diff options
| author | Michael Weiss <dev.primeos@gmail.com> | 2023-06-04 21:47:26 +0200 |
|---|---|---|
| committer | Michael Weiss <dev.primeos@gmail.com> | 2023-06-04 22:03:22 +0200 |
| commit | fe02c5ee1a172552f2a0548e131df20d9ab9602e (patch) | |
| tree | 16a653dbe25dd0d455a62b93bd53dbaef8053bea | |
| parent | 8d08c93394fb95692652b0b7c4a181f263faee35 (diff) | |
isync: Disable the XOAUTH2 support by default as it caused regressions
The XOAUTH2 support was recently added in 47eda8e00a28 but apparently it
causes regressions when using other SASL methods.
An example error message:
```
IMAP command 'AUTHENTICATE XOAUTH2 SOMEHASH=' returned an error: NO [AUTHENTICATIONFAILED] Invalid credentials (Failure)
```
The cause seems to be that overriding `SASL_PATH` drops all available
SASL mechanisms from `cyrus_sasl`, so only `XOAUTH2` (and `EXTERNAL`)
will be left. See [0] and the following comments for more details.
We'd need to set `SASL_PATH` to a combination/merge of
`${cyrus_sasl}/lib/sasl2` and `${cyrus-sasl-xoauth2}/lib/sasl2`.
Anyway, it seems best to disable the XOAUTH2 support by default due to
the two other concerns mentioned in the comment.
[0]: https://github.com/NixOS/nixpkgs/pull/235148#issuecomment-1575432154
Reported-by: Dominik Schrempf <dominik.schrempf@gmail.com>
| -rw-r--r-- | pkgs/tools/networking/isync/default.nix | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/pkgs/tools/networking/isync/default.nix b/pkgs/tools/networking/isync/default.nix index ccf32b4384341..89b200e8e563b 100644 --- a/pkgs/tools/networking/isync/default.nix +++ b/pkgs/tools/networking/isync/default.nix @@ -1,7 +1,9 @@ { lib, stdenv, fetchurl, pkg-config, perl , openssl, db, cyrus_sasl, zlib , Security -, withCyrusSaslXoauth2 ? true, cyrus-sasl-xoauth2, makeWrapper +# Disabled by default as XOAUTH2 is an "OBSOLETE" SASL mechanism and this relies +# on a package that isn't really maintained anymore: +, withCyrusSaslXoauth2 ? false, cyrus-sasl-xoauth2, makeWrapper }: stdenv.mkDerivation rec { |