[Tickets #10228] Re: Add API methods to reset cached credentials inside applications

[bugs at horde.org]

DO NOT REPLY TO THIS MESSAGE. THIS EMAIL ADDRESS IS NOT MONITORED.

Ticket URL: http://bugs.horde.org/ticket/10228
------------------------------------------------------------------------------
  Ticket             | 10228
  Updated By         | azurit at pobox.sk
  Summary            | Add API methods to reset cached credentials inside
                     | applications
  Queue              | Horde Framework Packages
  Version            | Git master
  Type               | Enhancement
  State              | Resolved
  Priority           | 2. Medium
  Milestone          |
  Patch              |
  Owners             | Jan Schneider
------------------------------------------------------------------------------


azurit at pobox.sk (2011-12-18 17:01) wrote:

I started to digging deeper into this and i found out something  
interesting. When password is changed it is reseted in cache via  
resetCredentials function. This function is reseting password stored  
in memory (in session). Problem is that password from session is NEVER  
used for logging into IMAP server.

Login to IMAP is done via Horde_Imap_Client which takes login and  
password as argument (in $params) and these values are set ONLY in  
constructor (this is done by Horde/IMP in createImapObject function  
called in Auth.php). Problem is that IMAP object is initialized only  
ONCE per IMAP login in our installation - so, when password changes,  
it is correctly updated in session but gets NEVER updated in IMAP  
object. I was doing some debug logging inside Horde and Horde/IMP and  
it is really like this, constructor for Horde_Imap_Client is called  
only once per login, the IMAP object is probably serialized and cached  
somewhere.