Bug 1256276

Summary: curl: imap GSSAPI authentication does not work
Product: [Fedora] Fedora Reporter: Tomas Hoger <thoger>
Component: curlAssignee: Kamil Dudka <kdudka>
Status: CLOSED NEXTRELEASE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 22CC: kdudka, paul
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: 7.40.0-6.fc22 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2015-09-10 20:21:34 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Tomas Hoger 2015-08-24 09:06:25 UTC 
Description of problem:

An attempt to authenticate to an IMAP server using GSSAPI fails with "Unexpected continuation response".  Verbose mode output suggests curl is unable to handle server response to the AUTHENTICATE GSSAPI:

$ curl -v --negotiate --user : 'imaps://imap.server/'
...
< * OK IMAP4 ready
> A001 CAPABILITY
< * CAPABILITY ACL BINARY CATENATE CHILDREN CONDSTORE ENABLE ESEARCH ID IDLE IMAP4rev1 LIST-EXTENDED LITERAL+ MULTIAPPEND NAMESPACE QUOTA RIGHTS=ektx SASL-IR SEARCHRES UIDPLUS UNSELECT WITHIN ESORT I18NLEVEL=1 SORT THREAD=ORDEREDSUBJECT LIST-STATUS XLIST AUTH=PLAIN AUTH=GSSAPI
< A001 OK completed
> A002 AUTHENTICATE GSSAPI <<base64 encoded authentication data>>
< + <<base64 encoded data from server>>
* Unexpected continuation response
* Closing connection 0
curl: (8) Unexpected continuation response

curl may be expecting response starting with A002 when it receives a response starting with +.
Comment 1 Kamil Dudka 2015-08-24 17:25:58 UTC 
upstream commits:

https://github.com/bagder/curl/commit/5f09cbcd
https://github.com/bagder/curl/commit/e1ea18f9
https://github.com/bagder/curl/commit/79543caf
Comment 2 Fedora Update System 2015-08-24 18:17:33 UTC 
curl-7.40.0-6.fc22 has been submitted as an update to Fedora 22. https://bodhi.fedoraproject.org/updates/FEDORA-2015-14145
Comment 3 Fedora Update System 2015-08-24 21:54:05 UTC 
curl-7.40.0-6.fc22 has been pushed to the Fedora 22 testing repository. If problems still persist, please make note of it in this bug report.\nIf you want to test the update, you can install it with \n su -c 'yum --enablerepo=updates-testing update curl'. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2015-14145
Comment 4 Fedora Update System 2015-09-10 20:21:31 UTC 
curl-7.40.0-6.fc22 has been pushed to the Fedora 22 stable repository. If problems still persist, please make note of it in this bug report.