[imp] :: courier-imap auth problerms ::

[jlewis at lewis.org]

This is a bug in the string handling of vpopmail-5.2.1.  It doesn't 
actually cause problems in vpopmail, but the courier code breaks on it.

In fact, here's a message I sent to the author of Courier back in mid 
2002.

 I finally got a chance to track this down.  As you suggested, the error 
 is in vpopmail, in their parse_email function.  After finding the bug and 
 coming up with a fix, I decided to look at their latest development 
 snapshot to see if/how they'd fixed it.  According to the changelog, they 
 fixed this several months ago, and apparently since then have totally 
 rewritten parse_email anyway.  The odd thing is, people are still posting 
 to their mailing list about this problem and not getting helpful replies.

 I don't feel like installing/running their latest development version to 
 get a fix for this, so I'll just stick with my memset(User, 0, 
 sizeof(User)); workaround for now.

The following patch to courier should work around the bug, assuming you're 
seeing the same problem I was.

--- courier-imap-1.5.1/authlib/preauthvchkpw.c  Sat Feb  2 00:06:35 2002
+++ courier-imap-1.5.1.20020715/authlib/preauthvchkpw.c Wed Mar 19 
21:41:55 2003
@@ -41,6 +41,11 @@
 static char Domain[100];
 
 
+/* hack to workaround authdaemond/vpopmail user corruption bug */
+       memset(User, 0, sizeof(User));
+       memset(Domain, 0, sizeof(Domain));
+/* end of hack */
+
        memset(&auth, 0, sizeof(auth));
 
        usercopy=strdup(userid);

I've been running this code for about 8 months now.

On Wed, 19 Mar 2003, Jerome Walters wrote:

> Hello Folks,
> 
> I have some problems with the courier imap while using IMP. Frequently when
> I am trying to login to the IMP using imap/notls and imap/ssl connection (i
> tried both) I am getting the following errors from the courier imap:
> 
> =======================================================
> Mar 19 15:44:22 vanilla imapd-ssl: Connection, ip=[::ffff:111.111.111.111]
> Mar 19 15:44:27 vanilla imapd-ssl: LOGIN FAILED, ip=[::ffff:111.111.111.111]
> Mar 19 15:44:37 vanilla last message repeated 2 times
> Mar 19 15:44:37 vanilla imapd-ssl: LOGOUT, ip=[::ffff:111.111.111.111]
> =======================================================
> 
> I am attaching also the strace from the authdaemond.plain as I think that
> the problem is in the courier-imapd.
> 
> I am using the following software:
> 
> qmail-1.03(tls patched to allow ssl smtpd)
> vpopmail-5.2.1
> courier-imap-1.7.0.20030311
> horde-2.2.1
> imp-3.2.1
> 
> My courier imapd is set to use authvchkpw for authenfication daemon as I am
> using vpopmail.
> I guess this is a courier-imap issue but I wanted to ask if you ever faced
> this problem before??
> 
> Regards,
> Jerome Walters
> 
> 
> -- 
> IMP mailing list
> Frequently Asked Questions: http://horde.org/faq/
> To unsubscribe, mail: imp-unsubscribe at lists.horde.org
> 

----------------------------------------------------------------------
 Jon Lewis *jlewis at lewis.org*|  I route
 System Administrator        |  therefore you are
 Atlantic Net                |  
_________ http://www.lewis.org/~jlewis/pgp for PGP public key_________