PSARC/2016/158 security-related packaging changes for libsasl2
22868388 Deprecated SASL mechanisms should not be installed by default
15731981 CRAM-MD5 security mechanism plugin should be functional on server
15731985 DIGEST-MD5 SASL security mechanism plugin should be functional on server
21977130 Add some manual tests, make testsuite and sample_server/client by default
22868764 Upstream sasl docs should be optionally installable
22868838 liblogin should be included in libsasl2 package
22910506 Fix nearly-unreadable saslauthd.8 man page
All memory accounted for!
All memory accounted for!
All memory accounted for!
All memory accounted for!
All memory accounted for!
All memory accounted for!
All memory accounted for!
All memory accounted for!
All memory accounted for!
All memory accounted for!
All memory accounted for!
All memory accounted for!
All memory accounted for!
All memory accounted for!
All memory accounted for!
All memory accounted for!
All memory accounted for!
All memory accounted for!
All memory accounted for!
NOTE:
-For KERBEROS_V4 must be able to read srvtab file (usually /etc/srvtab)
-For GSSAPI must be able to read srvtab (/etc/krb5.keytab)
-For both KERBEROS_V4 and GSSAPI you must have non-expired tickets
-For OTP (w/OPIE) must be able to read/write opiekeys (/etc/opiekeys)
-For OTP you must have a non-expired secret
-Must be able to read sasldb, which needs to be setup with a
username and a password (see top of testsuite.c)
Checking plaintext passwords... ok
Random number functions... ok
Testing base64 functions... ok
Testing auxprop functions... ok
Tests of sasl_{server|client}_init()... ok
Testing sasl_listmech()...
Client mechlist:
We have the following mechs:
Testing sasl_listmech()... ok
Testing serverstart...ok
Testing client-first/no-server-last correctly...
LOGIN --> start
PLAIN --> start
EXTERNAL --> start
OTP --> start
CRAM-MD5 --> start
DIGEST-MD5 --> start
ANONYMOUS --> start
GSSAPI --> start
SCRAM-SHA-1 --> start
Test of client-first/no-server-last...ok
Testing no-client-first/no-server-last correctly...
LOGIN --> start
PLAIN --> start
EXTERNAL --> start
OTP --> start
CRAM-MD5 --> start
DIGEST-MD5 --> start
ANONYMOUS --> start
GSSAPI --> start
SCRAM-SHA-1 --> start
Test of no-client-first/no-server-last...ok
Testing no-client-first/server-last correctly...
LOGIN --> start
PLAIN --> start
EXTERNAL --> start
OTP --> start
CRAM-MD5 --> start
DIGEST-MD5 --> start
ANONYMOUS --> start
GSSAPI --> start
SCRAM-SHA-1 --> start
Test of no-client-first/server-last...ok
Testing client-first/server-last correctly...
LOGIN --> start
PLAIN --> start
EXTERNAL --> start
OTP --> start
CRAM-MD5 --> start
DIGEST-MD5 --> start
ANONYMOUS --> start
GSSAPI --> start
SCRAM-SHA-1 --> start
Test of client-first/server-last...ok
-=-=-=-=- And now using the callbacks interface -=-=-=-=-
Testing client-first/no-server-last correctly...
LOGIN --> start
PLAIN --> start
EXTERNAL --> start
OTP --> start
CRAM-MD5 --> start
DIGEST-MD5 --> start
ANONYMOUS --> start
GSSAPI --> start
SCRAM-SHA-1 --> start
Test of client-first/no-server-last...ok
Testing no-client-first/no-server-last correctly...
LOGIN --> start
PLAIN --> start
EXTERNAL --> start
OTP --> start
CRAM-MD5 --> start
DIGEST-MD5 --> start
ANONYMOUS --> start
GSSAPI --> start
SCRAM-SHA-1 --> start
Test of no-client-first/no-server-last...ok
Testing no-client-first/server-last correctly...
LOGIN --> start
PLAIN --> start
EXTERNAL --> start
OTP --> start
CRAM-MD5 --> start
DIGEST-MD5 --> start
ANONYMOUS --> start
GSSAPI --> start
SCRAM-SHA-1 --> start
Test of no-client-first/server-last...ok
Testing client-first/server-last correctly...
LOGIN --> start
PLAIN --> start
EXTERNAL --> start
OTP --> start
CRAM-MD5 --> start
DIGEST-MD5 --> start
ANONYMOUS --> start
GSSAPI --> All memory accounted for!
start
SCRAM-SHA-1 --> start
Test of client-first/server-last...ok
Random corruption tests...
