Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 862483 - mail-mta/sendmail: not compatible with dev-libs/cyrus-sasl
Summary: mail-mta/sendmail: not compatible with dev-libs/cyrus-sasl
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All Linux
: Normal major with 1 vote (vote)
Assignee: No maintainer - Look at https://wiki.gentoo.org/wiki/Project:Proxy_Maintainers if you want to take care of it
URL: https://bugs.freebsd.org/bugzilla/sho...
Whiteboard:
Keywords:
Depends on: 866247
Blocks:
  Show dependency tree
 
Reported: 2022-07-31 07:43 UTC by J.O. Aho
Modified: 2022-08-24 00:54 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description J.O. Aho 2022-07-31 07:43:44 UTC
The cyrus-sasl 2.1.28 ain't compatible with sendmail before version 8.17.1.9, the changes causes sendmail to fail with authentication.

We would need to bump the version of sendmail to 8.17.1.9 (just copy the current 8.17.1 ebuild is enough). 

Reproducible: Always

Steps to Reproduce:
1. emerge cyrus-sasl sendmail
2. setup sendmail with saslauth and TLS/SSL or STARTTLS support
3. try to send mail
Actual Results:  
sm-mta[9044]: STARTTLS=server, error: accept failed=-1, reason=session id context uninitialized, SSL_error=1, errno=0, retry=-1, relay=localhost [127.0.0.1]
26ULxWDF009044: localhost [127.0.0.1] did not issue MAIL/EXPN/VRFY/ETRN during connection to TLSMTA

Expected Results:  
sm-mta[4402]: STARTTLS=server, relay=localhost [127.0.0.1], version=TLSv1.3, verify=NO, cipher=TLS_AES_256_GCM_SHA384, bits=256/256
sm-mta[4402]: AUTH=server, relay=localhost [127.0.0.1], authid=user@localhost.localdomaink, mech=PLAIN, bits=0
sm-mta[4402]: 26UMfJES004402: from=<user@localhost.localdomain>, size=762, class=0, nrcpts=1, msgid=<b9ba9270-c43f-e21a-8be4-417bd62e7b18@localhost.localdomain>, bodytype=8BITMIME, proto=ESMTPSA, daemon=TLSMTA, relay=localhost [127.0.0.1]

emerge -pv sendmail cyrus-sasl:
[ebuild   R    ] mail-mta/sendmail-8.17.1-r2::gentoo USE="ipv6 sasl ssl -ldap -mbox -nis -sockets -tcpd" 0 KiB
[ebuild   R    ] dev-libs/cyrus-sasl-2.1.28-r2:2::gentoo  USE="authdaemond pam srp ssl urandom -berkdb -gdbm -kerberos -ldapdb -mysql -openldap -postgres -sample (-selinux) -sqlite -static-libs" 0 KiB

# cat /etc/sasl2/Sendmail.conf
pwcheck_method: saslauthd
mech_list: login plain 
allow_plaintext: true
log_level: 7


From /etc/mail/sendmail.mc
define(`confAUTH_OPTIONS', `A p y')dnl
TRUST_AUTH_MECH(`EXTERNAL GSSAPI DIGEST-MD5 CRAM-MD5 LOGIN PLAIN')dnl
define(`confAUTH_MECHANISMS', `EXTERNAL GSSAPI DIGEST-MD5 CRAM-MD5 LOGIN PLAIN')dnl
DAEMON_OPTIONS(`Port=submission, Name=MSA, M=Ea')dnl
DAEMON_OPTIONS(`Port=smtps, Name=TLSMTA, M=sa')dnl
Comment 1 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2022-07-31 07:44:37 UTC
Thanks for the report!

