I started experiencing this bug after upgrading my Jabber server (running ejabberd) to Debian wheezy. Someone created an associated bug report which can be found at <http://bugs.debian.org/cgi- bin/bugreport.cgi?bug=654853>.
I also started to experience this bug on a different machine (previously not experiencing it there, even after the server upgrade) after upgrading it to Fedora 19. The Fedora people have fixed this bug (bug report at <https://bugzilla.redhat.com/show_bug.cgi?id=979052>) by explicitly adding a dependency on the cyrus-sasl-scram library (see <http://pkgs.fedoraproject.org/cgit/pidgin.git/commit/?id=a3d3522983ef0633e960dcaefa1973c8667eb2ea>). I can confirm that this fix works for me: the pidgin SASL module will prefer SCRAM-SHA1 over DIGEST-MD5 and pidgin authenticates successfully. While this probably doesn't address the underlying bug (possibly in ejabberd) maybe Ubuntu can also ship the appropriate libraries for SCRAM-SHA1 support in SASL and fix user experience in this way. ** Bug watch added: Debian Bug tracker #654853 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=654853 ** Bug watch added: Red Hat Bugzilla #979052 https://bugzilla.redhat.com/show_bug.cgi?id=979052 -- You received this bug notification because you are a member of Desktop Packages, which is subscribed to pidgin in Ubuntu. https://bugs.launchpad.net/bugs/993989 Title: can't connect to Jabber account Status in “pidgin” package in Ubuntu: Confirmed Bug description: Since updating to Ubuntu Precise (before, I hand Lucid) Pidgin won't connect to my Jabber account. It gets deactivated with the message "Not authorized", no further messages. It happens regardless of whether I use my old configuration or move the whole .purple folder and set the account up afresh. However, it works with (e.g.) Gajim, and even with Pidgin on Windows (2.10.3, the same version), so this is almost definitely a Pidgin problem. Here is the (hopefully) relevant (and slightly censored) output of `pidgin --debug`: (15:39:09) account: Connecting to account LOGIN@SERVER/Home. (15:39:09) connection: Connecting. gc = 0x7ffd53fa2a10 (15:39:09) util: Writing file ~/.purple/icons/7661745cff2f4fd50e2859c6b3b3e3b844f0412c.png (15:39:09) dnssrv: querying SRV record for SERVER: _xmpp-client._tcp.SERVER (15:39:09) dnssrv: found 1 SRV entries (15:39:09) dnsquery: Performing DNS lookup for HOST (15:39:09) dns: Created new DNS child 11371, there are now 1 children. (15:39:09) dns: Successfully sent DNS request to child 11371 (15:39:09) dns: Got response for 'HOST' (15:39:09) dnsquery: IP resolved for HOST (15:39:09) proxy: Attempting connection to 128.130.95.20 (15:39:09) proxy: Connecting to HOST:5222 with no proxy (15:39:09) proxy: Connection in progress (15:39:09) proxy: Connecting to HOST:5222. (15:39:09) proxy: Connected to HOST:5222. (15:39:09) jabber: Sending (LOGIN@SERVER/Home): <?xml version='1.0' ?> (15:39:09) jabber: Sending (LOGIN@SERVER/Home): <stream:stream to='SERVER' xmlns='jabber:client' xmlns:stream='http://etherx.jabber.org/streams' version='1.0'> (15:39:09) jabber: Recv (173): <?xml version='1.0'?><stream:stream xmlns='jabber:client' xmlns:stream='http://etherx.jabber.org/streams' id='1346731435' from='SERVER' version='1.0' xml:lang='en'> (15:39:09) jabber: Recv (536): <stream:features><starttls xmlns='urn:ietf:params:xml:ns:xmpp-tls'/><compression xmlns='http://jabber.org/features/compress'><method>zlib</method></compression><mechanisms xmlns='urn:ietf:params:xml:ns:xmpp-sasl'><mechanism>SCRAM-SHA-1</mechanism><mechanism>DIGEST-MD5</mechanism><mechanism>PLAIN</mechanism></mechanisms><c xmlns='http://jabber.org/protocol/caps' hash='sha-1' node='http://www.process-one.net/en/ejabberd/' ver='———'/><register xmlns='http://jabber.org/features/iq-register'/></stream:features> (15:39:09) jabber: