6.0.0-beta1
7/4/25

[#13377] IMP IMAP authentication with Horde is broken after update
Summary IMP IMAP authentication with Horde is broken after update
Queue IMP
Queue Version 6.2.0
Type Bug
State No Feedback
Priority 1. Low
Owners
Requester fw (at) fiberworks (dot) com
Created 07/17/2014 (4005 days ago)
Due
Updated 10/01/2014 (3929 days ago)
Assigned
Resolved 08/08/2014 (3983 days ago)
Github Issue Link
Github Pull Request
Milestone
Patch No

History
10/01/2014 07:52:00 PM xexplorer (at) talkid (dot) de Comment #5 Reply to this comment
Hi, I can confirm Problems with empty pass after upgrading :(
If you need more information or a tester contact me and I will do
08/08/2014 04:05:40 AM Michael Slusarz State ⇒ No Feedback
 
07/19/2014 12:05:20 AM Michael Slusarz Comment #4 Reply to this comment
but what i should do Now ? It worked before.
Since I don't see this (and neither has anyone else), it could be 
anywhere in the login process so unfortunately for these kind of 
issues that a developer can't reproduce, you necessarily need to track 
down the issue locally for use to be able to debug further.
07/18/2014 12:49:58 PM fw (at) fiberworks (dot) com Comment #3 Reply to this comment
OK Sir,

but what i should do Now ? It worked before.
In fact, the complex structure did not make it easy to debug/follow.
Can you pls. tell me what Function/Class is the Logon process is 
calling and where this information are stored, so that i can debug it.


Thank you.

07/18/2014 05:03:17 AM Michael Slusarz Comment #2
Version ⇒ 6.2.0
Priority ⇒ 1. Low
Reply to this comment
Can't reproduce.  'hordeauth' works both true/false with several 
different auth backends I have tested.

There was a regression in the Imap client library that would have 
allowed an empty string to be used as a password.  That has been 
fixed, but that isn't directly related to this ticket.
07/17/2014 07:31:43 PM fw (at) fiberworks (dot) com Comment #1
Priority ⇒ 3. High
Type ⇒ Bug
Summary ⇒ IMP IMAP authentication with Horde is broken after update
Due ⇒ 07/17/2014
Queue ⇒ IMP
Milestone ⇒
Patch ⇒ No
State ⇒ Unconfirmed
Reply to this comment
Hi,

after update via PEAR from 5.1 to latest 5.2 , IMP will not send the 
correct Password
with  'hordeauth' => 'full' in backends.php.

Tracing the Logon to IMAP backend (auth from dovecot) with AUTH PLAN 
has shown that no Password (empty) is sumbitted when User log's on to 
Horde.
My Horde Auth is normally running with SQL Authentication, fetching 
the same Data from MySql Table as Dovecote Auth does. Works perfekt on 
5.1

Changed the Horde Auth to IMAP for testting to see any difference, but 
there is no.
Try'ed it with Horde auth also on IMAP will work only when 'hordeauth' 
=> false.

  'hordeauth' => true and  'hordeauth' => 'full' will not submit any Password,
and when you try to logon to IMP it will work. On CRAM-MD5 you will 
see as logon string \0[USERNAME]\0[USERNAME]

Saved Queries