[dovecot-cvs] dovecot/src/auth mech-plain.c,1.35.2.1,1.35.2.2

[tss at dovecot.org]

Update of /var/lib/cvs/dovecot/src/auth
In directory talvi:/tmp/cvs-serv16505

Modified Files:
      Tag: branch_1_0
	mech-plain.c 
Log Message:
If authorization and authentication IDs are the same, and both contain the
master user, the master login failed.



Index: mech-plain.c
===================================================================
RCS file: /var/lib/cvs/dovecot/src/auth/mech-plain.c,v
retrieving revision 1.35.2.1
retrieving revision 1.35.2.2
diff -u -d -r1.35.2.1 -r1.35.2.2
--- mech-plain.c	17 Jun 2006 19:15:18 -0000	1.35.2.1
+++ mech-plain.c	17 Feb 2007 11:45:43 -0000	1.35.2.2
@@ -50,6 +50,11 @@
 		}
 	}
 
+	if (strcmp(authid, authenid) == 0) {
+		/* the login username isn't different */
+		authid = "";
+	}
+
 	if (count != 2) {
 		/* invalid input */
 		auth_request_log_info(request, "plain", "invalid input");