Is 8.17.1-r3 not sufficient (see bug 859172)? Anyway, happy to do the bump anyway, so I'll do that now.
Comment 2 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2022-07-31 07:59:49 UTC
I don't see any such version upstream.

```
~/g/mail-mta/sendmail $ cp sendmail-8.17.1-r3.ebuild sendmail-8.17.1.9.ebuild
~/g/mail-mta/sendmail $ pkgdev manifest
--2022-07-31 08:57:38--  ftp://ftp.sendmail.org/pub/sendmail/sendmail.8.17.1.9.tar.gz
           => '/var/cache/distfiles/sendmail.8.17.1.9.tar.gz'
Resolving ftp.sendmail.org... 50.19.116.123, 2600:1f18:677f:2e00::112
Connecting to ftp.sendmail.org|50.19.116.123|:21... connected.
Logging in as anonymous ... Logged in!
==> SYST ... done.    ==> PWD ... done.
==> TYPE I ... done.  ==> CWD (1) /pub/sendmail ... done.
==> SIZE sendmail.8.17.1.9.tar.gz ... done.

==> PASV ... done.    ==> RETR sendmail.8.17.1.9.tar.gz ...
No such file 'sendmail.8.17.1.9.tar.gz'.

 * failed fetching files: mail-mta/sendmail-8.17.1.9::gentoo
pkgdev manifest: error: failed build operation: failed fetching required distfiles
```
Comment 3 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2022-07-31 08:00:46 UTC
Ah, it's a snapshot. I don't see how directly copying the ebuild would work then. Anyway, I'll add it.
Comment 4 Larry the Git Cow gentoo-dev 2022-07-31 08:27:30 UTC
The bug has been closed via the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=3cf871b83a3e5cd324d94420999fb6aa38179b9e

commit 3cf871b83a3e5cd324d94420999fb6aa38179b9e
Author:     Sam James <sam@gentoo.org>
AuthorDate: 2022-07-31 08:25:09 +0000
Commit:     Sam James <sam@gentoo.org>
CommitDate: 2022-07-31 08:25:24 +0000

    mail-filter/libmilter: add 1.0.2_p3
    
    Closes: https://bugs.gentoo.org/862483
    Bug: https://bugs.gentoo.org/859172
    Signed-off-by: Sam James <sam@gentoo.org>

 mail-filter/libmilter/Manifest                  |   1 +
 mail-filter/libmilter/libmilter-1.0.2_p3.ebuild | 130 ++++++++++++++++++++++++
 2 files changed, 131 insertions(+)

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=00e1964a4aab5b042c5778551e9954c0e6e6ea62

commit 00e1964a4aab5b042c5778551e9954c0e6e6ea62
Author:     Sam James <sam@gentoo.org>
AuthorDate: 2022-07-31 08:04:44 +0000
Commit:     Sam James <sam@gentoo.org>
CommitDate: 2022-07-31 08:25:23 +0000

    mail-mta/sendmail: add 8.17.1.9
    
    Closes: https://bugs.gentoo.org/862483
    Bug: https://bugs.gentoo.org/859172
    Signed-off-by: Sam James <sam@gentoo.org>

 mail-mta/sendmail/Manifest                 |   1 +
 mail-mta/sendmail/sendmail-8.17.1.9.ebuild | 217 +++++++++++++++++++++++++++++
 2 files changed, 218 insertions(+)
Comment 5 J.O. Aho 2022-07-31 09:32:04 UTC
@Sam James
Sorry, I had the snapshot already downloaded among my distfiles, so the source path would be wrong, my bad.

https://ftp.sendmail.org/snapshots/sendmail.8.17.1.9.tar.gz
https://ftp.sendmail.org/snapshots/sendmail.8.17.1.9.tar.gz.sig


@Larry the Git Cow
Nice, then I can clean out my local repository.
Comment 6 Sam James archtester Gentoo Infrastructure gentoo-dev Security 2022-08-24 00:54:23 UTC
(In reply to J.O. Aho from comment #5)
> @Sam James
> Sorry, I had the snapshot already downloaded among my distfiles, so the
> source path would be wrong, my bad.
> 
> https://ftp.sendmail.org/snapshots/sendmail.8.17.1.9.tar.gz
> https://ftp.sendmail.org/snapshots/sendmail.8.17.1.9.tar.gz.sig
> 
> 
> @Larry the Git Cow
> Nice, then I can clean out my local repository.

No problem! Although Larry was just relaying my commits :)

glad all is ok now!