[Tickets #10680] Re: Authentication via IMP does fail for some passwords while using IMAP directly does work

[bugs at horde.org]

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: http://bugs.horde.org/ticket/10680
------------------------------------------------------------------------------
  Ticket             | 10680
  Updated By         | Michael Slusarz <slusarz at horde.org>
  Summary            | Authentication via IMP does fail for some passwords
                     | while using IMAP directly does work
  Queue              | Kronolith
  Version            | Git master
  Type               | Bug
  State              | Unconfirmed
  Priority           | 2. Medium
  Milestone          |
  Patch              |
  Owners             |
------------------------------------------------------------------------------


Michael Slusarz <slusarz at horde.org> (2011-11-22 15:17) wrote:

> Looking at the output it may contain sensitive data, right? At least  
> there a password string in the imap object output - which does not  
> macht the password from the credentials debug output:
>
> ["password"]=>
>     string(16) "?k	)?b?.p??\?"

No, this should be correct.  The password is encrypted within the session.

The only way to debug this will be to find out exactly what Horde is  
sending to the IMAP server as a password.  And this will either  
require you to set up debugging on your IMAP server or by manually  
entering debug statements in the IMAP client code  
(Horde_Imap_Client_Socket class - _tryLogin() function).