<?xml version="1.0" encoding="UTF-8"?> 
<?xml-stylesheet href="https://dev.horde.org/themes/horde//default/feed-rss.xsl" type="text/xsl"?> 
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"> 
 <channel> 
  <title>Bad login message</title> 
  <pubDate>Fri, 10 Apr 2026 02:41:23 +0000</pubDate> 
  <link>https://bugs.horde.org/ticket/9211</link> 
  <atom:link rel="self" type="application/rss+xml" title="Bad login message" href="https://bugs.horde.org/ticket/9211/rss" /> 
  <description>Bad login message</description> 
 
   
   
  <item> 
   <title>When i try to login with a bad username/password, instead of</title> 
   <description>When i try to login with a bad username/password, instead of getting a message like &quot;login failed&quot; or &quot;bad username/password&quot; i only get a &quot;IMAP server denied authentication.&quot; one. I found out that this is a error being thrown if the imap login is not successful.
Don&#039;t know if this is the expected behavior but looking at login.php i think that its Horde intention to notify the user with a more &quot;friendly&quot; message.
</description> 
   <pubDate>Wed, 01 Sep 2010 17:11:45 +0000</pubDate> 
   <link>https://bugs.horde.org/ticket/9211#t59796</link> 
  </item> 
   
  <item> 
   <title>Nope - all sorts of limitations of error reporting with c-cl</title> 
   <description>Nope - all sorts of limitations of error reporting with c-client.  Since c-client doesn&#039;t provide a reliable error reporting mechanism, we have to play it safe and provide a generic bad login message.</description> 
   <pubDate>Wed, 01 Sep 2010 18:12:55 +0000</pubDate> 
   <link>https://bugs.horde.org/ticket/9211#t59798</link> 
  </item> 
   
  <item> 
   <title>Im not using the c-client (im using the client_socket), and </title> 
   <description>Im not using the c-client (im using the client_socket), and as far as i can tell, it raises pretty correct errors when the user provides a wrong username/password. Can&#039;t we give a more meaningful error message to user when using client_socket?
If this is not changed, then i guess that Horde_Auth::REASON_FAILED and Horde_Auth::REASON_BADLOGIN will never be used on login.php right?
Btw, there&#039;s a bunch of Exceptions being thrown without translation &quot;IMAP server denied authentication.&quot; is one of them.</description> 
   <pubDate>Thu, 02 Sep 2010 13:55:21 +0000</pubDate> 
   <link>https://bugs.horde.org/ticket/9211#t59806</link> 
  </item> 
   
  <item> 
   <title>Changes have been made in Git for this ticket:

Request #921</title> 
   <description>Changes have been made in Git for this ticket:

Request #9211: More thorough login exception error reporting.
Use RFC 5530 defined response codes, if possible.
Also, treat &#039;CONTACTADMIN&#039; response code as an &#039;ALERT&#039;.

http://git.horde.org/diff.php/framework/Imap_Client/lib/Horde/Imap/Client/Exception.php?rt=horde-git&amp;r1=eb710536fde5483880c3e9c4ba38fa62df066bb4&amp;r2=4d3bc03b9f4876a59c551843b350ac3b2e7b6d35
http://git.horde.org/diff.php/framework/Imap_Client/lib/Horde/Imap/Client/Socket.php?rt=horde-git&amp;r1=8717bf1a8e8ab9fb3ebc609424f630d2c59177d0&amp;r2=4d3bc03b9f4876a59c551843b350ac3b2e7b6d35
http://git.horde.org/diff.php/framework/Imap_Client/package.xml?rt=horde-git&amp;r1=a88ee4ed970f2de8d3fce4280ff97d4de9b8a39f&amp;r2=4d3bc03b9f4876a59c551843b350ac3b2e7b6d35</description> 
   <pubDate>Thu, 02 Sep 2010 17:18:48 +0000</pubDate> 
   <link>https://bugs.horde.org/ticket/9211#t59809</link> 
  </item> 
   
  <item> 
   <title>Changes have been made in Git for this ticket:

Request #921</title> 
   <description>Changes have been made in Git for this ticket:

Request #9211: Improved login error reporting in IMP

http://git.horde.org/diff.php/imp/docs/CHANGES?rt=horde-git&amp;r1=020fc3b127d30adae4310e4445c5eac895b75973&amp;r2=2a3c7ea011d364b024424b124584a06238ea4310
http://git.horde.org/diff.php/imp/lib/Auth.php?rt=horde-git&amp;r1=b0ee59fe2b830806015bb4a030a5106d29cb3993&amp;r2=2a3c7ea011d364b024424b124584a06238ea4310</description> 
   <pubDate>Thu, 02 Sep 2010 17:18:49 +0000</pubDate> 
   <link>https://bugs.horde.org/ticket/9211#t59810</link> 
  </item> 
   
  <item> 
   <title>#1 - You marked this ticket as a DIMP ticket.  DIMP only exi</title> 
   <description>#1 - You marked this ticket as a DIMP ticket.  DIMP only exists with H3, which uses c-client.  What I previously said is correct - dimp 1.x uses c-client which has very limited login error handling.
#2 - As for IMP 5.x - login error handling can be improved.  However, we are still very limited by the possible error messages that can be given.  Per RFC 3501, the reason for authentication is not specified (actually, it might be in the IMAP response, but odds are very high that this explanation is either technical in nature and/or completely in English).
Very recently (RFC 5530), additional response codes were defined that potentially give better information on failure reasons.  At this time, adoption of these new response codes by IMAP servers is limited (although I can verify that Dovecot 2.0.1 uses at least some of them).  So use information provided by these response codes, if given.  If not, we MUST default to an authentication failure message even though it might be a server issue (see RFC 5530[3]).

As far as translations - no Exception messages are translated (since 1) they are not really designed to be passed to the end user and/or 2) we still haven&#039;t determined how to handle gettext strings in framework packages).</description> 
   <pubDate>Thu, 02 Sep 2010 17:25:11 +0000</pubDate> 
   <link>https://bugs.horde.org/ticket/9211#t59811</link> 
  </item> 
   
   
 
 </channel> 
</rss> 