Sending (LOGIN@SERVER/Home): <starttls xmlns='urn:ietf:params:xml:ns:xmpp-tls'/> (15:39:09) jabber: Recv (50): <proceed xmlns='urn:ietf:params:xml:ns:xmpp-tls'/> … (15:39:09) certificate/x509/tls_cached: Starting verify for SERVER (15:39:09) certificate/x509/tls_cached: Checking for cached cert... (15:39:09) certificate/x509/tls_cached: ...Found cached cert (15:39:09) nss/x509: Loading certificate from ~/.purple/certificates/x509/tls_peers/SERVER (15:39:09) certificate/x509/tls_cached: Peer cert matched cached (15:39:09) nss/x509: Exporting certificate to ~/.purple/certificates/x509/tls_peers/SERVER (15:39:09) util: Writing file ~/.purple/certificates/x509/tls_peers/SERVER (15:39:09) certificate: Successfully verified certificate for SERVER (15:39:09) jabber: Sending (ssl) (LOGIN@SERVER/Home): <stream:stream to='SERVER' xmlns='jabber:client' xmlns:stream='http://etherx.jabber.org/streams' version='1.0'> (15:39:09) jabber: Recv (ssl)(173): <?xml version='1.0'?><stream:stream xmlns='jabber:client' xmlns:stream='http://etherx.jabber.org/streams' id='2292024795' from='SERVER' version='1.0' xml:lang='en'> (15:39:09) jabber: Recv (ssl)(485): <stream:features><compression xmlns='http://jabber.org/features/compress'><method>zlib</method></compression><mechanisms xmlns='urn:ietf:params:xml:ns:xmpp-sasl'><mechanism>SCRAM-SHA-1</mechanism><mechanism>DIGEST-MD5</mechanism><mechanism>PLAIN</mechanism></mechanisms><c xmlns='http://jabber.org/protocol/caps' hash='sha-1' node='http://www.process-one.net/en/ejabberd/' ver='iuv1wp1cS6sjN8DwA1g+KZMr/14='/><register xmlns='http://jabber.org/features/iq-register'/></stream:features> (15:39:09) sasl: Mechs found: SCRAM-SHA-1 DIGEST-MD5 PLAIN (15:39:09) jabber: Sending (ssl) (LOGIN@SERVER/Home): <auth xmlns='urn:ietf:params:xml:ns:xmpp-sasl' mechanism='DIGEST-MD5' xmlns:ga='http://www.google.com/talk/protocol/auth' ga:client-uses-full-bind-result='true'/> (15:39:09) jabber: Recv (ssl)(148): <challenge xmlns='urn:ietf:params:xml:ns:xmpp-sasl'>———</challenge> (15:39:09) sasl: DIGEST-MD5 client step 2 (15:39:09) sasl: DIGEST-MD5 parse_server_challenge() (15:39:09) sasl: DIGEST-MD5 ask_user_info() (15:39:09) sasl: DIGEST-MD5 make_client_response() (15:39:09) jabber: Sending (ssl) (LOGIN@SERVER/Home): <response xmlns='urn:ietf:params:xml:ns:xmpp-sasl'>———</response> (15:39:09) jabber: Recv (ssl)(77): <failure xmlns='urn:ietf:params:xml:ns:xmpp-sasl'><not-authorized/></failure> (15:39:09) sasl: DIGEST-MD5 client mech dispose (15:39:09) sasl: DIGEST-MD5 common mech dispose (15:39:09) sasl: Mechs found: SCRAM-SHA-1 PLAIN (15:39:09) sasl: No worthy mechs found (15:39:09) connection: Connection error on 0x7ffd53fa2a10 (reason: 2 description: Nicht autorisiert) (15:39:09) account: Disconnecting account LOGIN@SERVER/Home (0x7ffd53acab90) (15:39:09) connection: Disconnecting connection 0x7ffd53fa2a10 (15:39:09) jabber: Sending (ssl) (LOGIN@SERVER/Home): </stream:stream> (15:39:09) connection: Destroying connection 0x7ffd53fa2a10 ProblemType: Bug DistroRelease: Ubuntu 12.04 Package: pidgin 1:2.10.3-0ubuntu1 ProcVersionSignature: Ubuntu 3.2.0-24.37-generic 3.2.14 Uname: Linux 3.2.0-24-generic x86_64 NonfreeKernelModules: fglrx ApportVersion: 2.0.1-0ubuntu7 Architecture: amd64 Date: Thu May 3 15:33:14 2012 InstallationMedia: Ubuntu 12.04 LTS "Precise Pangolin" - Release amd64 (20120425) ProcEnviron: TERM=xterm PATH=(custom, user) LANG=de_DE.UTF-8 SHELL=/bin/bash SourcePackage: pidgin UpgradeStatus: No upgrade log present (probably fresh install) To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/pidgin/+bug/993989/+subscriptions -- Mailing list: https://launchpad.net/~desktop-packages Post to : [email protected] Unsubscribe : https://launchpad.net/~desktop-packages More help : https://help.launchpad.net/ListHelp
