>Number:         20882
>Category:       pkg
>Synopsis:       security/cyrus-sasl - LOGIN required for use with some (esp. MS Exchange) mailservers
>Confidential:   no
>Severity:       serious
>Priority:       high
>Responsible:    pkg-manager
>State:          open
>Class:          change-request
>Submitter-Id:   net
>Arrival-Date:   Mon Mar 24 17:17:01 PST 2003
>Closed-Date:
>Last-Modified:
>Originator:     Benedikt Meurer
>Release:        NetBSD 1.6
>Organization:
University Siegen
>Environment:
	
	
System: NetBSD endor.kosmos.all 1.6 NetBSD 1.6 (ENDOR) #0: Fri Feb 21 23:18:27 CET 2003 bmeurer@darkstar.kosmos.all:/usr/src/sys/arch/i386/compile/ENDOR i386
Architecture: i386
Machine: i386
>Description:
cyrus-sasl should install liblogin plugin as well (on request), as it is
required e.g. for client authentication to some (esp. MS exchange) mailservers.
>How-To-Repeat:
Try to use sendmail/postfix (SASL enabled) with a SMTP relay that only offers
AUTH=LOGIN.
>Fix:
Apply the following patch:

Index: Makefile
===================================================================
RCS file: /cvsroot/pkgsrc/security/cyrus-sasl/Makefile,v
retrieving revision 1.38
diff -u -r1.38 Makefile
--- Makefile	2003/01/28 22:04:04	1.38
+++ Makefile	2003/03/25 01:10:45
@@ -47,13 +47,19 @@
 CONFIGURE_ARGS+=	--enable-anon		# ANONYMOUS
 CONFIGURE_ARGS+=	--enable-cram		# CRAM-MD5
 CONFIGURE_ARGS+=	--enable-digest		# DIGEST-MD5
-CONFIGURE_ARGS+=	--disable-login		# --- no LOGIN
 CONFIGURE_ARGS+=	--enable-plain		# PLAIN
 CONFIGURE_ARGS+=	--disable-scram		# --- no SCRAM-MD5
 CONFIGURE_ARGS+=	--disable-sia		# --- no SIA
 CONFIGURE_ARGS+=	--disable-srp		# --- no SRP
 CONFIGURE_ARGS+=	--disable-x509		# --- no X.509
 CONFIGURE_ARGS+=	--disable-krb4		# --- no KERBEROS_V4
+
+.if defined(SASL_USE_LOGIN) && ${SASL_USE_LOGIN} == "YES"
+CONFIGURE_ARGS+=	--enable-login		# LOGIN
+PLIST_SRC+=		${.CURDIR}/PLIST.login
+.else
+CONFIGURE_ARGS+=	--disable-login		# --- no LOGIN
+.endif
 
 .if defined(SASL_USE_GSSAPI) && ${SASL_USE_GSSAPI} == "YES"
 CONFIGURE_ARGS+=	--enable-gssapi=/usr	# GSSAPI


 And add the following file PLIST.login:

@comment $NetBSD$
lib/sasl/liblogin.a
lib/sasl/liblogin.la
lib/sasl/liblogin.so
lib/sasl/liblogin.so.0
lib/sasl/liblogin.so.0.6

>Release-Note:
>Audit-Trail:
>Unformatted: