Bug 399489 – net-im/pidgin XMPP/SASL authentication fail with >=dev-libs/cyrus-sasl-2.1.25

• Product: Gentoo Linux
• Status: RESOLVED FIXED

[Description Uros 2012-01-20 10:04:49 UTC]

Pidgin fails to connect to XMPP (gtalk) when using >=dev-libs/cyrus-sasl-2.1.25. It works fine with dev-libs/cyrus-sasl-2.1.23

Reproducible: Always

Steps to Reproduce:
1. emerge >=dev-libs/cyrus-sasl-2.1.25
2. restart pidgin
3. connect to XMPP server (gtalk)
Actual Results:  
Connection fails with error message "Server does not use any supported authentication method" and this line in debug log:
sasl: sasl_state is -1, failing the mech and trying again

Expected Results:  
Pidgin should connect to XMPP server (gtalk)

Portage 2.1.10.44 (default/linux/amd64/10.0/desktop, gcc-4.5.3, glibc-2.14.1-r2, 3.2.0-gentoo-r1 x86_64)
=================================================================
System uname: Linux-3.2.0-gentoo-r1-x86_64-Intel-R-_Core-TM-_i7-2630QM_CPU_@_2.00GHz-with-gentoo-2.1
Timestamp of tree: Fri, 20 Jan 2012 02:00:01 +0000
distcc 3.1 x86_64-pc-linux-gnu [disabled]
app-shells/bash:          4.2_p20
dev-java/java-config:     2.1.11-r3
dev-lang/python:          2.7.2-r3, 3.2.2
dev-util/cmake:           2.8.6-r4
dev-util/pkgconfig:       0.26
sys-apps/baselayout:      2.1
sys-apps/openrc:          0.9.8.1
sys-apps/sandbox:         2.5
sys-devel/autoconf:       2.13, 2.68
sys-devel/automake:       1.11.2-r1
sys-devel/binutils:       2.22-r1
sys-devel/gcc:            4.5.3-r2
sys-devel/gcc-config:     1.5-r2
sys-devel/libtool:        2.4.2
sys-devel/make:           3.82-r3
sys-kernel/linux-headers: 3.2 (virtual/os-headers)
sys-libs/glibc:           2.14.1-r2
Repositories: gentoo lcd-filtering desktop-effects
ACCEPT_KEYWORDS="amd64 ~amd64"
ACCEPT_LICENSE="*"
CBUILD="x86_64-pc-linux-gnu"
CFLAGS="-march=core2 -O2 -pipe"
CHOST="x86_64-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/share/config /usr/share/gnupg/qualified.txt /usr/share/openvpn/easy-rsa"
CONFIG_PROTECT_MASK="/etc/ca-certificates.conf /etc/env.d /etc/env.d/java/ /etc/fonts/fonts.conf /etc/gconf /etc/gentoo-release /etc/php/apache2-php5.4/ext-active/ /etc/php/cgi-php5.4/ext-active/ /etc/php/cli-php5.4/ext-active/ /etc/revdep-rebuild /etc/sandbox.d /etc/terminfo"
CXXFLAGS="-march=core2 -O2 -pipe"
DISTDIR="/usr/portage/distfiles"
EMERGE_DEFAULT_OPTS="--quiet-build=n"
FEATURES="assume-digests binpkg-logs distlocks ebuild-locks fixlafiles news parallel-fetch protect-owned sandbox sfperms strict unknown-features-warn unmerge-logs unmerge-orphans"
FFLAGS=""
GENTOO_MIRRORS="http://distfiles.gentoo.org"
LDFLAGS="-Wl,-O1 -Wl,--as-needed"
MAKEOPTS="-j9"
PKGDIR="/usr/portage/packages"
PORTAGE_CONFIGROOT="/"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage/tree"
PORTDIR_OVERLAY="/var/lib/layman/lcd-filtering /var/lib/layman/desktop-effects"
SYNC="rsync://rsync.gentoo.org/gentoo-portage"
USE="X a52 aac acl acpi alsa amd64 bash-completion berkdb bluetooth branding bzip2 cairo cdda cdr cli consolekit cracklib crypt cups cxx dbus dri dts dvd dvdr emboss encode exif fam firefox flac fortran gdbm gdu gif gpm hfs iconv idn ipv6 jpeg lcms libnotify mmx mng modules mp3 mp4 mpeg mudflap multilib ncurses nls nptl nptlonly nss nvidia ogg opengl openmp pam pango pcre pdf png policykit ppds pppd qt3support qt4 readline samba session sse sse2 ssl ssse3 startup-notification svg sysfs system-sqlite tcpd tiff truetype udev unicode usb userlocales vdpau vorbis x264 xcb xinerama xml xorg xulrunner xv xvid zlib" ALSA_CARDS="hda-intel" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mmap_emul mulaw multi null plug rate route share shm softvol" APACHE2_MODULES="actions alias auth_basic authn_alias authn_anon authn_dbm authn_default authn_file authz_dbm authz_default authz_groupfile authz_host authz_owner authz_user autoindex cache cgi cgid dav dav_fs dav_lock deflate dir disk_cache env expires ext_filter file_cache filter headers include info log_config logio mem_cache mime mime_magic negotiation rewrite setenvif speling status unique_id userdir usertrack vhost_alias" CALLIGRA_FEATURES="kexi words flow plan stage tables krita karbon braindump" CAMERAS="ptp2" COLLECTD_PLUGINS="df interface irq load memory rrdtool swap syslog" ELIBC="glibc" GPSD_PROTOCOLS="ashtech aivdm earthmate evermore fv18 garmin garmintxt gpsclock itrax mtk3301 nmea ntrip navcom oceanserver oldstyle oncore rtcm104v2 rtcm104v3 sirf superstar2 timing tsip tripmate tnt ubx" INPUT_DEVICES="evdev synaptics" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" NGINX_MODULES_HTTP="access auth_basic autoindex charset empty_gif fastcgi gzip limit_req limit_zone map memcached proxy referer rewrite ssi scgi" PHP_TARGETS="php5-3" RUBY_TARGETS="ruby18" USERLAND="GNU" VIDEO_CARDS="nvidia" XTABLES_ADDONS="quota2 psd pknock lscan length2 ipv4options ipset ipp2p iface geoip fuzzy condition tee tarpit sysrq steal rawnat logmark ipmark dhcpmac delude chaos account"
Unset:  CPPFLAGS, CTARGET, INSTALL_MASK, LANG, LC_ALL, LINGUAS, PORTAGE_BUNZIP2_COMMAND, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS

