BUG: nopassword doesn't work with CRAM-MD5
Arkadiusz Miśkiewicz
arekm at maven.pl
Thu Nov 17 08:14:02 UTC 2016
Hello.
dovecot 2.2.26.0
When testing nopassword extra field
(http://wiki2.dovecot.org/PasswordDatabase/ExtraFields) with CRAM-MD5 dovecot
doesn't allow any password (while it should) and returns
" Authentication failed"
while in logs:
Nov 17 08:22:34 auth-worker(1551): Info:
sql(pepe,127.0.0.1,<Y8amDXpBptV/AAAB>): Requested CRAM-MD5 scheme, but we have
a NULL password
NULL is there because our sql query returns empty password just like wiki says
"nopassword: you want to allow all passwords, use an empty password and this
field. "
If password is returned in sql query then it fails, too:
Nov 17 09:00:49 auth-worker(2206): Error:
sql(pepe,127.0.0.1,<eO5vlnpBtNd/AAAB>): nopassword set but password is non-
empty
So looks to be a bug.
--
Arkadiusz Miśkiewicz, arekm / ( maven.pl | pld-linux.org )
More information about the dovecot
mailing list