dovecot-1.1: DIGEST-MD5 auth: Hash generation from plaintext pas...
dovecot at dovecot.org
dovecot at dovecot.org
Sat Sep 13 20:05:18 EEST 2008
details: http://hg.dovecot.org/dovecot-1.1/rev/aff3092c2d5c
changeset: 7886:aff3092c2d5c
user: Timo Sirainen <tss at iki.fi>
date: Sat Sep 13 20:05:14 2008 +0300
description:
DIGEST-MD5 auth: Hash generation from plaintext passwords wasn't done with the original username.
diffstat:
1 file changed, 2 insertions(+), 1 deletion(-)
src/auth/passdb.c | 3 ++-
diffs (13 lines):
diff -r 3903bc4fc618 -r aff3092c2d5c src/auth/passdb.c
--- a/src/auth/passdb.c Sat Sep 13 14:10:21 2008 +0300
+++ b/src/auth/passdb.c Sat Sep 13 20:05:14 2008 +0300
@@ -92,7 +92,8 @@ bool passdb_get_credentials(struct auth_
/* we can generate anything out of plaintext passwords */
plaintext = t_strndup(*credentials_r, *size_r);
- if (!password_generate(plaintext, auth_request->user,
+ if (!password_generate(plaintext,
+ auth_request->original_username,
wanted_scheme, credentials_r, size_r)) {
auth_request_log_error(auth_request, "password",
"Requested unknown scheme %s", wanted_scheme);
More information about the dovecot-cvs
mailing list