LOGIN --> start
PLAIN --> start
EXTERNAL --> start
OTP --> start
CRAM-MD5 --> start
DIGEST-MD5 --> start
ANONYMOUS --> start
GSSAPI --> start
SCRAM-SHA-1 --> start
LOGIN --> start
PLAIN --> start
EXTERNAL --> start
OTP --> start
CRAM-MD5 --> start
DIGEST-MD5 --> start
ANONYMOUS --> start
GSSAPI --> start
SCRAM-SHA-1 --> start
LOGIN --> start
PLAIN --> start
EXTERNAL --> start
OTP --> start
CRAM-MD5 --> start
DIGEST-MD5 --> start
ANONYMOUS --> start
GSSAPI --> start
SCRAM-SHA-1 --> start
LOGIN --> start
PLAIN --> start
EXTERNAL --> start
OTP --> start
CRAM-MD5 --> start
DIGEST-MD5 --> start
ANONYMOUS --> start
GSSAPI --> start
SCRAM-SHA-1 --> start
LOGIN --> start
PLAIN --> start
EXTERNAL --> start
OTP --> start
CRAM-MD5 --> start
DIGEST-MD5 --> start
ANONYMOUS --> start
GSSAPI --> start
SCRAM-SHA-1 --> start
LOGIN --> start
PLAIN --> start
EXTERNAL --> start
OTP --> start
CRAM-MD5 --> start
DIGEST-MD5 --> start
ANONYMOUS --> start
GSSAPI --> start
SCRAM-SHA-1 --> start
LOGIN --> start
PLAIN --> start
EXTERNAL --> start
OTP --> start
CRAM-MD5 --> start
DIGEST-MD5 --> start
ANONYMOUS --> start
GSSAPI --> start
SCRAM-SHA-1 --> start
LOGIN --> start
PLAIN --> start
EXTERNAL --> start
OTP --> start
CRAM-MD5 --> start
DIGEST-MD5 --> start
ANONYMOUS --> start
GSSAPI --> start
SCRAM-SHA-1 --> start
LOGIN --> start
PLAIN --> start
EXTERNAL --> start
OTP --> start
CRAM-MD5 --> start
DIGEST-MD5 --> start
ANONYMOUS --> start
GSSAPI --> start
SCRAM-SHA-1 --> start
LOGIN --> start
PLAIN --> start
EXTERNAL --> start
OTP --> start
CRAM-MD5 --> start
DIGEST-MD5 --> start
ANONYMOUS --> start
GSSAPI --> start
SCRAM-SHA-1 --> start
LOGIN --> start
PLAIN --> start
EXTERNAL --> start
OTP --> start
CRAM-MD5 --> start
DIGEST-MD5 --> start
ANONYMOUS --> start
GSSAPI --> start
SCRAM-SHA-1 --> start
LOGIN --> start
PLAIN --> start
EXTERNAL --> start
OTP --> start
CRAM-MD5 --> start
DIGEST-MD5 --> start
ANONYMOUS --> start
GSSAPI --> start
SCRAM-SHA-1 --> start
LOGIN --> start
PLAIN --> start
EXTERNAL --> start
OTP --> start
CRAM-MD5 --> start
DIGEST-MD5 --> start
ANONYMOUS --> start
GSSAPI --> start
SCRAM-SHA-1 --> start
LOGIN --> start
PLAIN --> start
EXTERNAL --> start
OTP --> start
CRAM-MD5 --> start
DIGEST-MD5 --> start
ANONYMOUS --> start
GSSAPI --> start
SCRAM-SHA-1 --> start
LOGIN --> start
PLAIN --> start
EXTERNAL --> start
OTP --> start
CRAM-MD5 --> start
DIGEST-MD5 --> start
ANONYMOUS --> start
GSSAPI --> start
SCRAM-SHA-1 --> start
LOGIN --> start
PLAIN --> start
EXTERNAL --> start
OTP --> start
CRAM-MD5 --> start
DIGEST-MD5 --> start
ANONYMOUS --> start
GSSAPI --> start
SCRAM-SHA-1 --> start
LOGIN --> start
PLAIN --> start
EXTERNAL --> start
OTP --> start
CRAM-MD5 --> start
DIGEST-MD5 --> start
ANONYMOUS --> start
GSSAPI --> start
SCRAM-SHA-1 --> start
LOGIN --> start
PLAIN --> start
EXTERNAL --> start
OTP --> start
CRAM-MD5 --> start
DIGEST-MD5 --> start
ANONYMOUS --> start
GSSAPI --> start
SCRAM-SHA-1 --> start
LOGIN --> start
PLAIN --> start
EXTERNAL --> start
OTP --> start
CRAM-MD5 --> start
DIGEST-MD5 --> start
