Package: pidgin-sipe Version: 1.13.3-1 Severity: normal Dear Maintainer,
I use pidgin-sipe to connect to ocr2007 using kerberos. Since this week something changed in the set of libraries which made pidgin-sipe stop working. The error I got was this: GSS-API error in gss_init_sec_context (GSS): Unspecified GSS failure. Minor code may provide more information GSS-API error in gss_init_sec_context (Mech): No such file or directory ERROR: sip_sec_init_sec_context__krb5: failed to initialize context. ret=851968 This occurs right after the first response from the server on the "Event: registration" which returns a 401 Unauthorized and indication that the authentication should be done with kerberos. This is the normal flow and happens always, also when you can connect. The logs are: (18:31:38) sipe: process_input_message: msg->response(401),msg->method(REGISTER) (18:31:38) sipe: process_input_message: RE-REGISTER CSeq: 1 (18:31:38) sipe: process_input_message: we have a transaction callback (18:31:38) sipe: process_register_response: got response to REGISTER; expires = 0 (18:31:38) sipe: process_register_response: REGISTER retries 1 (18:31:38) sipe: process_register_response: Auth header: Kerberos realm="SIP Communications Service", targetname="sip/some.server.name.intranet", version=4 (18:31:38) stun: using server (18:31:38) stun: using server GSS-API error in gss_init_sec_context (GSS): Unspecified GSS failure. Minor code may provide more information GSS-API error in gss_init_sec_context (Mech): No such file or directory ERROR: sip_sec_init_sec_context__krb5: failed to initialize context. ret=851968 (18:31:38) connection: Connection error on 0x7f3f2def0860 (reason: 2 description: Failed to authenticate to server) I've made a small program to trace what is wrong and found out that a file called /etc/mdns.allow is required for this to work and which is mssing. In here you need to specify all other servers that do not end in .local to allow to call the service. Please add this file, or test for this file to be present during install and mention you need this in case the domain is not ending in .local. I am not sure if this is a pidgin-sipe specific issue or if this should be filed against krb5. Regards, B. -- System Information: Debian Release: jessie/sid APT prefers testing APT policy: (500, 'testing') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 3.9.2 (SMP w/2 CPU cores) Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/bash Versions of packages pidgin-sipe depends on: ii libc6 2.17-3 ii libcomerr2 1.42.5-1.1 ii libglib2.0-0 2.36.1-2build1 ii libgmime-2.6-0 2.6.10-1 ii libgssapi-krb5-2 1.10.1+dfsg-5 ii libgstreamer0.10-0 0.10.36-1.2 ii libk5crypto3 1.10.1+dfsg-5 ii libkrb5-3 1.10.1+dfsg-5 ii libnice10 0.1.2-1 ii libnspr4 2:4.9.6-1 ii libnspr4-0d 2:4.9.6-1 ii libnss3 2:3.14.3-1 ii libnss3-1d 2:3.14.3-1 ii libpurple0 2.10.7-2 ii libxml2 2.8.0+dfsg1-7+nmu1 Versions of packages pidgin-sipe recommends: ii gstreamer0.10-ffmpeg 0.10.13-5 ii gstreamer0.10-x 0.10.36-1.1 pidgin-sipe suggests no packages. -- no debconf information -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
