Bug 129957

Summary:	cyrus-imapd should honor the kerberos USE-flag when setting the --with-auth configure option
Product:	Gentoo Linux	Reporter:	Peter Dinges <me>
Component:	New packages	Assignee:	No maintainer - Look at https://wiki.gentoo.org/wiki/Project:Proxy_Maintainers if you want to take care of it <maintainer-needed>
Status:	RESOLVED FIXED
Severity:	minor	CC:	net-mail+disabled
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---
Attachments:	Patch that sets "--with-auth=krb5" for configure if kerberos USE-flag is set

Description Peter Dinges 2006-04-14 08:52:57 UTC

After emerging net-mail/cyrus-imapd-2.2.12 with the "kerberos" USE-flag set, authenticating via GSSAPI with principals that have instances did not work. For example, principal "foo@EXAMPLE.COM" could authenticate in `imtest localhost` when holding a TGT, but "foo/admin@EXAMPLE.COM" could not. Instead, an error "[SASL(-13): authentication failure: bad userid authenticated]" was returned.

This comes from the fact that "/" is not a valid character for UNIX usernames. Since version 2.2, Cyrus IMAPd offers a configure-option "--with-auth=krb5" that solves this issue. It should therefore be used when the kerberos USE-flag is set.

Attached is a patch for cyrus-imapd-2.2.12.ebuild that does just this. ("--with-auth=krb5" is used when the kerberos USE-flag is set, "--with-auth=unix" otherwise.)

Comment 1 Peter Dinges 2006-04-14 08:54:08 UTC

Created attachment 84649 [details, diff]
Patch that sets "--with-auth=krb5" for configure if kerberos USE-flag is set

Comment 2 Jakub Moc (RETIRED) gentoo-dev

2007-07-08 18:42:57 UTC

Fixed in 2.3.7.