ANONYMOUS --> start
GSSAPI --> start
SCRAM-SHA-1 --> start
LOGIN --> start
PLAIN --> start
EXTERNAL --> start
OTP --> start
CRAM-MD5 --> start
DIGEST-MD5 --> start
ANONYMOUS --> start
GSSAPI --> start
SCRAM-SHA-1 --> start
LOGIN --> start
PLAIN --> start
EXTERNAL --> start
OTP --> start
CRAM-MD5 --> start
DIGEST-MD5 --> start
ANONYMOUS --> start
GSSAPI --> start
SCRAM-SHA-1 --> start
LOGIN --> start
PLAIN --> start
EXTERNAL --> start
OTP --> start
CRAM-MD5 --> start
DIGEST-MD5 --> start
ANONYMOUS --> start
GSSAPI --> start
SCRAM-SHA-1 --> start
LOGIN --> start
PLAIN --> start
EXTERNAL --> start
OTP --> start
CRAM-MD5 --> start
DIGEST-MD5 --> start
ANONYMOUS --> start
GSSAPI --> start
SCRAM-SHA-1 --> start
LOGIN --> start
PLAIN --> start
EXTERNAL --> start
OTP --> start
CRAM-MD5 --> start
DIGEST-MD5 --> start
ANONYMOUS --> start
GSSAPI --> start
SCRAM-SHA-1 --> start
LOGIN --> start
PLAIN --> start
EXTERNAL --> start
OTP --> start
CRAM-MD5 --> start
DIGEST-MD5 --> start
ANONYMOUS --> start
GSSAPI --> start
SCRAM-SHA-1 --> start
Random tests... ok
Testing Proxy Policy...
LOGIN --> start
Warning: Authenticated name but DID NOT proxy (ken/ken)
Warning: Server Authorization Name != proxyasuser
PLAIN --> start
EXTERNAL --> start
OTP --> start
CRAM-MD5 --> start
Warning: Authenticated name but DID NOT proxy (ken/ken)
Warning: Server Authorization Name != proxyasuser
DIGEST-MD5 --> start
ANONYMOUS --> start
Warning: Authenticated name but DID NOT proxy (anonymous/anonymous)
Warning: Server Authorization Name != proxyasuser
GSSAPI --> start
SCRAM-SHA-1 --> start
Tests of Proxy Policy...ok
Testing security layer...
LOGIN --> security layer start
SUCCESS Testing SSF: 0 (requested 0/256 with maxbufsize: 8192)
SUCCESS Testing SSF: 0 (requested 0/112 with maxbufsize: 8192)
SUCCESS Testing SSF: 0 (requested 0/56 with maxbufsize: 8192)
SUCCESS Testing SSF: 0 (requested 0/55 with maxbufsize: 8192)
SUCCESS Testing SSF: 0 (requested 0/1 with maxbufsize: 8192)
Testing SSF: SKIPPED (requested minimum > 0: 2)
SUCCESS Testing SSF: 0 (requested 0/256 with maxbufsize: 0)
LOGIN --> security layer OK
PLAIN --> security layer start
SUCCESS Testing SSF: 0 (requested 0/256 with maxbufsize: 8192)
SUCCESS Testing SSF: 0 (requested 0/112 with maxbufsize: 8192)
SUCCESS Testing SSF: 0 (requested 0/56 with maxbufsize: 8192)
SUCCESS Testing SSF: 0 (requested 0/55 with maxbufsize: 8192)
SUCCESS Testing SSF: 0 (requested 0/1 with maxbufsize: 8192)
Testing SSF: SKIPPED (requested minimum > 0: 2)
SUCCESS Testing SSF: 0 (requested 0/256 with maxbufsize: 0)
PLAIN --> security layer OK
EXTERNAL --> security layer start
SUCCESS Testing SSF: 0 (requested 0/256 with maxbufsize: 8192)
SUCCESS Testing SSF: 0 (requested 0/112 with maxbufsize: 8192)
SUCCESS Testing SSF: 0 (requested 0/56 with maxbufsize: 8192)
SUCCESS Testing SSF: 0 (requested 0/55 with maxbufsize: 8192)
SUCCESS Testing SSF: 0 (requested 0/1 with maxbufsize: 8192)
Testing SSF: SKIPPED (requested minimum > 0: 2)
SUCCESS Testing SSF: 0 (requested 0/256 with maxbufsize: 0)
