Bug 84025

Summary:	uw-imap 2004c-r3 fails to authenticate users
Product:	Gentoo Linux	Reporter:	Paul Forgey <paulf>
Component:	[OLD] Server	Assignee:	Net-Mail Packages <net-mail+disabled>
Status:	RESOLVED INVALID
Severity:	major
Priority:	High
Version:	unspecified
Hardware:	x86
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description Paul Forgey 2005-03-03 17:54:48 UTC

imap login command fails with "LOGIN failed", pop3 user command fails with "-ERR Unknown AUTHORIZATION state command".  imap will log the account is disabled.

Does this for all accounts.  Authorization works just fine if the connection is SSL.

Reproducible: Always
Steps to Reproduce:
1. emerge uw-imap (current version 2004c-r3)
2. do usualy prereq of enabling the service in xinetd
3. attempt to login with a mail client or speak the protocol using telnet
Actual Results:  
login fails


This looks like a regression of closed bug 21523

Gentoo Base System version 1.4.16
Portage 2.0.51.19 (default-linux/x86/2004.0, gcc-3.3.5, glibc-2.3.4.20040808-r1, 2.4.28-gentoo-r7 
i686)
===============================================================
==
System uname: 2.4.28-gentoo-r7 i686 Pentium III (Coppermine)
Python:              dev-lang/python-2.2.3-r5,dev-lang/python-2.3.4-r1 [2.3.4 (#1, Feb 11 2005, 03:12:
29)]
distcc 2.16 i686-pc-linux-gnu (protocols 1 and 2) (default port 3632) [enabled]
dev-lang/python:     2.2.3-r5, 2.3.4-r1
sys-devel/autoconf:  2.13, 2.59-r6
sys-devel/automake:  1.7.9-r1, 1.5, 1.4_p6, 1.6.3, 1.9.4, 1.8.5-r3
sys-devel/binutils:  2.15.92.0.2-r1
sys-devel/libtool:   1.5.10-r4
virtual/os-headers:  2.4.19-r1, 2.4.22-r1
ACCEPT_KEYWORDS="x86"
AUTOCLEAN="yes"
CFLAGS="-O3 -mcpu=pentium3 -funroll-loops -pipe"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/kde/2/share/config /usr/kde/3.3/env /usr/kde/3.3/share/config /usr/
kde/3.3/shutdown /usr/kde/3/share/config /usr/lib/X11/xkb /usr/share/config /var/bind /var/
qmail/control"
CONFIG_PROTECT_MASK="/etc/gconf /etc/terminfo /etc/env.d"
CXXFLAGS="-O3 -mcpu=pentium3 -funroll-loops -pipe"
DISTDIR="/usr/portage/distfiles"
FEATURES="autoaddcvs autoconfig ccache distcc distlocks sandbox sfperms"
GENTOO_MIRRORS="http://distfiles.gentoo.org http://distro.ibiblio.org/pub/Linux/distributions/
gentoo"
MAKEOPTS="-j6"
PKGDIR="/usr/portage/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
SYNC="rsync://rsync.gentoo.org/gentoo-portage"
USE="x86 apache2 apm arts avi berkdb bitmap-fonts crypt cups curl emboss encode f77 font-server 
foomaticdb fortran gif gpm imap imlib ipv6 java jpeg libg++ libwww mad mbox mcal mikmod milter 
motif mpeg mysql ncurses nls oggvorbis opengl oss pam pdflib perl png python quicktime readline sasl 
sdl session slang spell ssl svga tcltk tcpd tiff truetype truetype-fonts type1-fonts xml2 xmms xv zlib"
Unset:  ASFLAGS, CBUILD, CTARGET, LANG, LC_ALL, LDFLAGS, PORTDIR_OVERLAY

Comment 1 Tuan Van (RETIRED) gentoo-dev

2005-03-03 19:40:57 UTC

Not A Bug. From ChangeLog:
*uw-imap-2004c-r3 (03 Mar 2005)

  03 Mar 2005; Andrej Kacian <ticho@gentoo.org> uw-imap-2004c-r1.ebuild,
  +uw-imap-2004c-r3.ebuild:
  Revision bump to restrict cleartext LOGIN to SSL/TLS sessions by default.
  Introduced "clearpasswd" USE flag to toggle this restriction. Suggested by
  Tero Pelander <tpeland@tkukoulu.fi> in bug #83797. 2004c-r1 stable on x86.

Comment 2 Ryan Grange 2005-03-03 20:01:37 UTC

That's the kind of warning we need before actually emerging this stuff.  My wife's been without her email all day.  I had cleartext passwords for local network via IMAP and outside access via IMAPS through XINETD.

Comment 3 Ryan Grange 2005-03-03 20:15:43 UTC

Figures I'd speak too soon.  Just recompiled with the new use flag and there was the warning at the beginning of the compile.  That's what I get for doing the upgrade earlier without sitting there to watch everything compile.  (Then again, how many people outside developers babysit their compiles?)

Comment 4 Tuan Van (RETIRED) gentoo-dev

2005-03-03 20:30:48 UTC

yep, lession learned ;) DO NOT blinly upgrade *server* packages without read ChangeLog. Don't do the update until you are ready. And read message info at the begining/end of an ebuild. We do our part, you need to do yours, yes?

Tip: man make.conf, search for PORT_LOGDIR. There are two logs per package. One is full log, the other is just einfo/ewarn.

Comment 5 Paul Forgey 2005-03-03 20:46:39 UTC

Well, it got me because I had to restart the emerge --update to fix a libtool f-up and forgot to read or save /var/log/emerge.log first.

Anyway, with that use flag things work, and this bug can be closed.

. LOGIN user pass
. OK

Makes me feel better I wasn't the only one who didn't RT the right Ms