#1256 user authentication not working after update on ubuntu

Reporter Elumbus GmbH
Owner Nobody
Created
Updated
Stars ★★ (2)
Tags
  • Status-Fixed
  • Type-Defect
  • Priority-Medium
  1. Elumbus GmbH on

    Users cannot login to prosody anymore at all server is authenticating users via sasl bound to ldaps:// from today 20:34 our system was not working anymore system ubuntu trusty took latest update from your repo accoring to /var/log/apt: after later commenting out the lines attempting to load compression/privacy those errors disappeared, but the sasl problem still is there ... <quote> Start-Date: 2018-12-04 20:34:40 Install: lua5.2:amd64 (5.2.3-1, automatic) Upgrade: prosody:amd64 (0.10.2-1~trusty1, 0.11.1-1~trusty1), libpoppler44:amd64 (0.24.5-2ubuntu4.12, 0.24.5-2ubuntu4.13 Remove: lua-bitop:amd64 (1.0.2-2), lua5.1:amd64 (5.1.5-5ubuntu0.1) End-Date: 2018-12-04 20:34:54 </quote> Logs show (MYTLD is a replace for the real one): <quote> Dec 04 20:34:51 general error The version of LuaExpat on your system does not support stanza size limits, which may l Dec 04 20:34:51 modulemanager error Error initializing module 'auth_cyrus' on 'MYTLD': /usr/lib/prosody no field package.preload['cyrussasl'] no file '/usr/lib/prosody/cyrussasl.lua' no file '/usr/local/share/lua/5.2/cyrussasl.lua' no file '/usr/local/share/lua/5.2/cyrussasl/init.lua' no file '/usr/local/lib/lua/5.2/cyrussasl.lua' no file '/usr/local/lib/lua/5.2/cyrussasl/init.lua' no file '/usr/share/lua/5.2/cyrussasl.lua' no file '/usr/share/lua/5.2/cyrussasl/init.lua' no file '/usr/lib/prosody/cyrussasl.so' no file '/usr/local/lib/lua/5.2/cyrussasl.so' no file '/usr/lib/x86_64-linux-gnu/lua/5.2/cyrussasl.so' no file '/usr/lib/lua/5.2/cyrussasl.so' no file '/usr/local/lib/lua/5.2/loadall.so' stack traceback: [C]: in function '_real_require' /usr/lib/prosody/util/startup.lua:141: in function 'require' /usr/lib/prosody/util/sasl_cyrus.lua:14: in main chunk [C]: in function '_real_require' /usr/lib/prosody/util/startup.lua:141: in function 'require' /usr/lib/prosody/modules/mod_auth_cyrus.lua:22: in main chunk [C]: in function 'xpcall' /usr/lib/prosody/core/modulemanager.lua:178: in function 'do_load_module' /usr/lib/prosody/core/modulemanager.lua:256: in function 'load' /usr/lib/prosody/core/usermanager.lua:67: in function '?' /usr/lib/prosody/util/events.lua:79: in function </usr/lib/prosody/util/events.lua:75> (...tail calls...) /usr/lib/prosody/core/hostmanager.lua:108: in function 'activate' /usr/lib/prosody/core/hostmanager.lua:58: in function '?' /usr/lib/prosody/util/events.lua:79: in function </usr/lib/prosody/util/events.lua:75> (...tail calls...) /usr/lib/prosody/util/startup.lua:327: in function 'prepare_to_start' /usr/lib/prosody/util/startup.lua:548: in function 'f' /usr/lib/prosody/util/async.lua:139: in function 'func' /usr/lib/prosody/util/async.lua:127: in function </usr/lib/prosody/util/async.lua:125> Dec 04 20:34:51 modulemanager error Unable to load module 'privacy': /usr/lib/prosody/modules/mod_privacy.lua: No s Dec 04 20:34:51 modulemanager error Unable to load module 'compression': /usr/lib/prosody/modules/mod_compression.l </quote>

