[Tickets #8996] Re: accidental whitespace in username causing problems in session

[bugs at horde.org]

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: http://bugs.horde.org/ticket/8996
------------------------------------------------------------------------------
  Ticket             | 8996
  Updated By         | Michael Slusarz <slusarz at horde.org>
  Summary            | accidental whitespace in username causing problems in
                     | session
  Queue              | IMP
  Version            | 4.3.6
  Type               | Bug
-State              | Unconfirmed
+State              | Feedback
  Priority           | 2. Medium
  Milestone          |
  Patch              |
  Owners             |
------------------------------------------------------------------------------


Michael Slusarz <slusarz at horde.org> (2010-04-29 14:47) wrote:

Theoretically, your fix is incorrect.  Per RFC 3501, a username is  
allowed to have spaces.  I personally can't think of a rational  
situation where a username would have leading/trailing whitespace, but  
those are the rules.

However, c-client should be sending the username in a quoted string  
and/or a literal.  So these logins *should* be failing in the first  
place (the expected behavior) since "user " != "user".  So either  
PHP/c-client is internally trimming the whitespace on the username in  
an imap_open() call, it is sending the username without quoting, or  
cyrus is ignoring the trailing whitespace.  I would guess the 1st, but  
you would have to do IMAP logging on the cyrus side to verify.