EXTERNAL --> security layer OK
OTP --> security layer start
SUCCESS Testing SSF: 0 (requested 0/256 with maxbufsize: 8192)
SUCCESS Testing SSF: 0 (requested 0/112 with maxbufsize: 8192)
SUCCESS Testing SSF: 0 (requested 0/56 with maxbufsize: 8192)
SUCCESS Testing SSF: 0 (requested 0/55 with maxbufsize: 8192)
SUCCESS Testing SSF: 0 (requested 0/1 with maxbufsize: 8192)
Testing SSF: SKIPPED (requested minimum > 0: 2)
SUCCESS Testing SSF: 0 (requested 0/256 with maxbufsize: 0)
OTP --> security layer OK
CRAM-MD5 --> security layer start
SUCCESS Testing SSF: 0 (requested 0/256 with maxbufsize: 8192)
SUCCESS Testing SSF: 0 (requested 0/112 with maxbufsize: 8192)
SUCCESS Testing SSF: 0 (requested 0/56 with maxbufsize: 8192)
SUCCESS Testing SSF: 0 (requested 0/55 with maxbufsize: 8192)
SUCCESS Testing SSF: 0 (requested 0/1 with maxbufsize: 8192)
Testing SSF: SKIPPED (requested minimum > 0: 2)
SUCCESS Testing SSF: 0 (requested 0/256 with maxbufsize: 0)
CRAM-MD5 --> security layer OK
DIGEST-MD5 --> security layer start
SUCCESS Testing SSF: 128 (requested 0/256 with maxbufsize: 8192)
SUCCESS Testing SSF: 112 (requested 0/112 with maxbufsize: 8192)
SUCCESS Testing SSF: 56 (requested 0/56 with maxbufsize: 8192)
SUCCESS Testing SSF: 55 (requested 0/55 with maxbufsize: 8192)
SUCCESS Testing SSF: 1 (requested 0/1 with maxbufsize: 8192)
SUCCESS Testing SSF: 128 (requested 2/256 with maxbufsize: 8192)
SUCCESS Testing SSF: 0 (requested 0/256 with maxbufsize: 0)
DIGEST-MD5 --> security layer OK
ANONYMOUS --> security layer start
SUCCESS Testing SSF: 0 (requested 0/256 with maxbufsize: 8192)
SUCCESS Testing SSF: 0 (requested 0/112 with maxbufsize: 8192)
SUCCESS Testing SSF: 0 (requested 0/56 with maxbufsize: 8192)
SUCCESS Testing SSF: 0 (requested 0/55 with maxbufsize: 8192)
SUCCESS Testing SSF: 0 (requested 0/1 with maxbufsize: 8192)
Testing SSF: SKIPPED (requested minimum > 0: 2)
SUCCESS Testing SSF: 0 (requested 0/256 with maxbufsize: 0)
ANONYMOUS --> security layer OK
GSSAPI --> security layer start
SUCCESS Testing SSF: 56 (requested 0/256 with maxbufsize: 8192)
SUCCESS Testing SSF: 56 (requested 0/112 with maxbufsize: 8192)
SUCCESS Testing SSF: 56 (requested 0/56 with maxbufsize: 8192)
SUCCESS Testing SSF: 1 (requested 0/55 with maxbufsize: 8192)
SUCCESS Testing SSF: 1 (requested 0/1 with maxbufsize: 8192)
SUCCESS Testing SSF: 56 (requested 2/256 with maxbufsize: 8192)
SUCCESS Testing SSF: 0 (requested 0/256 with maxbufsize: 0)
GSSAPI --> security layer OK
SCRAM-SHA-1 --> security layer start
SUCCESS Testing SSF: 0 (requested 0/256 with maxbufsize: 8192)
SUCCESS Testing SSF: 0 (requested 0/112 with maxbufsize: 8192)
SUCCESS Testing SSF: 0 (requested 0/56 with maxbufsize: 8192)
SUCCESS Testing SSF: 0 (requested 0/55 with maxbufsize: 8192)
SUCCESS Testing SSF: 0 (requested 0/1 with maxbufsize: 8192)
Testing SSF: SKIPPED (requested minimum > 0: 2)
SUCCESS Testing SSF: 0 (requested 0/256 with maxbufsize: 0)
SCRAM-SHA-1 --> security layer OK
Tests of security layer... ok
All tests seemed to go ok (i.e. we didn't crash)