[Dovecot] login fails when username has apostrophe

Karl Latiss klatiss at nextdigital.com
Wed Jan 7 02:30:28 EET 2009


On Tue, 2009-01-06 at 16:04 -0800, Seth Mattinen wrote:
> Karl Latiss wrote:
> > On Tue, 2009-01-06 at 18:33 -0500, Timo Sirainen wrote:
> >> On Wed, 2009-01-07 at 10:19 +1100, Karl Latiss wrote:
> >>> Jan  5 16:15:05 www-example1 dovecot: auth(default): ldap(julie.o
> >>> \'reilly at example.com,10.3.96.60): pass search: base=dc=example, dc=com
> >>> scope=subtree filter=(&(objectClass=qmailUser)(uid=julie.o\\'reilly))
> >>> field
> >>> s=mail,userPassword
> >> I think it should be julie.o\\\'reilly in there. Have to check why.
> >>
> >>> Jan  5 16:15:07 www-example1 dovecot: auth(default): client out: FAIL
> >>> 1       user=julie.o\'reilly at example.com
> >>> failed, 1 attempts): user=<julie.o\'reilly at example.com>, method=PLAIN,
> >> But I think your client (PHP webmail with automatic slashing enabled?)
> >> is sending the initial \ here. Try logging in manually with telnet to
> >> make sure.
> > 
> > The previous log output is with me telnetting in manually, however the
> > webmail software (roundcube) produces the same results.
> > 
> 
> 
> It's not an apostrophe - it's an unmatched quote. You'll probably get 
> faster results by changing to logins that don't anger input string 
> sanity checks. Otherwise, be prepared to wait a while for a solution. 
> Probably not what you want to hear, but if you have people knocking down 
> the door over this problem, you're going to have to use what will work.
> 
> ~Seth

I understand how it could be interpreted as an unmatched quote but
according to Timo
(http://www.mail-archive.com/dovecot@dovecot.org/msg09489.html) this
should work.

At any rate since the user database is provided by the client from their
(various) systems it's unlikely I will be able to change user names.

Karl.



More information about the dovecot mailing list