Bug 1036818

Summary: saslauthd does not create kerberos ticket for imap
Product: Red Hat Enterprise Linux 7 Reporter: David Spurek <dspurek>
Component: cyrus-saslAssignee: Petr Lautrbach <plautrba>
Status: CLOSED NOTABUG QA Contact: BaseOS QE Security Team <qe-baseos-security>
Severity: medium Docs Contact:
Priority: low    
Version: 7.0CC: dspurek, ebenes, kvolny, pvrabec
Target Milestone: rcKeywords: Reopened
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: 860737 Environment:
Last Closed: 2014-02-05 15:20:52 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Bug Depends On: 506709, 860737    
Bug Blocks:    

Comment 1 David Spurek 2013-12-02 16:52:18 UTC 
The same issue for rhel7.

cyrus-sasl-2.1.26-13.el7
cyrus-imapd-2.4.17-5.el7
krb5-server-1.11.3-34.el7
Comment 3 Petr Lautrbach 2014-02-05 15:20:52 UTC 
Only FAIL I can see running the reproducer test is in:

    rlPhaseStartTest "Try imtest with gssapi without running kinit"
        rlIsRHEL 5 && rlRun "klist -5" 0
        rlIsRHEL '>=6' && rlRun "klist" 0
        echo "" > /var/log/imapd.log
        rlRun "do_imtest" 0
        rlRun "cat /var/log/imapd.log"
        rlIsRHEL 5 && rlRun "cat /var/log/imapd.log | grep imtest | grep \"GSSAPI Error\" | grep \"No credentials cache found\"" 1
        rlIsRHEL '>=6' && rlRun "cat /var/log/imapd.log | grep imtest | grep \"GSSAPI Error\" | grep \"Credentials cache file '/tmp/krb5cc_0' not found\"" 1
    rlPhaseEnd

This code seems to be completely wrong. You expect klist to return 0 when there's no kerberos ticket created yet. Please fix it. I'm closing this as NOTABUG now, but if you find a better reproducer, feel free to reopen it.