[Dovecot] GSSAPI Authentication Broke with Dovecot 1.1.16 -> 1.2.4 Upgrade

[John Marshall]

On Fri, 28 Aug 2009, 13:38 -0400, Timo Sirainen wrote:
> On Fri, 2009-08-28 at 15:20 +1000, John Marshall wrote:
> > This morning I upgraded a dovecot installation from 1.1.16 to 1.2.4 on a
> > FreeBSD 7.2 server, and then spent 3 hours trying to figure out why
> > GSSAPI authentication had broken.
> > 
> > It turned out to be a recent change in Dovecot's mech-gssapi.c to do
> > with checking for NULs in usernames: everything worked fine when I
> > disabled that test.
> 
> What exactly is the username? What does it say with the attached patch?
> 

Thank you.

It looks like the test is picking up the string terminator.

auth(default): gssapi(john at MBY.RIVERWILLOW.NET.AU,192.0.2.168): authz_name has NULs: 6a6f686e404d42592e524956455257494c4c4f572e4e45542e415500

-- 
John Marshall
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 196 bytes
Desc: not available
Url : http://dovecot.org/pipermail/dovecot/attachments/20090829/f6240bf0/attachment.bin