Thanks for report! Did you confirm that your new dovecot version has working GSSAPI support, with some other client? Or is this gsasl autopkgtest the only one that test that functionality? I think the relevant dovecot errors are the one below, but the error reporting is not that great. Since configuration file format changed here, maybe something new is needed to setup working GSSAPI. Gsasl is merely passing tokens along from the Kerberos libraries so I suspect this problem is caused by something on the dovecot GSSAPI side.
Apr 29 18:20:13 auth(?,127.0.0.1,sasl:gssapi)<tYf92e4zfJd/AAAB>: Info: gssapi: While processing incoming data: Invalid token was supplied Apr 29 18:20:13 auth(?,127.0.0.1,sasl:gssapi)<tYf92e4zfJd/AAAB>: Info: gssapi: While processing incoming data: Unknown error Apr 29 18:20:13 auth(?,127.0.0.1,sasl:gssapi)<tYf92e4zfJd/AAAB>: Debug: Auth request finished Apr 29 18:20:13 auth(?,127.0.0.1,sasl:gssapi)<tYf92e4zfJd/AAAB>: Debug: delaying auth failure Apr 29 18:20:15 auth: Debug: conn unix:login (pid=4661,uid=1000) [2]: client passdb out: FAIL 1 Apr 29 18:20:15 imap-login: Info: Login aborted: Connection closed (auth failed, 1 attempts in 3 secs) (auth_failed): user=<>, method=GSSAPI, rip=127.0.0.1, lip=127.0.1.1, session=<tYf92e4zfJd/AAAB> /Simon > 29 apr. 2025 kl. 21:21 skrev Noah Meyerhans <no...@debian.org>: > > Source: gsasl > Version: 2.2.0-1 > Severity: serious > Justification: autopkgtest regression > > Dovecot 2.4 is currently in unstable and trying to migrate to testing. It's > currently blocked because its configuration file format changes introduce > regressions in autopkgtests for some packages, including gsasl. > > I've prepared a patch to update the dovecot configuration used in gsasl's > test suite to support dovecot 2.4, but GSSAPI authentication fails, > resulting in a test failure. Please see [1] for my proposed patch and [2] > for an example of the failure. It's not clear from either gsasl's or > dovecot's output what's going wrong, and I'm hoping you're able to provide > some insight. > > Once the test suite is fixed, I'm happy to NMU the fixes if that's useful to > you, or I can leave it for you. > > Thanks > noah > > 1. > https://salsa.debian.org/noahm/gsasl/-/commit/031d36258471a2645b5600acc71396e0948ac03f > 2. https://salsa.debian.org/noahm/gsasl/-/jobs/7508765#L2616 >
