Package: offlineimap
Version: 6.6.1+dfsg1-1
Severity: important
Hi,
the recent upgrade broke Kerberos authentication like:
GSSAPI authentication failed: AUTHENTICATE command error: BAD ['Authentication
aborted by client.']. Data: IDBA2 AUTHENTICATE GSSAPI
ERROR: ERROR in syncfolder for honk.sigxcpu.org folder admin.spam: Traceback
(most recent call last):
File "/usr/share/offlineimap/offlineimap/accounts.py", line 561, in syncfolder
check_uid_validity(localfolder, remotefolder, statusfolder)
File "/usr/share/offlineimap/offlineimap/accounts.py", line 417, in
check_uid_validity
if not remotefolder.check_uidvalidity():
File "/usr/share/offlineimap/offlineimap/folder/Base.py", line 207, in
check_uidvalidity
return self.get_saveduidvalidity() == self.get_uidvalidity()
File "/usr/share/offlineimap/offlineimap/folder/IMAP.py", line 103, in
get_uidvalidity
imapobj = self.imapserver.acquireconnection()
File "/usr/share/offlineimap/offlineimap/imapserver.py", line 495, in
acquireconnection
self.__authn_helper(imapobj)
File "/usr/share/offlineimap/offlineimap/imapserver.py", line 397, in
__authn_helper
if func(imapobj):
File "/usr/share/offlineimap/offlineimap/imapserver.py", line 321, in
__authn_plain
imapobj.authenticate('PLAIN', self.__plainhandler)
File "/usr/lib/python2.7/dist-packages/imaplib2.py", line 705, in authenticate
typ, dat = self._simple_command('AUTHENTICATE', mechanism.upper())
File "/usr/lib/python2.7/dist-packages/imaplib2.py", line 1695, in
_simple_command
return self._command_complete(self._command(name, *args), kw)
File "/usr/lib/python2.7/dist-packages/imaplib2.py", line 1421, in _command
literal = literator(data, rqb)
File "/usr/lib/python2.7/dist-packages/imaplib2.py", line 2286, in process
ret = self.mech(self.decode(data))
File "/usr/share/offlineimap/offlineimap/imapserver.py", line 203, in
__plainhandler
passwd = self.__getpassword()
File "/usr/share/offlineimap/offlineimap/imapserver.py", line 153, in
__getpassword
self.passworderror)
File "/usr/share/offlineimap/offlineimap/ui/UIBase.py", line 257, in getpass
raise NotImplementedError("Prompting for a password is not supported"
NotImplementedError: Prompting for a password is not supported in this UI
backend.
The upgrade was from version 6.3.4-1. Downgrading to 6.3.4 (and wiping
the LocalStatus/* files due to changed cache format) makes
GSSAPI/Kerberos auth work again.
I have not checked what code change could have triggered this but can
provide further input if needed.
Cheers,
-- Guido
-- System Information:
Debian Release: stretch/sid
APT prefers testing
APT policy: (990, 'testing'), (500, 'stable-updates'), (500, 'unstable'),
(500, 'stable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 4.1.0-2-amd64 (SMP w/4 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages offlineimap depends on:
ii python-imaplib2 2.53-1
pn python:any <none>
Versions of packages offlineimap recommends:
ii python-pysocks 1.5.0-2
Versions of packages offlineimap suggests:
pn doc-base <none>
ii python-kerberos 1.1.5-2+b1
-- no debconf information
