[Tickets #10680] Re: Authentication via IMP does fail for some passwords while using IMAP directly does work

bugs at horde.org bugs at horde.org
Sun Nov 27 21:05:13 UTC 2011


DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: http://bugs.horde.org/ticket/10680
------------------------------------------------------------------------------
  Ticket             | 10680
  Updated By         | Michael Slusarz <slusarz at horde.org>
  Summary            | Authentication via IMP does fail for some passwords
                     | while using IMAP directly does work
  Queue              | Kronolith
  Version            | Git master
  Type               | Bug
-State              | Unconfirmed
+State              | Assigned
-Priority           | 2. Medium
+Priority           | 1. Low
  Milestone          |
  Patch              |
-Owners             |
+Owners             | Michael Slusarz
------------------------------------------------------------------------------


Michael Slusarz <slusarz at horde.org> (2011-11-27 14:05) wrote:

> I can tell you what my imap server does receive from horde, like  
> mentioned in comment #9, thats the dovecot auth output:
>
> MD5-CRYPT(;3<9A><CA><F1><B2>g:<FC><F1><F8>g<E3><FD><96>*) !=
> '$1$a0dd526a$POYliZyTPtYiz.FGbo.0H0'
>
> So it did receive this:
>
> ;3<9A><CA><F1><B2>g:<FC><F1><F8>g<E3><FD><96>*

It *looks* like the IMAP server is being sent the encrypted version of  
the password rather than the plaintext version.  The question becomes  
why this is happening?





More information about the bugs mailing list