Thread: [ postfixadmin-Bugs-3094804 ] passwords are escaped - ' and " let folder creation fail
Brought to you by:
christian_boltz,
gingerdog
From: SourceForge.net <no...@so...> - 2010-10-25 12:35:50
|
Bugs item #3094804, was opened at 2010-10-25 14:35 Message generated for change (Tracker Item Submitted) made by christian_boltz You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=937964&aid=3094804&group_id=191583 Please note that this message will contain a full copy of the comment thread, including the initial issue submission, for this request, not just the latest update. Category: Core Group: None Status: Open Resolution: None Priority: 5 Private: No Submitted By: Christian Boltz (christian_boltz) Assigned to: Nobody/Anonymous (nobody) Summary: passwords are escaped - ' and " let folder creation fail Initial Comment: create-mailbox: If a password contains ' or ", the IMAP login done by postfixadmin to create some folders fail because the password is escaped (\' and \"). We should hand over non-escaped password to create_mailbox_subfolders() and (most probably) pacrypt(). Important: We need to check if we need escaping before handing over the password to dovecotpw. Reported by gencha_ on IRC. ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=937964&aid=3094804&group_id=191583 |
From: SourceForge.net <no...@so...> - 2012-05-28 19:18:29
|
Bugs item #3094804, was opened at 2010-10-25 05:35 Message generated for change (Comment added) made by christian_boltz You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=937964&aid=3094804&group_id=191583 Please note that this message will contain a full copy of the comment thread, including the initial issue submission, for this request, not just the latest update. Category: Core Group: None Status: Open Resolution: None Priority: 5 Private: No Submitted By: Christian Boltz (christian_boltz) Assigned to: Nobody/Anonymous (nobody) Summary: passwords are escaped - ' and " let folder creation fail Initial Comment: create-mailbox: If a password contains ' or ", the IMAP login done by postfixadmin to create some folders fail because the password is escaped (\' and \"). We should hand over non-escaped password to create_mailbox_subfolders() and (most probably) pacrypt(). Important: We need to check if we need escaping before handing over the password to dovecotpw. Reported by gencha_ on IRC. ---------------------------------------------------------------------- >Comment By: Christian Boltz (christian_boltz) Date: 2012-05-28 12:18 Message: The escaping also breaks the resulting password hash, see https://sourceforge.net/tracker/?func=detail&aid=3301752&group_id=191583&atid=937964 ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=937964&aid=3094804&group_id=191583 |
From: SourceForge.net <no...@so...> - 2012-05-28 20:27:44
|
Bugs item #3094804, was opened at 2010-10-25 05:35 Message generated for change (Comment added) made by christian_boltz You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=937964&aid=3094804&group_id=191583 Please note that this message will contain a full copy of the comment thread, including the initial issue submission, for this request, not just the latest update. Category: Core Group: None >Status: Closed >Resolution: Fixed Priority: 5 Private: No Submitted By: Christian Boltz (christian_boltz) Assigned to: Nobody/Anonymous (nobody) Summary: passwords are escaped - ' and " let folder creation fail Initial Comment: create-mailbox: If a password contains ' or ", the IMAP login done by postfixadmin to create some folders fail because the password is escaped (\' and \"). We should hand over non-escaped password to create_mailbox_subfolders() and (most probably) pacrypt(). Important: We need to check if we need escaping before handing over the password to dovecotpw. Reported by gencha_ on IRC. ---------------------------------------------------------------------- >Comment By: Christian Boltz (christian_boltz) Date: 2012-05-28 13:27 Message: Fixed in SVN trunk r1397 + r1398. ---------------------------------------------------------------------- Comment By: Christian Boltz (christian_boltz) Date: 2012-05-28 12:18 Message: The escaping also breaks the resulting password hash, see https://sourceforge.net/tracker/?func=detail&aid=3301752&group_id=191583&atid=937964 ---------------------------------------------------------------------- You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=937964&aid=3094804&group_id=191583 |