Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!

Bug 84025

Summary: uw-imap 2004c-r3 fails to authenticate users
Product: Gentoo Linux Reporter: Paul Forgey <paulf>
Component: [OLD] ServerAssignee: Net-Mail Packages <net-mail+disabled>
Status: RESOLVED INVALID    
Severity: major    
Priority: High    
Version: unspecified   
Hardware: x86   
OS: Linux   
Whiteboard:
Package list:
Runtime testing required: ---

Description Paul Forgey 2005-03-03 17:54:48 UTC
imap login command fails with "LOGIN failed", pop3 user command fails with "-ERR Unknown AUTHORIZATION state command".  imap will log the account is disabled.

Does this for all accounts.  Authorization works just fine if the connection is SSL.

Reproducible: Always
Steps to Reproduce:
1. emerge uw-imap (current version 2004c-r3)
2. do usualy prereq of enabling the service in xinetd
3. attempt to login with a mail client or speak the protocol using telnet
Actual Results:  
login fails


This looks like a regression of closed bug 21523

Gentoo Base System version 1.4.16
Portage 2.0.51.19 (default-linux/x86/2004.0, gcc-3.3.5, glibc-2.3.4.20040808-r1, 2.4.28-gentoo-r7 
i686)
===============================================================
==
System uname: 2.4.28-gentoo-r7 i686 Pentium III (Coppermine)
Python:              dev-lang/python-2.2.3-r5,dev-lang/python-2.3.4-r1 [2.3.4 (#1, Feb 11 2005, 03:12:
29)]
distcc 2.16 i686-pc-linux-gnu (protocols 1 and 2) (default port 3632) [enabled]
dev-lang/python:     2.2.3-r5, 2.3.4-r1
sys-devel/autoconf:  2.13, 2.59-r6
sys-devel/automake:  1.7.9-r1, 1.5, 1.4_p6, 1.6.3, 1.9.4, 1.8.5-r3
sys-devel/binutils:  2.15.92.0.2-r1
sys-devel/libtool:   1.5.10-r4
virtual/os-headers:  2.4.19-r1, 2.4.22-r1
ACCEPT_KEYWORDS="x86"
AUTOCLEAN="yes"
CFLAGS="-O3 -mcpu=pentium3 -funroll-loops -pipe"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/kde/2/share/config /usr/kde/3.3/env /usr/kde/3.3/share/config /usr/
kde/3.3/shutdown /usr/kde/3/share/config /usr/lib/X11/xkb /usr/share/config /var/bind /var/
qmail/control"
CONFIG_PROTECT_MASK="/etc/gconf /etc/terminfo /etc/env.d"
CXXFLAGS="-O3 -mcpu=pentium3 -funroll-loops -pipe"
DISTDIR="/usr/portage/distfiles"
FEATURES="autoaddcvs autoconfig ccache distcc distlocks sandbox sfperms"
GENTOO_MIRRORS="http://distfiles.gentoo.org http://distro.ibiblio.org/pub/Linux/distributions/
gentoo"
MAKEOPTS="-j6"
PKGDIR="/usr/portage/packages"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
SYNC="rsync://rsync.gentoo.org/gentoo-portage"
USE="x86 apache2 apm arts avi berkdb bitmap-fonts crypt cups curl emboss encode f77 font-server 
foomaticdb fortran gif gpm imap imlib ipv6 java jpeg libg++ libwww mad mbox mcal mikmod milter 
motif mpeg mysql ncurses nls oggvorbis opengl oss pam pdflib perl png python quicktime readline sasl 
sdl session slang spell ssl svga tcltk tcpd tiff truetype truetype-fonts type1-fonts xml2 xmms xv zlib"
Unset:  ASFLAGS, CBUILD, CTARGET, LANG, LC_ALL, LDFLAGS, PORTDIR_OVERLAY
Comment 1 Tuan Van (RETIRED) gentoo-dev 2005-03-03 19:40:57 UTC
Not A Bug. From ChangeLog:
*uw-imap-2004c-r3 (03 Mar 2005)

  03 Mar 2005; Andrej Kacian <ticho@gentoo.org> uw-imap-2004c-r1.ebuild,
  +uw-imap-2004c-r3.ebuild:
  Revision bump to restrict cleartext LOGIN to SSL/TLS sessions by default.
  Introduced "clearpasswd" USE flag to toggle this restriction. Suggested by
  Tero Pelander <tpeland@tkukoulu.fi> in bug #83797. 2004c-r1 stable on x86.
Comment 2 Ryan Grange 2005-03-03 20:01:37 UTC
That's the kind of warning we need before actually emerging this stuff.  My wife's been without her email all day.  I had cleartext passwords for local network via IMAP and outside access via IMAPS through XINETD.
Comment 3 Ryan Grange 2005-03-03 20:15:43 UTC
Figures I'd speak too soon.  Just recompiled with the new use flag and there was the warning at the beginning of the compile.  That's what I get for doing the upgrade earlier without sitting there to watch everything compile.  (Then again, how many people outside developers babysit their compiles?)
Comment 4 Tuan Van (RETIRED) gentoo-dev 2005-03-03 20:30:48 UTC
yep, lession learned ;) DO NOT blinly upgrade *server* packages without read ChangeLog. Don't do the update until you are ready. And read message info at the begining/end of an ebuild. We do our part, you need to do yours, yes?

Tip: man make.conf, search for PORT_LOGDIR. There are two logs per package. One is full log, the other is just einfo/ewarn.
Comment 5 Paul Forgey 2005-03-03 20:46:39 UTC
Well, it got me because I had to restart the emerge --update to fix a libtool f-up and forgot to read or save /var/log/emerge.log first.

Anyway, with that use flag things work, and this bug can be closed.

. LOGIN user pass
. OK

Makes me feel better I wasn't the only one who didn't RT the right Ms