| Summary | horde_alarms using smtp-auth regardless settings in conf |
| Queue | Horde Framework Packages |
| Queue Version | Git master |
| Type | Bug |
| State | Resolved |
| Priority | 1. Low |
| Owners | jan (at) horde (dot) org |
| Requester | heinz (at) htl-steyr (dot) ac (dot) at |
| Created | 11/11/13 (4533 days ago) |
| Due | |
| Updated | 11/18/13 (4526 days ago) |
| Assigned | |
| Resolved | 11/18/13 (4526 days ago) |
| Github Issue Link | |
| Github Pull Request | |
| Milestone | |
| Patch | No |
State ⇒ Resolved
commit ad9066f5c67e36b17eae627a6e819d7549a683fc
Author: Jan Schneider <jan@horde.org>
Date: Mon Nov 18 20:55:32 2013 +0100
[jan] Don't try authentication to SMTP server if explicitly
disabled (
Bug #12830).framework/Core/lib/Horde/Core/Factory/Mail.php | 4 +++-
framework/Core/package.xml | 4 ++--
2 files changed, 5 insertions(+), 3 deletions(-)
http://git.horde.org/horde-git/-/commit/ad9066f5c67e36b17eae627a6e819d7549a683fc
Priority ⇒ 1. Low
Patch ⇒ No
Milestone ⇒
Queue ⇒ Horde Framework Packages
Summary ⇒ horde_alarms using smtp-auth regardless settings in conf
Type ⇒ Bug
State ⇒ Unconfirmed
$conf['mailer']['params']['auth'] = false;
Script horde-alarms is using a Horde_Core_Factory_Mail object for
notification (eg kronolith events)
In function getConfig() of Horde_Core_Factory_Mail username and
password are set in case of smtp transport
/* Add username/password options now, regardless of current value of
* 'auth'. Will remove in create() if final config doesn't require
* authentication. */
in function create() of Horde_Core_Factory_Mail code looks like
if (strcasecmp($transport, 'smtp') === 0) {
$transport = 'Smtphorde';
} elseif (empty($params['auth'])) {
unset($params['username'], $params['password']);
}
Here, username and password are only removed if
- transport is NOT set to smtp and
- auth is EMPTY (not checking for false as set in mailer config)
In my case, transport is smtp and auth is FALSE
So, in further, Horde_Smtp->login() is called with an username set
(with empty password)
and sending of notification fails with "Server denied authentication."
(despite setting "No authentication")