[nflug] Fw: Bug in imap_auth.c

Robert Wolfe robertwolfe at localnet.com
Fri Oct 26 08:57:02 EDT 2007


For those that use qmail-ldap (ok, I'm a PostFix->QMAIL-LDAP convert <G>), it looks like a small clustering-related bug was found in the 20060201 release of qmail-ldap:

Begin forwarded message:

Date: Fri, 26 Oct 2007 11:04:59 +0200 (CEST)
From: "Minsoul Michel" <Michel.Minsoul at ulg.ac.be>
To: qmail-ldap at qmail-ldap.org
Cc: jeker at n-r-g.com
Subject: Bug in imap_auth.c


Hi,

There is a bug in the file imap_auth.c from qmail-ldap-20060201.
When clustering is enabled (QLDAP_CLUSTER) and IMAP session forwarding
is used, the password is not correctly escaped in the auth_forward function
preventing the user from doing a successful login if its password contains
characters (like '}', '"', ...) which must be escaped.

A patch for imap_auth.c is provided hereafter.

-----
Michel MINSOUL
SEGI, University of Liege
B26 - Sart Tilman
B-4000 Liege (Belgium)
VOICE: +32 4 3664977
FAX:   +32 4 3662920
mailto: x at y (with x=Michel.Minsoul y=ulg.ac.be)


-- 
     Robert Wolfe (robertwolfe at localnet.com) | Systems Administrator
       LocalNet Corp | Williamsville, NY | http://www.localnet.com
-------------- next part --------------
A non-text attachment was scrubbed...
Name: auth_imap.c.patch
Type: application/octet-stream
Size: 1631 bytes
Desc: not available
Url : http://www.nflug.org/pipermail/nflug/attachments/20071026/e49cee14/auth_imap.c.obj


More information about the nflug mailing list