dovecot - Aug 2020 - Bug: GSSAPI: Unexpected NUL in auth data

Hi,

After upgrading server to v2.3.11.3 (Arch linux). I can no
longer connect from Evolution client to the server via GSSAPI
(Kerberos). I get the following message in the log:

	auth: Debug: gssapi(?,x.x.x.x,<XXX>): Unexpected NUL in auth
data

The bug appears to have been introduced by this patch:

https://github.com/dovecot/core/commit/d196f4c83c7383c17440d39eb994b4cd9ff5af52

Should mech_gssapi also have the MECH_SEC_ALLOW_NULS flag set?

Kind regards,

Paul

> On 16/08/2020 11:52 Paul Banks <com-dovecot at paulbanks.org> wrote:
> 
>  
> Hi,
> 
> After upgrading server to v2.3.11.3 (Arch linux). I can no
> longer connect from Evolution client to the server via GSSAPI
> (Kerberos). I get the following message in the log:
> 
> 	auth: Debug: gssapi(?,x.x.x.x,<XXX>): Unexpected NUL in auth
> data
> 
> The bug appears to have been introduced by this patch:
> 
>
https://github.com/dovecot/core/commit/d196f4c83c7383c17440d39eb994b4cd9ff5af52
> 
> Should mech_gssapi also have the MECH_SEC_ALLOW_NULS flag set?
> 
> Kind regards,
> 
> Paul
Hi!

So it would seem, can you try adding it?

Aki

Flag added, build checks pass, issue is fixed for me.

Pull request is here:

https://github.com/dovecot/core/pull/133

Paul

-----Original Message-----
From: Aki Tuomi <aki.tuomi at open-xchange.com>
To: Dovecot Mailing List <dovecot at dovecot.org>, Paul Banks <
com-dovecot at paulbanks.org>
Subject: Re: Bug: GSSAPI: Unexpected NUL in auth data
Date: Sun, 16 Aug 2020 12:09:25 +0300 (EEST)


Hi!

So it would seem, can you try adding it?

Aki