[Tickets #8996] Re: accidental whitespace in username causing problems in session

[bugs at horde.org]

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: http://bugs.horde.org/ticket/8996
------------------------------------------------------------------------------
  Ticket             | 8996
  Updated By         | bpoyner at ccac.edu
  Summary            | accidental whitespace in username causing problems in
                     | session
  Queue              | IMP
  Version            | 4.3.6
  Type               | Bug
  State              | Not A Bug
  Priority           | 2. Medium
  Milestone          |
  Patch              |
  Owners             |
------------------------------------------------------------------------------


bpoyner at ccac.edu (2010-05-03 13:38) wrote:

I did some further testing and it appears Cyrus is stripping the  
whitespace from the username, but only under certain circumstances.  I  
was reading my tcpdump packets wrong, php / c-client are putting  
quotes around the username as expected.

If there is nothing but white space around the username, Cyrus is  
stripping all whitespace:

* OK cyrus.ccac.edu Cyrus IMAP4 v2.2.12-Invoca-RPM-2.2.12-10.el4_8.4  
server ready
00001 login "       testmail    " password
00001 OK User logged in
00002 logout
* BYE LOGOUT received
00002 OK Completed

May  3 13:35:25 cyrus imap[15802]: login: cyrus [127.0.0.1] testmail  
plaintext User logged in

If Cyrus sees characters separated by white space, the exact username  
specified is used.

* OK cyrus.ccac.edu Cyrus IMAP4 v2.2.12-Invoca-RPM-2.2.12-10.el4_8.4  
server ready
00001 login "          testmail   xxx" password
00001 NO Login failed: authentication failure
0002 logout
* BYE LOGOUT received
0002 OK Completed

May  3 13:37:16 cyrus imap[16876]: badlogin: cyrus [127.0.0.1]  
plaintext           testmail   xxx SASL(-13): authentication failure:  
checkpass failed