dovecot-2.2: auth: nopassword field is specific to a single pass...

[dovecot at dovecot.org]

details:   http://hg.dovecot.org/dovecot-2.2/rev/3a6e503c9ee6
changeset: 19335:3a6e503c9ee6
user:      Timo Sirainen <tss at iki.fi>
date:      Wed Oct 28 12:25:08 2015 +0200
description:
auth: nopassword field is specific to a single passdb, remove before next passdb is processed

diffstat:

 src/auth/auth-request.c |  3 +++
 1 files changed, 3 insertions(+), 0 deletions(-)

diffs (13 lines):

diff -r c02969e65b64 -r 3a6e503c9ee6 src/auth/auth-request.c
--- a/src/auth/auth-request.c	Tue Oct 27 23:56:48 2015 +0200
+++ b/src/auth/auth-request.c	Wed Oct 28 12:25:08 2015 +0200
@@ -610,6 +610,9 @@
 		request->passdb_success = FALSE;
 		break;
 	}
+	/* nopassword check is specific to a single passdb and shouldn't leak
+	   to the next one. we already added it to cache. */
+	auth_fields_remove(request->extra_fields, "nopassword");
 
 	if (request->requested_login_user != NULL &&
 	    *result == PASSDB_RESULT_OK) {