[dovecot-cvs] dovecot/src/auth mech-plain.c,1.38,1.39

[tss at dovecot.org]

Update of /var/lib/cvs/dovecot/src/auth
In directory talvi:/tmp/cvs-serv16507

Modified Files:
	mech-plain.c 
Log Message:
If authorization and authentication IDs are the same, and both contain the
master user, the master login failed.



Index: mech-plain.c
===================================================================
RCS file: /var/lib/cvs/dovecot/src/auth/mech-plain.c,v
retrieving revision 1.38
retrieving revision 1.39
diff -u -d -r1.38 -r1.39
--- mech-plain.c	18 Nov 2006 13:41:39 -0000	1.38
+++ mech-plain.c	17 Feb 2007 11:45:46 -0000	1.39
@@ -50,6 +50,11 @@
 		}
 	}
 
+	if (strcmp(authid, authenid) == 0) {
+		/* the login username isn't different */
+		authid = "";
+	}
+
 	if (count != 2) {
 		/* invalid input */
 		auth_request_log_info(request, "plain", "invalid input");