[Tickets #8245] FTP auth fail if you have configured a realm

[bugs at horde.org]

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: http://bugs.horde.org/ticket/8245
------------------------------------------------------------------------------
  Ticket             | 8245
  Created By         | mayala at unex.es
  Summary            | FTP auth fail if you have configured a realm
  Queue              | Forwards
  Version            | 3.1
  Type               | Bug
  State              | Unconfirmed
  Priority           | 2. Medium
  Milestone          |
  Patch              |
  Owners             |
------------------------------------------------------------------------------


mayala at unex.es (2009-05-06 06:38) wrote:

We have a FRAMEWORK_3 installation of horde, imp, forwards, etc.

The horde auth is set as "let a Horde app..." and IMP is doing the  
user auth with a local imap service:

// $servers['imap'] = array(
//    'name' => 'alcazaba',
//    'server' => 'localhost',
//    'hordeauth' => false,
//    'protocol' => 'imap/notls',
//    'port' => 143,
//    'maildomain' => 'alcazaba.unex.es',
//    'smtphost' => 'localhost',
//    'smtpport' => 25,
//    'realm' => 'alcazaba.unex.es',
//    'preferred' => '',
//);

We have defined a realm to allow many others users of other servers to  
auth and not mix the users accounts.

This is our forwards config:

// $conf['server']['params']['default']['host'] = 'localhost';
// $conf['server']['params']['default']['port'] = 8051;
// $conf['server']['params']['default']['pasv'] = false;
// $conf['server']['params']['default']['ssl'] = false;
// $conf['server']['driver'] = 'forwards';
// $conf['enabled']['keeplocal'] = true;
// $conf['enabled']['authenticate'] = false;
// $conf['enabled']['fullemail'] = false;
// $conf['user']['refused'] = array('root', 'bin', 'daemon', 'adm',  
'lp', 'shutdown', 'halt', 'uucp', 'ftp', 'anonymous', 'nobody',  
'httpd', 'operator', 'guest', 'diginext', 'bind', 'cyrus', 'courier',  
'games', 'kmem', 'mailnull', 'man', 'mysql', 'news', 'postfix',  
'sshd', 'tty', 'www');
// $conf['menu']['apps'] = array();

This way, the app don't work. Always the user who try to auth is  
<user>@<realm> and the ftp driver can't auth it because it espects  
only <user>.

On the Vacation module this is solved on config setting the parameter:

// $conf['server']['params']['default']['norealm'] = true

and checking this on the code.

As a workaround we have copied some code from vacation and added it to  
forwards for made the things to work:

on Driver.php at the Forwards_Driver() construct function you have coded:

//        $this->_params = $params;
//        $this->_user = $user;

and we have added:

//        $this->_params = $params;
//>       if (explode('@', $user, 2)) {
//>           @list($user,) = explode('@', $user, 2);
//>       }
//        $this->_user = $user;

This way the module works on our installation with the indicated  
configuration.

May be you can add some parameter on configuration like the vacation  
one and check it to allow this kind of environmente to work.

Thanks!

Manuel P. Ayala
mayala at unes.es

F. Biblioteconomía y Documentación
Universidad de Extremadura
Badajoz (Spain)