  2. Elumbus GmbH on

    i tried that out on bionic, running into the same error it seems ... <quote> Dec 05 17:28:43 modulemanager error Error initializing module 'auth_cyrus' on 'chat.elumbus-reisen.de': /usr/lib/prosody/util/startup.lua:141: module 'cyrussasl' not found: no field package.preload['cyrussasl'] no file '/usr/lib/prosody/cyrussasl.lua' no file '/usr/local/share/lua/5.2/cyrussasl.lua' no file '/usr/local/share/lua/5.2/cyrussasl/init.lua' no file '/usr/local/lib/lua/5.2/cyrussasl.lua' no file '/usr/local/lib/lua/5.2/cyrussasl/init.lua' no file '/usr/share/lua/5.2/cyrussasl.lua' no file '/usr/share/lua/5.2/cyrussasl/init.lua' no file '/usr/lib/prosody/cyrussasl.so' no file '/usr/local/lib/lua/5.2/cyrussasl.so' no file '/usr/lib/x86_64-linux-gnu/lua/5.2/cyrussasl.so' no file '/usr/lib/lua/5.2/cyrussasl.so' no file '/usr/local/lib/lua/5.2/loadall.so' stack traceback: [C]: in function '_real_require' /usr/lib/prosody/util/startup.lua:141: in function 'require' /usr/lib/prosody/util/sasl_cyrus.lua:14: in main chunk [C]: in function '_real_require' /usr/lib/prosody/util/startup.lua:141: in function 'require' /usr/lib/prosody/modules/mod_auth_cyrus.lua:22: in main chunk [C]: in function 'xpcall' /usr/lib/prosody/core/modulemanager.lua:178: in function 'do_load_module' /usr/lib/prosody/core/modulemanager.lua:256: in function 'load' /usr/lib/prosody/core/usermanager.lua:67: in function '?' /usr/lib/prosody/util/events.lua:79: in function </usr/lib/prosody/util/events.lua:75> (...tail calls...) /usr/lib/prosody/core/hostmanager.lua:108: in function 'activate' /usr/lib/prosody/core/hostmanager.lua:58: in function '?' /usr/lib/prosody/util/events.lua:79: in function </usr/lib/prosody/util/events.lua:75> (...tail calls...) /usr/lib/prosody/util/startup.lua:327: in function 'prepare_to_start' /usr/lib/prosody/util/startup.lua:548: in function 'f' /usr/lib/prosody/util/async.lua:139: in function 'func' /usr/lib/prosody/util/async.lua:127: in function </usr/lib/prosody/util/async.lua:125> </quote> prosody.log on connection attempt: <quote> Dec 06 03:12:51 socket debug server.lua: accepted new client connection from 87.141.34.217:48234 to 5222 Dec 06 03:12:51 c2s561a03c47dc0 info Client connected Dec 06 03:12:51 c2s561a03c47dc0 debug Client sent opening <stream:stream> to chat.elumbus-reisen.de Dec 06 03:12:51 c2s561a03c47dc0 debug Sending[c2s_unauthed]: <?xml version='1.0'?> Dec 06 03:12:51 c2s561a03c47dc0 debug Sending[c2s_unauthed]: <stream:stream xmlns='jabber:client' xmlns:stream='http://etherx.jabber.org/streams' from='chat.elumbus-reisen.de' id='e590b3be-f6d8-419c-a7a7-f471b3e7a22b' version='1.0' xml:lang='en'> Dec 06 03:12:51 c2s561a03c47dc0 debug Sent reply <stream:stream> to client Dec 06 03:12:51 c2s561a03c47dc0 debug Not offering authentication on insecure connection Dec 06 03:12:51 c2s561a03c47dc0 debug Sending[c2s_unauthed]: <stream:features> Dec 06 03:12:51 runnerlzs974CG debug creating new coroutine Dec 06 03:12:51 c2s561a03c47dc0 debug Received[c2s_unauthed]: <starttls xmlns='urn:ietf:params:xml:ns:xmpp-tls'> Dec 06 03:12:51 c2s561a03c47dc0 debug Sending[c2s_unauthed]: <proceed xmlns='urn:ietf:params:xml:ns:xmpp-tls'> Dec 06 03:12:51 socket debug server.lua: we need to do tls, but delaying until send buffer empty Dec 06 03:12:51 c2s561a03c47dc0 debug TLS negotiation started for c2s_unauthed... Dec 06 03:12:51 socket debug server.lua: attempting to start tls on tcp{client}: 0x561a03874548 Dec 06 03:12:51 socket debug server.lua: ssl handshake done Dec 06 03:12:51 c2s561a03c47dc0 debug Client sent opening <stream:stream> to chat.elumbus-reisen.de Dec 06 03:12:51 c2s561a03c47dc0 debug Sending[c2s_unauthed]: <?xml version='1.0'?> Dec 06 03:12:51 c2s561a03c47dc0 debug Sending[c2s_unauthed]: <stream:stream xmlns='jabber:client' xmlns:stream='http://etherx.jabber.org/streams' from='chat.elumbus-reisen.de' id='1667fb3a-9cb6-4eae-9aa0-59c12ad0f899' version='1.0' xml:lang='en'> Dec 06 03:12:51 c2s561a03c47dc0 debug Sent reply <stream:stream> to client Dec 06 03:12:51 c2s561a03c47dc0 info Stream encrypted (TLSv1.2 with ECDHE-RSA-AES128-GCM-SHA256) Dec 06 03:12:51 c2s561a03c47dc0 warn No available SASL mechanisms, verify that the configured authentication module is working Dec 06 03:12:51 c2s561a03c47dc0 warn No stream features to offer Dec 06 03:12:51 c2s561a03c47dc0 debug Disconnecting client, <stream:error> is: <stream:error><undefined-condition xmlns='urn:ietf:params:xml:ns:xmpp-streams'/><text xmlns='urn:ietf:params:xml:ns:xmpp-streams'>No stream features to proceed with</text></stream:error> Dec 06 03:12:51 c2s561a03c47dc0 debug Sending[c2s_unauthed]: <stream:error> Dec 06 03:12:51 c2s561a03c47dc0 debug Sending[c2s_unauthed]: </stream:stream> Dec 06 03:12:51 c2s561a03c47dc0 debug c2s stream for 87.141.34.217 closed: No stream features to proceed with Dec 06 03:12:51 c2s561a03c47dc0 debug Destroying session for (unknown) ((unknown)@chat.elumbus-reisen.de): No stream features to proceed with Dec 06 03:12:51 c2s561a03c47dc0 info Client disconnected: connection closed Dec 06 03:12:51 c2s561a03c47dc0 debug Destroying session for (unknown) ((unknown)@(unknown)) Dec 06 03:12:51 socket debug server.lua: closed client handler and removed socket from list </quote>

