Package: courier-imap
Version: 4.3.0-1.
Severity: grave
Justification: renders package unusable

With IceWeasel and other IMAP clients I tested like SquirrelMail and Mutt,
most IMAP connections are broken.

With a new user created for testing purposes, you can run directly imapd :

[EMAIL PROTECTED]:~$ imapd
* PREAUTH Ready.
INFO: LOGIN, user=tagada, ip=[127.0.0.1], port=[0], protocol=IMAP
* BYE Courier-IMAP server shut down by signal.
NOTICE: Disconnected during shutdown by signal, user=tagada, ip=[127.0.0.1],
headers=0, body=0, rcvd=0, sent=67, time=2
^C
[EMAIL PROTECTED]:~$ groups
tagada

With my normal user, I get :

[EMAIL PROTECTED]:~$ imapd
* BYE [ALERT] Fatal error: Account's mailbox directory is not owned by the
correct uid or gid: No such file or directory
[EMAIL PROTECTED]:~$ groups
cdrom adm dialout fax floppy tape audio dip src video plugdev scanner chips
geneweb

strace gives more information :

stat64(".", {st_mode=S_IFDIR|0700, st_size=8192, ...}) = 0
geteuid32()                             = 1000
getegid32()                             = 24
time(NULL)                              = 1197192917
write(1, "* BYE [ALERT] Fatal error: Accou"..., 122* BYE [ALERT] Fatal
error: Account's mailbox directory is not owned by the correct uid or gid:
No such file or directory
) = 122
exit_group(1)                           = ?
Process 21138 detached

[EMAIL PROTECTED]:~$ grep :24: /etc/group
cdrom:x:24:chips,linux,gag

The cause seems that imapd incorrectly uses and checks group as the first
found in user's groups in /etc/group, as reported by the getegid32()
function.

-- System Information:
Debian Release: lenny/sid
  APT prefers proposed-updates
  APT policy: (500, 'proposed-updates'), (500, 'unstable'), (500, 'stable')
Architecture: i386 (i686)

Kernel: Linux 2.6.23-1-686 (SMP w/1 CPU core)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages courier-imap depends on:
ii  courier-authlib               0.60.1-1   Courier authentication library
ii  courier-base                  0.58.0-1   Courier mail server - base system
ii  libc6                         2.7-4      GNU C Library: Shared libraries
ii  libgamin0 [libfam0]           0.1.9-2    Client library for the gamin file
ii  libgdbm3                      1.8.3-3    GNU dbm database routines (runtime
ii  postfix [mail-transport-agent 2.4.6-2    High-performance mail transport ag

courier-imap recommends no packages.

-- debconf information:
  courier-imap/moveconfig: true

-- 
Christophe �CHiPs� PETIT


Reply via email to