Bug#805310: libsasl2-modules: Annoying message "DIGEST-MD5 common mech free" with svn in systemd journal

[Vincent Lefevre]

On 2022-04-14 11:41:30 +0200, Bastian Germann wrote:
> Am 14.04.22 um 11:12 schrieb Vincent Lefevre:
> > This is not fixed. Or the bug has reappeared:
> 
> Frédéric's patch is essentially the same that IOhannes proposed.
> I do not see how the logcheck regex rule does not match your posted log.
> But I am not familiar with logcheck regex evaluation. It should be standard 
> Perl regexes...
> Or is there something wrong with introducing the group (...)?
> 
> Does anyone familiar with logcheck see the problem and can propose a working 
> patch?
> I am happy to take it.

I think that logcheck is unrelated:

Package: logcheck
Version: 1.3.23
[...]
Description-en: mails anomalies in the system logfiles to the administrator
 Logcheck helps spot problems and security violations in your logfiles
 automatically and will send the results to you in e-mail.
 .
 Logcheck was part of the Abacus Project of security tools, but this
 version has been rewritten.

This package isn't even installed on my machine (I don't need/want
such mail).

The problem here is that the message is in the systemd journal
(not that I've received a mail with such a line).

-- 
Vincent Lefèvre  - Web: 
100% accessible validated (X)HTML - Blog: 
Work: CR INRIA - computer arithmetic / AriC project (LIP, ENS-Lyon)

Bug#805310: libsasl2-modules: Annoying message "DIGEST-MD5 common mech free" with svn in systemd journal

[Bastian Germann]

Am 14.04.22 um 11:12 schrieb Vincent Lefevre:

This is not fixed. Or the bug has reappeared:


Frédéric's patch is essentially the same that IOhannes proposed.
I do not see how the logcheck regex rule does not match your posted log.
But I am not familiar with logcheck regex evaluation. It should be standard 
Perl regexes...
Or is there something wrong with introducing the group (...)?

Does anyone familiar with logcheck see the problem and can propose a working 
patch?
I am happy to take it.

Bug#805310: libsasl2-modules: Annoying message "DIGEST-MD5 common mech free" with svn in systemd journal

[Vincent Lefevre]

Control: reopen -1
Control: found -1 2.1.28+dfsg-2

On 2022-04-14 10:13:10 +0200, Bastian Germann wrote:
> This was resolved by Frédéric Brière.

This is not fixed. Or the bug has reappeared:

Apr 14 11:06:57 zira svn[1862693]: DIGEST-MD5 common mech free
Apr 14 11:07:32 zira svn[1862770]: DIGEST-MD5 common mech free
Apr 14 11:07:39 zira svn[1862771]: DIGEST-MD5 common mech free
Apr 14 11:07:52 zira svn[1862797]: DIGEST-MD5 common mech free
Apr 14 11:08:03 zira svn[1862798]: DIGEST-MD5 common mech free
Apr 14 11:08:06 zira svn[1862839]: DIGEST-MD5 common mech free
Apr 14 11:08:07 zira svn[1862840]: DIGEST-MD5 common mech free
Apr 14 11:08:07 zira svn[1862869]: DIGEST-MD5 common mech free
Apr 14 11:08:11 zira svn[1862870]: DIGEST-MD5 common mech free
Apr 14 11:08:36 zira svn[1862934]: DIGEST-MD5 common mech free

-- 
Vincent Lefèvre  - Web: 
100% accessible validated (X)HTML - Blog: 
Work: CR INRIA - computer arithmetic / AriC project (LIP, ENS-Lyon)

Bug#805310: libsasl2-modules: Annoying message "DIGEST-MD5 common mech free" with svn in systemd journal

[Vincent Lefevre]

Package: libsasl2-modules
Version: 2.1.26.dfsg1-14+b1
Severity: minor

Whenever I use svn, even something like "svn help", a meaningless
message appears in the systemd journal, e.g. journalctl gives:

[...]
Nov 16 21:55:27 zira svn[30840]: DIGEST-MD5 common mech free
Nov 16 21:57:12 zira svn[30987]: DIGEST-MD5 common mech free
Nov 16 21:57:14 zira svn[31025]: DIGEST-MD5 common mech free
Nov 16 21:57:20 zira svn[31051]: DIGEST-MD5 common mech free
Nov 16 21:57:20 zira svn[31026]: DIGEST-MD5 common mech free
Nov 16 21:57:25 zira svn[31052]: DIGEST-MD5 common mech free
Nov 16 21:57:26 zira svn[31086]: DIGEST-MD5 common mech free
Nov 16 21:57:27 zira svn[31087]: DIGEST-MD5 common mech free
Nov 16 21:57:28 zira svn[3]: DIGEST-MD5 common mech free
Nov 16 21:57:33 zira svn[31112]: DIGEST-MD5 common mech free
Nov 16 21:57:34 zira svn[31139]: DIGEST-MD5 common mech free
Nov 16 21:57:36 zira svn[31158]: DIGEST-MD5 common mech free
Nov 16 21:57:37 zira svn[31168]: DIGEST-MD5 common mech free
Nov 16 21:58:11 zira svn[31286]: DIGEST-MD5 common mech free
Nov 16 21:58:12 zira svn[31287]: DIGEST-MD5 common mech free
[...]

That's annoying. According to dgrep, this message comes from
libsasl2-modules.

This problem already occurred back in 2011:

  https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=631932

but probably for sysvinit machines. It was fixed in 2014 with:

  * Add logcheck snippet to suppress "DIGEST-MD5 common mech free" messages
(Closes: #732771, #631932).

but this has no effect on my systemd machines. On sysvinit (and systemd)
machines, this message doesn't appear in "/var/log/syslog".

-- System Information:
Debian Release: stretch/sid
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'unstable'), (500, 'testing'), 
(500, 'stable'), (1, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 4.2.0-1-amd64 (SMP w/8 CPU cores)
Locale: LANG=POSIX, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages libsasl2-modules depends on:
ii  libc62.19-22
ii  libssl1.0.2  1.0.2d-3

libsasl2-modules recommends no packages.

Versions of packages libsasl2-modules suggests:
pn  libsasl2-modules-gssapi-mit | libsasl2-modules-gssapi-heimdal  
pn  libsasl2-modules-ldap  
pn  libsasl2-modules-otp   
pn  libsasl2-modules-sql   

-- no debconf information