On Mon, 2 May 2005, Charles Bailey wrote:
OK, to no-one's real suprise (including my own), if I rebuild Cyrus SASL without GSSAPI, LDAP, or PAM support and run Cyrus IMAPD and Sendmail against it, using sasldb for authentication, all is well. (It's run clean for several days longer than any of the previous attempts.)
I think we're on stable ground now, but I'm still uneasy walking away from this, as it seems there's a simple-to-exploit DoS bug living in OS X somewhere, which it seems unfriendly to ignore. I haven't really had a chance to delve into the source and figure out why saslauthd-pam/imapd (and possibly saslauthd-pam/sendmail) locks up the system while things like sshd-pam do not, if in fact PAM's the culprit. Do any other obvious lines of investigation occur to folks out there? Is there a mechanism by which an outside user can file a bug report with Apple? (Perhaps the darwin-dev list works?) Is there a better forum in which to ask?
https://bugreport.apple.com/cgi-bin/WebObjects/RadarWeb.woa
You should be able to just join ADC for free to use this.
--- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
