Bug#559666: cyrus-imapd-2.2: Upgrade of libkrb5-25-heimdal from 1.2.e1.dfsg.1-4 to 1.3.1.dfsg.1-1 causes imapd to fail

[Michael Welsh Duggan]

Package: cyrus-imapd-2.2
Version: 2.2.13-17
Severity: important


Upgrading libkrb5-25-heimdal from 1.2.e1.dfsg.1-4 to 1.3.1.dfsg.1-1
causes imapd (and lmtpd) to fail, causing messages like this to be
pammed into the syslog continuously:

Dec  6 01:08:44 maru cyrus/master[15105]: set maximum file descriptors to 256/256
Dec  6 01:08:44 maru cyrus/master[15105]: about to exec /usr/lib/cyrus/bin/imapd
Dec  6 01:08:44 maru cyrus/master[15054]: process 15105 exited, status 1
Dec  6 01:08:44 maru cyrus/master[15054]: service imap pid 15105 in READY state: terminated abnormally
Dec  6 01:08:44 maru cyrus/master[15054]: service imap now has 0 ready workers 
Dec  6 01:08:44 maru cyrus/master[15106]: set maximum file descriptors to 256/256
Dec  6 01:08:44 maru cyrus/master[15106]: about to exec /usr/lib/cyrus/bin/imapd
Dec  6 01:08:44 maru cyrus/master[15054]: process 15106 exited, status 1
Dec  6 01:08:44 maru cyrus/master[15054]: service imap pid 15106 in READY state: terminated abnormally
Dec  6 01:08:44 maru cyrus/master[15054]: service imap now has 0 ready workers 

Via experimentation I determined the failures due to the following:
root at maru:/usr/local/home/md5i# /usr/lib/cyrus/bin/imapd 
/usr/lib/cyrus/bin/imapd: /usr/lib/libkrb5.so.25: version `HEIMDAL_KRB5_1.0' not found (required by /usr/lib/cyrus/bin/imapd)

I was able to solve the problem by reverting libkrb5-25-heimdal,
libheimntlm0-heimdal, and libgssapi2-heimdal.  I have marked this as
important because the cause of the problem is difficult to determine,
and it causes syslogs to overflow.  Anyone who follows a normal
unstable upgrade path may be affected.

-- System Information:
Debian Release: squeeze/sid
  APT prefers unstable
  APT policy: (102, 'unstable'), (101, 'experimental'), (99, 'testing')
Architecture: i386 (i686)

Kernel: Linux 2.6.31 (SMP w/2 CPU cores)
Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages cyrus-imapd-2.2 depends on:
ii  cyrus-common-2.2         2.2.13-17       Cyrus mail system - common files
ii  libasn1-8-heimdal        1.3.1.dfsg.1-1  Heimdal Kerberos - ASN.1 library
ii  libc6                    2.10.2-2        GNU C Library: Shared libraries
ii  libcomerr2               1.41.9-1        common error description library
ii  libdb4.2                 4.2.52+dfsg-5.1 Berkeley v4.2 Database Libraries [
ii  libgssapi2-heimdal       1.2.e1.dfsg.1-4 Heimdal Kerberos - GSSAPI support 
ii  libkrb5-25-heimdal       1.2.e1.dfsg.1-4 Heimdal Kerberos - libraries
ii  libroken18-heimdal       1.3.1.dfsg.1-1  Heimdal Kerberos - roken support l
ii  libsasl2-2               2.1.23.dfsg1-3  Cyrus SASL - authentication abstra
ii  libssl0.9.8              0.9.8k-7        SSL shared libraries
ii  libwrap0                 7.6.q-18        Wietse Venema's TCP wrappers libra

cyrus-imapd-2.2 recommends no packages.

cyrus-imapd-2.2 suggests no packages.

-- no debconf information