[Tickets #3653] NEW: IMAP/Client.java: choosing auth method

Sat Mar 18 10:12:34 PST 2006

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: http://bugs.horde.org/ticket/?id=3653
-----------------------------------------------------------------------
 Ticket             | 3653
 Created By         | a at example.com
 Summary            | IMAP/Client.java: choosing auth method
 Queue              | IMP
 Version            | HEAD
 State              | Unconfirmed
 Priority           | 1. Low
 Type               | Bug
 Owners             | 
-----------------------------------------------------------------------

a at example.com (2006-03-18 10:12) wrote:

It's not realy a bug in function 'login', but it is not the intended
behaviour:

In lines 479-481 it is said that no special authentication is needed for
encrypted connections. But in the lines starting with 489 there is chosen
'CRAM-MD5' or 'DIGEST-MD5' instead of 'plain'.

The reason is in line 489:
if ((!$this->_usessl || !$this->_usetls) && !empty($auth_methods))

The '||' should be a '&&'. Only a not encrypted connection (!$this->_usessl
&& !$this->_usetls) needs 'CRAM-MD5' or 'DIGEST-MD5'.