Bug#479690: cyrus-sasl2 wishlist

[Russ Allbery]

"Christoph Christ (MCP)" <cchrist at mcpsoftworks.com> writes:

> Package: cyrus-sasl2
> Version: 2.1.22.dfsg1-19
> Severity: wishlist
>
> Shortdescription: Patch fixes NTLM authentication bug introduced with
> Outlook 2007 (where digest-md5 also fails), when connecting to any sasl
> enabled system with realm support, where username is matched against
> username at maildomain.tld  in any sasl backend (%u@%r via postfix,
> cyrus-imapd, courier, etc...).

+	// patch by office at chcnet.net
+	// rights: GPL

Alas, that means that Debian cannot incorporate the patch, nor will
upstream take it.  Adding GPL'd code to Cyrus SASL would require
distributing the Cyrus SASL library under the GPL, which then means that
it cannot be linked with any other project that's under a GPL-incompatible
license, which is pretty much a non-starter.

Perhaps the patch author didn't really mean that.  Sometimes people say
"GPL" when they actually mean "free software" or "the same license as the
thing that I'm patching," not realize that GPL means something else and
something very specific.

-- 
Russ Allbery (rra at debian.org)               <http://www.eyrie.org/~eagle/>