
libc.so.6 => /lib/x86_64-linux-gnu/libc.so.6 (0x00007f218a03f000)
libkrb5support.so.0 => /usr/lib/x86_64-linux-gnu/libkrb5support.so.0
(0x00007f2189e33000)
libdl.so.2 => /lib/x86_64-linux-gnu/libdl.so.2 (0x00007f2189c2f000)
libkeyutils.so.1 => /lib/x86_64-linux-gnu/libkeyutils.so.1
(0x00007f2189a2b000)
libpthread.so.0 => /lib/x86_64-linux-gnu/libpthread.so.0
(0x00007f218980e000)
/lib64/ld-linux-x86-64.so.2 (0x00007f218b15a000)
# strings /usr/lib/x86_64-linux-gnu/sasl2/libgssapiv2.so.2.0.25 | egrep
"MIT|HEIM"
gssapi_krb5_2_MIT
```
As you can see from my examples all the older dists seems to be built against
Heimdal and contains HEIMDAL in the SO file but in Stretch the file now contains
MIT and `ldd` gives no hint of any Heimdal libraries. This makes me think that
"libsasl2-modules-gssapi-heimdal" is built again the wrong Kerberos library.
Let me know if there is any additional data I can provide in order to
straighten this issue.
--
jocar
-- System Information:
Debian Release: 9.1
APT prefers stable
APT policy: (500, 'stable')
Architecture: amd64 (x86_64)
Kernel: Linux 4.9.0-4-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=UTF-8 (charmap=UTF-8) (ignored: LC_ALL set
to en_US.UTF-8), LANGUAGE=en_GB:en (charmap=UTF-8) (ignored: LC_ALL set to
en_US.UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages libsasl2-modules-gssapi-heimdal depends on:
ii libc6 2.24-11+deb9u1
ii libcomerr2 1.43.4-2
ii libgssapi-krb5-2 1.15-1+deb9u1
ii libk5crypto3 1.15-1+deb9u1
ii libkrb5-3 1.15-1+deb9u1
ii libsasl2-modules 2.1.27~101-g0780600+dfsg-3
libsasl2-modules-gssapi-heimdal recommends no packages.
libsasl2-modules-gssapi-heimdal suggests no packages.
-- no debconf information
--- End Message ---
--- Begin Message ---
Source: cyrus-sasl2
Source-Version: 2.1.27+dfsg-1~exp1
We believe that the bug you reported is fixed in the latest version of
cyrus-sasl2, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 880...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Ondřej Surý <ond...@debian.org> (supplier of updated cyrus-sasl2 package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 21 Jan 2019 09:47:50 +0000
Source: cyrus-sasl2
Binary: sasl2-bin cyrus-sasl2-doc libsasl2-2 libsasl2-modules
libsasl2-modules-db libsasl2-modules-ldap libsasl2-modules-otp
libsasl2-modules-sql libsasl2-modules-gssapi-mit libsasl2-dev
libsasl2-modules-gssapi-heimdal
Architecture: source
Version: 2.1.27+dfsg-1~exp1
Distribution: experimental
Urgency: medium
Maintainer: Debian Cyrus Team <team+cy...@tracker.debian.org>
Changed-By: Ondřej Surý <ond...@debian.org>
Description:
cyrus-sasl2-doc - Cyrus SASL - documentation
libsasl2-2 - Cyrus SASL - authentication abstraction library
libsasl2-dev - Cyrus SASL - development files for authentication abstraction
lib
libsasl2-modules - Cyrus SASL - pluggable authentication modules
libsasl2-modules-db - Cyrus SASL - pluggable authentication modules (DB)
libsasl2-modules-gssapi-heimdal - Pluggable Authentication Modules for SASL
(GSSAPI)
libsasl2-modules-gssapi-mit - Cyrus SASL - pluggable authentication modules
(GSSAPI)
libsasl2-modules-ldap - Cyrus SASL - pluggable authentication modules (LDAP)
libsasl2-modules-otp - Cyrus SASL - pluggable authentication modules (OTP)
libsasl2-modules-sql - Cyrus SASL - pluggable authentication modules (SQL)
sasl2-bin - Cyrus SASL - administration programs for SASL users database
Closes: 792851 880393
Changes:
cyrus-sasl2 (2.1.27+dfsg-1~exp1) experimental; urgency=medium
.
[ Roberto C. Sanchez ]
* Change email in d/control
* Apply uversionmangle option in d/watch for correct upstream version
sort
.
[ Helmut Grohne ]
* Fix FTCBFS (Closes: #792851)
+ 0033-cross.patch: Drop -ldb from make depends.
* Use $(CC) instead of gcc in d/sample/Makefile
.
[ Ondřej Surý ]
* Add upstream tarball signing key
* Update d/watch and d/copyright to use gbp import-orig ability to
repack the tarball
* New upstream version 2.1.27+dfsg
* Bump policy to current version and debhelper compat level to 12
* Upstream supports only a single plugindir now, switch to M-A plugindir
* Build libsasl2-modules-gssapi-heimdal against heimdal
+ Install heimdal build into separate tmp directory and strip rpath
from it (Closes: #880393)
* Replace extra priority with optional
* Add Pre-Depends: ${misc:Pre-Depends} to sasl2-bin for systemd predepends
* Add libpod-pom-view-restructured-perl to B-D to regenerate documentation
* Add a patch to stop importing docutils_version in sphinx-build manpage
helper
Checksums-Sha1:
9c7cdbd0629b7153c173db8e7482df5121c5664d 3227
cyrus-sasl2_2.1.27+dfsg-1~exp1.dsc
6da3baff1685e96b93b46cdd47e13ecc34a632df 2058596
cyrus-sasl2_2.1.27+dfsg.orig.tar.xz
7656cffa49e62640d342015eb0cb63015506c2a6 98856
cyrus-sasl2_2.1.27+dfsg-1~exp1.debian.tar.xz
d8066665b4b0e6ee1f42e2fe4afcc465abc8e24e 15547
cyrus-sasl2_2.1.27+dfsg-1~exp1_amd64.buildinfo
Checksums-Sha256:
aeacc9ef7a5a6d9f738f01950fe180bb0fd067ae9cce64b2229cc604eba40ec8 3227
cyrus-sasl2_2.1.27+dfsg-1~exp1.dsc
108b0c691c423837264f05abb559ea76c3dfdd91246555e8abe87c129a6e37cd 2058596
cyrus-sasl2_2.1.27+dfsg.orig.tar.xz
da553313a235395fcaa63a71a70740a1613e55ddc19bb2d6e340b7fa3c3452fb 98856
cyrus-sasl2_2.1.27+dfsg-1~exp1.debian.tar.xz
1adbc9956afd2f413da9041ba870e3b9cc6da1878e6b899cebebc3536a3542aa 15547
cyrus-sasl2_2.1.27+dfsg-1~exp1_amd64.buildinfo
Files:
6b3a60db41b41f3c494221fb0247a7a0 3227 libs standard
cyrus-sasl2_2.1.27+dfsg-1~exp1.dsc
ce30955361d1cdde3c31d0ee742e338d 2058596 libs standard
cyrus-sasl2_2.1.27+dfsg.orig.tar.xz
7e8aa52dd7af18946a5d400860c3d272 98856 libs standard
cyrus-sasl2_2.1.27+dfsg-1~exp1.debian.tar.xz
e570128620ebbdb8734201bf68d8d60a 15547 libs standard
cyrus-sasl2_2.1.27+dfsg-1~exp1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=bJw9
-----END PGP SIGNATURE-----
--- End Message ---