[Comment 1 Eray Aslan 2012-01-20 14:48:17 UTC]

Did you try cyrus-sasl-2.1.25-r1?  Looks like a duplicate of bug 392761.

[Comment 2 Uros 2012-01-23 11:39:50 UTC]

So, I ...
 - emerged dev-libs/cyrus-sasl-2.1.25-r1 (berkdb gdbm pam ssl)
 - ran revdep-rebuild --library '/usr/lib64/libsasl2.so.2.0.23' && rm '/usr/lib64/libsasl2.so.2.0.23'
 - rebuilt net-im/pidgin-2.10.1 (dbus gtk idn nls sasl) -- just to be on the safe side

After restarting pidgin, I get the same error.

[Comment 3 Uros 2012-01-23 11:52:25 UTC]

I did a little more testing. It seems that problem seems to be triggered only on company network (@work) - and even then only with >=dev-libs/cyrus-sasl-2.1.25. When I'm @home everything works as expected with both versions.

Weird.

[Comment 4 Stefan Briesenick (RETIRED) 2012-02-07 20:53:55 UTC]

I can confirm that!

@home: no problem with 2.1.25-r1
@work: 2.1.25-r1 has said problems, but 2.1.23-r6 works fine

and what really strange is, that I have @home an even more restricted network, than @work (I'm a linux admin ;).

So I don't think, that we have some kind of firewall problem here.

maybe some weird DNS-stuff (SRV-records) and our recursor @work... I don't know. But I wanted to confirm that problem.

[Comment 5 Lars Wendler (Polynomial-C) (RETIRED) 2013-06-18 12:58:45 UTC]

according to [1] and [2] this can be fixed by modifying your /etc/hosts file.

[1] http://archives.gentoo.org/gentoo-user/msg_67106f9dce77b9857ade8056d3a4c522.xml
[2] http://askubuntu.com/questions/88989/unable-to-connect-to-google-talk-using-pidgin-sasl-error

[Comment 6 Uros 2013-06-20 07:24:15 UTC]

Thanks for info.
I've been running dev-libs/cyrus-sasl-2.1.26-r1 at least from 27.02.2013 and haven't experienced mentioned issues since. 
I forgot about this issue, so I'll just resolve it as fixed since latest version works without needed /etc/hosts modifications.