[From nobody Sat Oct 17 15:34:42 2026
Received: (at submit) by bugs.debian.org; 26 Jul 2026 13:23:42 +0000
X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02
 (2024-03-25) on buxtehude.debian.org
X-Spam-Level: 
X-Spam-Status: No, score=-19.1 required=4.0 tests=BAYES_00,
 BODY_INCLUDES_PACKAGE,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,
 DKIM_VALID_EF,FOURLA,HAS_PACKAGE,SPF_HELO_NONE,SPF_PASS,
 XMAILER_REPORTBUG autolearn=ham autolearn_force=no
 version=4.0.1-bugs.debian.org_2005_01_02
X-Spam-Bayes: score:0.0000 Tokens: new, 91; hammy, 150; neutral, 252; spammy,
 0. spammytokens: hammytokens:0.000-+--trixie, 0.000-+--H*Ad:N*Bug,
 0.000-+--HTo:N*Debian, 0.000-+--HTo:N*System, 0.000-+--HTo:N*Bug
Return-path: <benoit@les-grisot.fr>
Received: from mail.les-grisot.fr ([82.67.115.203]:60716)
 by buxtehude.debian.org with esmtps
 (TLS1.3:ECDHE_X25519__RSA_PSS_RSAE_SHA256__AES_256_GCM:256)
 (Exim 4.96) (envelope-from <benoit@les-grisot.fr>)
 id 1wnypR-003qd5-0r for submit@bugs.debian.org;
 Sun, 26 Jul 2026 13:23:42 +0000
Received: by mail.les-grisot.fr (Postfix, from userid 1000)
 id 27DB0FF5EA; Sun, 26 Jul 2026 15:17:14 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=les-grisot.fr;
 s=mail2026; t=1785071834;
 h=from:from:reply-to:subject:subject:date:date:message-id:message-id:
 to:to:cc:mime-version:mime-version:content-type:content-type:
 content-transfer-encoding:content-transfer-encoding;
 bh=JLfS/7mAw819FLv2mOqxB39HaANjjN9zyVc/iIC2owo=;
 b=opEShyjQSL+xhMczgnDFOUdvn2TdH6RqwakECqQdShZDoVyqVzAsS222mlAwpexSjm+/O1
 zlgauEo8zWsS11W+a7RVlp0q83pVAEFBpa0sPZrFyqxE48lSHNRclJSEOG7UROmdnA3Mxz
 3kF9P5M4siyZ4JVu0QQawP2X/gdOyuHea0us/vgTKvKM91PJ6rC6Ga9PHHR97RaeATls7g
 10fPgSZknjoER+xVHvEhaR7+F/cBqFKJC45Hs81vGpq58UBcC/hqGw9z+SC0r+9W1t9nyt
 n2+yVZ7ekZDfxGoa/w864Yx7OFBjHGkjyh6hTo2Xy5/EiKo7xWT0Uer+tZ4X3g==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
From: ben <benoit@les-grisot.fr>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: sogo: TOTP 2FA broken with SQL user source: secret stored but not
 recognised at login
Message-ID: <178507183408.246945.5684059216724614346.reportbug@mail.les-grisot.fr>
X-Mailer: reportbug 13.2.0
Date: Sun, 26 Jul 2026 15:17:14 +0200
X-Greylist: delayed 382 seconds by postgrey-1.37 at buxtehude;
 Sun, 26 Jul 2026 13:23:41 UTC
Delivered-To: submit@bugs.debian.org
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]