[Tickets #8012] Re: IMAP Login Loging Fail Message

[bugs at horde.org]

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: http://bugs.horde.org/ticket/8012
------------------------------------------------------------------------------
  Ticket             | 8012
  Updated By         | Michael Slusarz <slusarz at horde.org>
  Summary            | IMAP Login Loging Fail Message
  Queue              | IMP
  Version            | 4.3.3
  Type               | Bug
  State              | Not A Bug
  Priority           | 3. High
  Milestone          |
  Patch              | 1
  Owners             |
------------------------------------------------------------------------------


Michael Slusarz <slusarz at horde.org> (2009-02-20 12:31) wrote:

Normally I wouldn't reply to this kind of crap, but in the off-chance  
that someone would read this bug and be confused/misinformed...

> This is not about password only, is in general, check your client
> well it is sending the username in a clearly violation of what you
> had copy above "the client MUST wait
> to receive a command continuation request (described later in
> this document) before sending the octet data (and the remainder
> of the command)"

Which is *exactly* what we do.  Line 442 we send the literal length of  
the password (the string length between the {}).  On line 443-444, we  
check to make sure the server sends back the command continuation  
request before continuing.  And then on line 445, if that happens, we  
send the octet data (the actual password string).  Considering we are  
doing exactly what you say we should be doing, I really have no idea  
what else to say.