List Info

Thread: imapd sends invalid line when attempting to authenticate empty user name




imapd sends invalid line when attempting to authenticate empty user name
user name
2006-05-25 05:35:37
The following issue has been RESOLVED. 
============================================================
========== 
http://w
ww.dbmail.org/mantis/view.php?id=352 
============================================================
========== 
Reported By:                windowsrefund
Assigned To:                aaron
============================================================
========== 
Project:                    DBMail
Issue ID:                   352
Category:                   IMAP daemon
Reproducibility:            always
Severity:                   major
Priority:                   normal
Status:                     resolved
Resolution:                 fixed
Fixed in Version:           SVN Trunk
============================================================
========== 
Date Submitted:             24-May-06 23:27 CEST
Last Modified:              25-May-06 07:35 CEST
============================================================
========== 
Summary:                    imapd sends invalid line when
attempting to
authenticate empty user name
Description: 
This problem was found against SVN 2124. More information
here:

https://secure.renaissoft.com/maia/ticket/335#preview
============================================================
========== 

------------------------------------------------------------
---------- 
 aaron - 25-May-06 01:13  
------------------------------------------------------------
---------- 
At a high traceleve, do you see a line like this:

dbmail-imapsession.c,dbmail_imap_session_handle_auth: trying
to validate
user [(null)], pass [whatevr]

If so, then we're letting a null value through to the
database code and it
doesn't like that. 

------------------------------------------------------------
---------- 
 windowsrefund - 25-May-06 01:34  
------------------------------------------------------------
---------- 
Arron,

Yep.

May 24 17:41:23 xen-mail dbmail/imap4d[27873]:
imap4.c,IMAPClientHandler:
Executing command login...
May 24 17:41:23 xen-mail dbmail/imap4d[27873]:
dbmail-imapsession.c,dbmail_imap_session_handle_auth: trying
to validate
user [], pass [XXXX]
May 24 17:41:23 xen-mail dbmail/imap4d[27873]:
dbmysql.c,db_query: query
[SELECT userid FROM dbmail_usermap WHERE 1 = 2]
May 24 17:41:23 xen-mail dbmail/imap4d[27873]:
db.c,db_use_usermap:
enabling usermap lookups
May 24 17:41:23 xen-mail dbmail/imap4d[27873]:
db.c,db_usermap_resolve:
checking userid '' in usermap
May 24 17:41:23 xen-mail dbmail/imap4d[27873]:
db.c,db_usermap_resolve:
client on inet socket [inet:10.0.0.184:143]
May 24 17:41:23 xen-mail dbmail/imap4d[27873]:
dbmysql.c,db_query: query
[SELECT login, sock_allow, sock_deny, userid FROM
dbmail_usermap WHERE
login in ('(null)','ANY') ORDER BY sock_allow,
sock_deny]
May 24 17:41:23 xen-mail dbmail/imap4d[27873]:
db.c,db_usermap_resolve:
login '' not found in usermap
May 24 17:41:23 xen-mail dbmail/imap4d[27873]:
dbmail-imapsession.c,dbmail_imap_session_handle_auth: user
(id:0, name )
tries login
 ]y 24 17:41:23 xen-mail dbmail/imap4d[27873]: RESPONSE: [*
BYE internal
db error validating user 

------------------------------------------------------------
---------- 
 aaron - 25-May-06 07:35  
------------------------------------------------------------
---------- 
Resolved in SVN 2133. 

Issue History 
Date Modified   Username       Field                   
Change               
============================================================
========== 
24-May-06 23:27 windowsrefund  New Issue                    
               
25-May-06 01:13 aaron          Note Added: 0001193          
               
25-May-06 01:34 windowsrefund  Note Added: 0001194          
               
25-May-06 07:35 aaron          Status                   new
=> resolved     
25-May-06 07:35 aaron          Fixed in Version         
=> SVN Trunk       
25-May-06 07:35 aaron          Resolution               open
=> fixed       
25-May-06 07:35 aaron          Assigned To              
=> aaron           
25-May-06 07:35 aaron          Note Added: 0001195          
               
============================================================
==========

_______________________________________________
Dbmail-dev mailing list
Dbmail-devdbmail.org
http://twister.fastxs.net/mailman/listinfo/dbmail-dev
[1]

about | contact  Other archives ( Real Estate discussion Medical topics )