  3. Elumbus GmbH on

    removed prosody repo, falling back to bionic package 0.10 / lua 5.1 works like a charm ;(

  4. Nicholas Gold on

    Issue is present in Xenial using Prosody repo as well. Removed prosody repo, failing back to Xenial 0.9.10-1/lua5.1. from prosody.err Dec 12 13:47:14 modulemanager error Error initializing module 'auth_cyrus' on '<redacted>': /usr/lib/prosody/util/startup.lua:141: module 'cyrussasl' not found: no field package.preload['cyrussasl'] no file '/usr/lib/prosody/cyrussasl.lua' no file '/usr/local/share/lua/5.2/cyrussasl.lua' no file '/usr/local/share/lua/5.2/cyrussasl/init.lua' no file '/usr/local/lib/lua/5.2/cyrussasl.lua' no file '/usr/local/lib/lua/5.2/cyrussasl/init.lua' no file '/usr/share/lua/5.2/cyrussasl.lua' no file '/usr/share/lua/5.2/cyrussasl/init.lua' no file '/usr/lib/prosody/cyrussasl.so' no file '/usr/local/lib/lua/5.2/cyrussasl.so' no file '/usr/lib/x86_64-linux-gnu/lua/5.2/cyrussasl.so' no file '/usr/lib/lua/5.2/cyrussasl.so' no file '/usr/local/lib/lua/5.2/loadall.so' stack traceback: [C]: in function '_real_require' /usr/lib/prosody/util/startup.lua:141: in function 'require' /usr/lib/prosody/util/sasl_cyrus.lua:14: in main chunk [C]: in function '_real_require' /usr/lib/prosody/util/startup.lua:141: in function 'require' /usr/lib/prosody/modules/mod_auth_cyrus.lua:22: in main chunk [C]: in function 'xpcall' /usr/lib/prosody/core/modulemanager.lua:178: in function 'do_load_module' /usr/lib/prosody/core/modulemanager.lua:256: in function 'load' /usr/lib/prosody/core/modulemanager.lua:78: in function '?' /usr/lib/prosody/util/events.lua:79: in function </usr/lib/prosody/util/events.lua:75> (...tail calls...) /usr/lib/prosody/core/hostmanager.lua:108: in function 'activate' /usr/lib/prosody/core/hostmanager.lua:58: in function '?' /usr/lib/prosody/util/events.lua:79: in function </usr/lib/prosody/util/events.lua:75> (...tail calls...) /usr/lib/prosody/util/startup.lua:327: in function 'prepare_to_start' /usr/lib/prosody/util/startup.lua:548: in function 'f' /usr/lib/prosody/util/async.lua:139: in function 'func' /usr/lib/prosody/util/async.lua:127: in function </usr/lib/prosody/util/async.lua:125>

  5. Zash on

    It's recommended to read the release notes before upgrading. Especially this part: https://prosody.im/doc/release/0.11.0#lua-5.2 The version of lua-cyrussasl in Debian (and Ubuntu) does not support Lua 5.2 so attempts to rebuild it have failed so far. Newer upstream version sounded promising, so I've filed this Debian bug: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=916318

  6. Zash on

    https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=916318#14

    Changes
    • tags Status-Fixed

New comment

Not published. Used for spam prevention and optional update notifications.