Bug 2374419 - GSSAPI broken with dovecot 2.4.1
Summary: GSSAPI broken with dovecot 2.4.1
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: dovecot
Version: 43
Hardware: x86_64
OS: Linux
unspecified
medium
Target Milestone: ---
Assignee: Michal Hlavinka
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2025-06-23 22:00 UTC by Bojan Smojver
Modified: 2025-06-24 13:26 UTC (History)
3 users (show)

Fixed In Version: dovecot-2.4.1-2.fc43
Clone Of:
Environment:
Last Closed: 2025-06-24 13:26:03 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)

Description Bojan Smojver 2025-06-23 22:00:04 UTC
Built this for F42 to test it:

https://copr.fedorainfracloud.org/coprs/bojan/dovecot2.4/build/9197861/

After adjusting 2.3 configuration to 2.4 syntax, I'm getting:

gssapi: While processing i
ncoming data: Invalid token was supplied

A similar problem was reported in Debian:

https://linux.debian.bugs.dist.narkive.com/cmR3jUf7/bug-1104411-gsasl-autopkgtests-fail-with-dovecot-2-4

I have to research this a bit more, but it appears Debian folks patched this. So, I'll try another build in foot, once I locate the patch.

This bug is just a placeholder for now.

Reproducible: Always

Steps to Reproduce:
1. Upgrade to dovecot 2.4.1.
2. Authenticate with GSSAPI.
3. Fails.
Actual Results:
Cannot authenticate.

Expected Results:
Works with 2.3.x.

Comment 1 Bojan Smojver 2025-06-23 22:01:00 UTC
Foot --> copr. Autocorrect. 😁

Comment 2 Michal Hlavinka 2025-06-23 22:20:46 UTC
I've found only one gssapi issue mentioned on dovecot ML and there was a patch for it. I've added it into package and prepared a test build, so give it a try and let me know if it fixed the problem for you.
https://koji.fedoraproject.org/koji/taskinfo?taskID=134338164 (build not finished as of now, but should complete in a few minutes)

Comment 3 Bojan Smojver 2025-06-24 08:28:35 UTC
I did a rebuild of your SRPM for F42 here:

https://copr.fedorainfracloud.org/coprs/bojan/dovecot2.4/build/9203054/

That's the fix - thank you!

Comment 4 Bojan Smojver 2025-06-24 08:34:03 UTC
BTW, this version requires on my F42 machine:

setsebool -P domain_can_mmap_files=1

Just FYI for anyone that may bump into the same thing.

Comment 5 Michal Hlavinka 2025-06-24 08:40:19 UTC
thanks for testing

fyi, selinux will need some changes, it's tracked as bug #2370124

Comment 6 Fedora Update System 2025-06-24 13:16:20 UTC
FEDORA-2025-b62672758f (dovecot-2.4.1-2.fc43) has been submitted as an update to Fedora 43.
https://bodhi.fedoraproject.org/updates/FEDORA-2025-b62672758f

Comment 7 Fedora Update System 2025-06-24 13:26:03 UTC
FEDORA-2025-b62672758f (dovecot-2.4.1-2.fc43) has been pushed to the Fedora 43 stable repository.
If problem still persists, please make note of it in this bug report.


Note You need to log in before you can comment on or make changes to this bug.