[horde] Login to IMP with non existing username

[Michael Gröne]

I just noticed odd behaviour when logging in to horde (over app=imp)  
with an non-existing mailaddress.

Though the following errors are logged, I got into horde (for sure not  
logged in in IMP) and can view calendars ("fasdf" gets even his own  
calendar), etc.

How to avoid this? Is this a bug or a feature?


2011-06-07T15:58:54+02:00 ERR: HORDE [imp] IMAP server denied  
authentication. [pid 9953 on line 340 of  
"/var/www/horde4/imp/lib/Imap.php"]
2011-06-07T15:58:54+02:00 ERR: HORDE [horde] FAILED LOGIN for fasdf  
[130.75.153.161] to Horde [pid 9953 on line 182 of  
"/var/www/horde4/login.php"]


Configuration as follows:
$conf['auth']['params']['admin_driver']['driver'] = 'customsql';
$conf['auth']['params']['admin_driver']['params']=array(
         "driverconfig"=>"custom",
         "phptype"=>"mysql",
         "protocol"=>"unix",
         "hostspec"=>"localhost",
         "username"=>"asdff",
         "password"=>"asdff",
         "database"=>"standard_django_pcdb",
         "splitread"=>false,
         "table"=>"pcinventory_zewuser",
         "username_field"=>"email_zew",
         "password_field"=>"",
         "query_auth"=>"SELECT * FROM pcinventory_zewuser WHERE  
email_zew='\L'",
         "query_add"=>"",
         "query_list"=>"SELECT email_zew as username FROM  
pcinventory_zewuser WHERE email_zew<>''",
         "query_exists"=>"",
         "query_getpw"=>"",
         "query_update"=>"",
         "query_resetpassword"=>"",
         "query_remove"=>""
);



$conf['auth']['params']['auth_driver']['driver'] = 'application';
$conf['auth']['params']['auth_driver']['params'] =array(
         "app"=>"imp"
);


-- 
Michael Gröne

ZELSW - Zentrale Einrichtung Lehre, Studium und Weiterbildung
Abt.3: Weiterbildung (ehemals ZEW)
EDV
Leibniz Universität Hannover
Schloßwender Str. 5
30159 Hannover

Tel. +49 511 762 5437
Fax: +49 511 762 5686
http://www.zew.uni-hannover.de