[dev] passwd roadmap: IMP chicken/egg

Ralf Lang lang at b1-systems.de
Sat Dec 29 11:45:49 UTC 2012


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Am 29.12.2012 09:54, schrieb Ralf Lang:
> Am 28.12.2012 22:14, schrieb Jan Schneider:
> 
>> Zitat von Michael M Slusarz <slusarz at horde.org>:
> 
>>> Quoting Jan Schneider <jan at horde.org>:
>>> 
>>>> Zitat von Ralf Lang <lang at b1-systems.de>:
>>>> 
>>>>> Are there any showstopper bugs before an alpha1-release of
>>>>>  passwd H5?
>>>> 
>>>> I think the IMP-authentication-resetting *is* a showstopper.
>>> 
>>> Isn't this also a gollem showstopper?  Meaning that you can 
>>> authenticate to a VFS backend and these credentials are cached?
>>>  (I realize that gollem hasn't been formally released yet).
> 
>> Yes, sure, we need a general solution for resetting credentials 
>> inside applications.
> 
> I created an enhancement ticket. 
> http://bugs.horde.org/ticket/11924
> 
> Still I think the logout on change option would be a sufficient
> fix for now.
> 

https://github.com/horde/horde/tree/passwd_core_imp_reauth

I have created a branch now with three changes:

A new Horde_Registry_Application API authReauthenticate
A change in Passwd to call this for all apps
A handler for the callback in imp.

The latter is flawed. As in my original, rejected attempt, imp
_authenticated() will get called before authReauthenticate can replace
the imap object. _authenticated() tries to access the old invalid IMAP
connection and throws an exception, ultimately leading to a fatal "IMP
NOT ACTIVATED".

- -- 
Ralf Lang
Linux Consultant / Developer
Tel.: +49-170-6381563
Mail: lang at b1-systems.de
B1 Systems GmbH
Osterfeldstraße 7 / 85088 Vohburg / http://www.b1-systems.de
GF: Ralph Dehner / Unternehmenssitz: Vohburg / AG: Ingolstadt,HRB 3537
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.19 (GNU/Linux)
Comment: Using GnuPG with undefined - http://www.enigmail.net/

iEYEARECAAYFAlDe1+0ACgkQCs1dsHJ/X7D5OACeIuoiAZJw+mWO6m3pUnrHt39T
qnsAoJPMXr+5dMVC0paV59NHabHXAQNT
=kRZi
-----END PGP SIGNATURE-----


More information about the dev mailing list