problem with xfer from 2.3.15 to 2.4.17

[gavin.gray at ed.ac.uk]

Hi there,

We are have been running a cyrus imap 2.3.15 murder for some time, we have 
intoduced some new cyrus 2.4.17 backends into that murder and would like 
to migrate users to these new machines, however xfer's are failing for 
this reason:

Mar 24 12:16:22 backend.server imap[2370]: [ID 160988 
local6.error] possible MITM attack:list of available SASL mechanisms 
changed
Mar 24 12:16:22 backend.server imap[2370]: [ID 872191 
local6.error] Could not move mailbox: user.imaptest, Initial backend 
connect failed

we believe this is to to do with the list of SASL auth mechanisms 
returned in the capability string from a server before and after a login, 
but we can't see what is causing the mismatch or how to resolve. Any ideas 
gratefully appreciated.

The strange thing is GSSAPI logins work  fine between the servers in
question.

here are some details of the 2.3.15 and 2.4.17 backends in question:

name       : Cyrus IMAPD
version    : v2.4.17 d1df8aff 2012-12-01
vendor     : Project Cyrus
support-url: http://www.cyrusimap.org
os         : SunOS
os-version : 5.11
environment: Built w/Cyrus SASL 2.1.23
              Running w/Cyrus SASL 2.1.23
              Built w/Berkeley DB 4.7.25: (May 15, 2008)
              Running w/Berkeley DB 4.7.25: (May 15, 2008)
              Built w/OpenSSL 1.0.0e 6 Sep 2011
              Running w/OpenSSL 1.0.0e 6 Sep 2011
              Built w/zlib 1.2.3
              Running w/zlib 1.2.3
              CMU Sieve 2.4
              NET-SNMP
              mmap = shared
              lock = fcntl
              nonblock = fcntl
              idle = idled

C: C01 CAPABILITY
S: * CAPABILITY IMAP4rev1 LITERAL+ ID ENABLE ACL RIGHTS=kxte QUOTA 
MAILBOX-REFERRALS NAMESPACE UIDPLUS NO_ATOMIC_RENAME UNSELECT CHILDREN 
MULTIAPPEND BINARY CATENATE CONDSTORE ESEARCH SORT SORT=MODSEQ 
SORT=DISPLAY THREAD=ORDEREDSUBJECT THREAD=REFERENCES ANNOTATEMORE 
LIST-EXTENDED WITHIN QRESYNC SCAN XLIST URLAUTH URLAUTH=BINARY X-NETSCAPE 
MUPDATE=mupdate://mupdate-ucs.www-dyn.ed.ac.uk/ LOGINDISABLED AUTH=GSSAPI 
COMPRESS=DEFLATE IDLE

and

name       : Cyrus IMAPD
version    : v2.3.15 2009/09/09 12:35:48
vendor     : Project Cyrus
support-url: http://cyrusimap.web.cmu.edu
os         : SunOS
os-version : 5.11
environment: Built w/Cyrus SASL 2.1.15
              Running w/Cyrus SASL 2.1.23
              Built w/Berkeley DB 4.7.25: (May 15, 2008)
              Running w/Berkeley DB 4.7.25: (May 15, 2008)
              Built w/OpenSSL 1.0.0e 6 Sep 2011
              Running w/OpenSSL 1.0.0e 6 Sep 2011
              Built w/zlib 1.2.3
              Running w/zlib 1.2.3
              CMU Sieve 2.3
              mmap = shared
              lock = fcntl
              nonblock = fcntl
              idle = idled

C: C01 CAPABILITY
S: * CAPABILITY IMAP4 IMAP4rev1 LITERAL+ ID 
MUPDATE=mupdate://mupdate-ucs.www-dyn.ed.ac.uk/ LOGINDISABLED AUTH=GSSAPI 
COMPRESS=DEFLATE ACL RIGHTS=kxte QUOTA MAILBOX-REFERRALS NAMESPACE UIDPLUS 
NO_ATOMIC_RENAME UNSELECT CHILDREN MULTIAPPEND BINARY SORT SORT=MODSEQ 
THREAD=ORDEREDSUBJECT THREAD=REFERENCES ANNOTATEMORE CATENATE CONDSTORE 
SCAN IDLE LISTEXT LIST-SUBSCRIBED X-NETSCAPE URLAUTH



Gavin Gray
Edinburgh University Information Services
Rm 2013 JCMB
Kings Buildings
Edinburgh
EH9 3JZ
UK
tel +44 (0)131 650 5987
email gavin.gray at ed.ac.uk

--
The University of Edinburgh is a charitable body, registered in
Scotland, with registration number SC005336.