[imp] IMP's login and password expiring

Chuck Hagenbuch chuck at horde.org
Fri Apr 18 21:24:19 UTC 2008


Quoting Arminas <g.arminas at gmail.com>:

> I am not sure if it is correct mailing list, but I have one specific
> need from IMP's login screen. All I want to do, that if user tries to
> login to mail server and his password is expired, some message is
> shown (for egzample: "Your password is expired. Please change your
> password www.passwordchange.com" or smth..) I am using IMAP protocol
> to connect to mail server. Here is that I can get from server if I use
> command echo print_r(); command:
>
> Array ( [0] => SECURITY PROBLEM: insecure server advertised AUTH=PLAIN
> [1] => Retrying PLAIN authentication after Password expired [2] =>
> SECURITY PROBLEM: insecure server advertised AUTH=PLAIN [3] =>
> Retrying PLAIN authentication after Password expired [4] => SECURITY
> PROBLEM: insecure server advertised AUTH=PLAIN [5] => Can not
> authenticate to IMAP server: Password expired )

If you look at the status() function in imp/lib/IMP.php, you'll see  
some code for dealing with imap_alert(), which retrieves those server  
alerts. They're only displayed when the stream was successfully  
opened, though, which of course isn't the case on a login failure.

I'm not sure of the best way to do it, but having a login failure hook  
might be useful. Or you could just hack this into your local install  
(probably in imp/login.php, after a login fails), which would  
certainly be simpler.

-chuck

-- 
"I have concerns that we are not behaving like a mature, responsible,  
collection of interdependent organisms." - Rick O.


More information about the imp mailing list