[imp] Login Fails when password contains backslash

[Pape, Michael J.]

Thanks of the reply,

I tried this (using UW imap-2001a), with some interesting results. When
using a password without the "\" both the quoted and un-quoted passwords
worked fine. However when I tried to login directly to imapd using a
password with a backslash, it fails in both instances. What does work is
to dereference the backslash with an additional backslash and quote it.
i.e., for a user named "test" and a password of "test\", I get:
.
.
.
a1 login test test\
a1 BAD Missing or invalid argument to LOGIN
a1 login test "test\"
a1 BAD Missing or invalid argument to LOGIN
a1 login test test\\
a1 BAD Missing or invalid argument to LOGIN
a1 login test "test\\"
a1 OK [CAPABILITY IMAP4REV1 IDLE NAMESPACE MAILBOX-REFERRALS SCAN SORT
THREAD=REFERENCES THREAD=ORDEREDSUBJECT MULTIAPPEND] User test
authenticated
a2 logout
* BYE idol.union.edu IMAP4rev1 server terminating connection
a2 OK LOGOUT completed
.
.
.

I guess the question now is -- What is IMP delivering to imapd...


Mike



-----Original Message-----
From: George A. Theall [mailto:theall@macp.org] 
Sent: Friday, June 14, 2002 5:30 PM
To: Pape, Michael J.
Subject: Re: [imp] Login Fails when password contains backslash

Quoting "Pape, Michael J." <papem@union.edu>:

> Users with a backslash in their password are denied login ("Login
> failed
> for some reason. Most likely your username or password was entered
> incorrectly".) Tru64 Unix has no problem with this, so I'm leaning
> towards a problem with IMP/Horde - is there are config. option that
> I've
> missed?

I ran into a problem similar to this, but in my case it involved the
character ']'.  I discovered that clients such as Outlook Express and
Netscape were quoting the password sent to the IMAP server while IMP
(v2.2.6 with University of Washington's c-client 2001a) did not.  And
the unquoted password in this case was triggering a bug in my IMAP
server (OpenMail B.06).

To see whether this is the problem, use telnet to log in.  For example,
if your username is "papem" and password's "nice_try", connect to port
143 on the IMAP host and send the line:

    a1 login papem "nice_try"

followed by:

    a2 logout

Now reconnect and try to authenticate again but this time don't quote
the password.  What happens each time?

George
--
theall@macp.org