Hi there, We are have been running a cyrus imap 2.3.15 murder for some time, we have intoduced some new cyrus 2.4.17 backends into that murder and would like to migrate users to these new machines, however xfer's are failing for this reason:
Mar 24 12:16:22 backend.server imap[2370]: [ID 160988 local6.error] possible MITM attack:list of available SASL mechanisms changed Mar 24 12:16:22 backend.server imap[2370]: [ID 872191 local6.error] Could not move mailbox: user.imaptest, Initial backend connect failed we believe this is to to do with the list of SASL auth mechanisms returned in the capability string from a server before and after a login, but we can't see what is causing the mismatch or how to resolve. Any ideas gratefully appreciated. The strange thing is GSSAPI logins work fine between the servers in question. here are some details of the 2.3.15 and 2.4.17 backends in question: name : Cyrus IMAPD version : v2.4.17 d1df8aff 2012-12-01 vendor : Project Cyrus support-url: http://www.cyrusimap.org os : SunOS os-version : 5.11 environment: Built w/Cyrus SASL 2.1.23 Running w/Cyrus SASL 2.1.23 Built w/Berkeley DB 4.7.25: (May 15, 2008) Running w/Berkeley DB 4.7.25: (May 15, 2008) Built w/OpenSSL 1.0.0e 6 Sep 2011 Running w/OpenSSL 1.0.0e 6 Sep 2011 Built w/zlib 1.2.3 Running w/zlib 1.2.3 CMU Sieve 2.4 NET-SNMP mmap = shared lock = fcntl nonblock = fcntl idle = idled C: C01 CAPABILITY S: * CAPABILITY IMAP4rev1 LITERAL+ ID ENABLE ACL RIGHTS=kxte QUOTA MAILBOX-REFERRALS NAMESPACE UIDPLUS NO_ATOMIC_RENAME UNSELECT CHILDREN MULTIAPPEND BINARY CATENATE CONDSTORE ESEARCH SORT SORT=MODSEQ SORT=DISPLAY THREAD=ORDEREDSUBJECT THREAD=REFERENCES ANNOTATEMORE LIST-EXTENDED WITHIN QRESYNC SCAN XLIST URLAUTH URLAUTH=BINARY X-NETSCAPE MUPDATE=mupdate://mupdate-ucs.www-dyn.ed.ac.uk/ LOGINDISABLED AUTH=GSSAPI COMPRESS=DEFLATE IDLE and name : Cyrus IMAPD version : v2.3.15 2009/09/09 12:35:48 vendor : Project Cyrus support-url: http://cyrusimap.web.cmu.edu os : SunOS os-version : 5.11 environment: Built w/Cyrus SASL 2.1.15 Running w/Cyrus SASL 2.1.23 Built w/Berkeley DB 4.7.25: (May 15, 2008) Running w/Berkeley DB 4.7.25: (May 15, 2008) Built w/OpenSSL 1.0.0e 6 Sep 2011 Running w/OpenSSL 1.0.0e 6 Sep 2011 Built w/zlib 1.2.3 Running w/zlib 1.2.3 CMU Sieve 2.3 mmap = shared lock = fcntl nonblock = fcntl idle = idled C: C01 CAPABILITY S: * CAPABILITY IMAP4 IMAP4rev1 LITERAL+ ID MUPDATE=mupdate://mupdate-ucs.www-dyn.ed.ac.uk/ LOGINDISABLED AUTH=GSSAPI COMPRESS=DEFLATE ACL RIGHTS=kxte QUOTA MAILBOX-REFERRALS NAMESPACE UIDPLUS NO_ATOMIC_RENAME UNSELECT CHILDREN MULTIAPPEND BINARY SORT SORT=MODSEQ THREAD=ORDEREDSUBJECT THREAD=REFERENCES ANNOTATEMORE CATENATE CONDSTORE SCAN IDLE LISTEXT LIST-SUBSCRIBED X-NETSCAPE URLAUTH Gavin Gray Edinburgh University Information Services Rm 2013 JCMB Kings Buildings Edinburgh EH9 3JZ UK tel +44 (0)131 650 5987 email gavin.g...@ed.ac.uk -- The University of Edinburgh is a charitable body, registered in Scotland, with registration number SC005336. ---- Cyrus Home Page: http://www.cyrusimap.org/ List Archives/Info: http://lists.andrew.cmu.edu/pipermail/info-cyrus/ To Unsubscribe: https://lists.andrew.cmu.edu/mailman/listinfo/info-cyrus
