Ticket #1484700 (closed Bugs: fixed)

Opened 13 months ago

Last modified 10 months ago

Authentication agains virtusertable fails beacuse of escape

Reported by: jaume Owned by: thomasb
Priority: 5 Milestone: 0.1.1
Component: PHP backend Version: 0.1-rc2
Severity: minor Keywords:
Cc: jaume

Description

I'm using roundcube for multidomain webmail hosting, with the login screen having to supply username/password/server. There is a bug authenticating users against /etc/mail/virtusertable. Users can't login to Roundcube because of a escape of the @ in that file. See:

[root@server]# cat /etc/mail/virtusertable user1@… user1\@domain.com user2@… user2\@domain.com user3@… user3\@domain.com [root@server]#

--This errors are logged: In /var/log/messages/ see that user couldn't be retrieved from virtusertable:

Dec 21 09:47:14 server dovecot: imap-login: Disconnected: method=PLAIN, rip=::ffff:xxx.xx.xxx.xxx, lip=::ffff:xxx.xx.xxx.xxx, secured

And in Roundcube error log:

[21-Dec-2007 10:14:03 +0100] IMAP Error: Authentication for user1\@domain.com failed (LOGIN): "a001 NO Authentication failed." in on line 0

So I have workarounded the problem with a cron that copies the /etc/mail/virtusertable and removes the escapes and use this cleaned file /etc/mail/virtusertable_no_escapes in $rcmail_configvirtuser_file? , and all works correctly.

How can I make roundcube clean that \ so i can use the system virtusertable and not my cleaned one?

System: Latest Roundcube version, Centos 5, Dovecot, Sendmail, php5.2.5, mysql5.0.22, Apache2.2.3

Change History

Changed 13 months ago by jaume

I messed the virtusertable file display, here again:

[root@server]# cat /etc/mail/virtusertable

user1@… user1\@domain.com

user2@… user2\@domain.com

user3@… user3\@domain.com

[root@server]#

Changed 12 months ago by thomasb

  • owner set to thomasb
  • status changed from new to assigned
  • component changed from IMAP connection to PHP backend
  • severity changed from normal to minor

Hmm, is escaping common in virtuser files?

Changed 11 months ago by seansan

  • cc jaume added
  • milestone set to 0.1.1

Awaiting feedback - for now moved to 0.1.1 - move to later withouot feedback

Changed 10 months ago by thomasb

  • status changed from assigned to closed
  • resolution set to fixed

I don't know if such escaping is common but I guess we don't break anything when str-replacing \@ Fixed in r1202

Note: See TracTickets for help on using tickets.