[Dovecot] Problem in dovecot 0.99 - login username case sensitive create fake maildirs
Hello,
I have noticed a weird behaviour in dovecot 0.99 which, I hope, is not replicated in 1.0-alpha.
First I have to say that it works very well. So if I login with user foo@bar.com, the maildir is created.
But when I log in with User FOO@BAR.COM, or FOO@BAR.com, then two other maildirs are created. Authentication is ok (I'm using mysql backend) but no mails are obviously found.
Maybe a solutions would be adding some config item to turn lowercase the maildir path or authentication tokens (received from client) at login time.
Or maybe I am missing something. Is there a solution for this problem out there ?
Thanks, Massimo
In 1.0, you can have
auth_username_translation = AaBbCcDdEeFfGgHhIiJjKkLlMmNnOoPpQqRrSsTtUuVvWwXxYyZz
which converts the username to lower-case.
Best Wishes, Chris
Max CtRiX wrote:
Hello,
I have noticed a weird behaviour in dovecot 0.99 which, I hope, is not replicated in 1.0-alpha.
First I have to say that it works very well. So if I login with user foo@bar.com, the maildir is created.
But when I log in with User FOO@BAR.COM, or FOO@BAR.com, then two other maildirs are created. Authentication is ok (I'm using mysql backend) but no mails are obviously found.
Maybe a solutions would be adding some config item to turn lowercase the maildir path or authentication tokens (received from client) at login time.
Or maybe I am missing something. Is there a solution for this problem out there ?
Thanks, Massimo
-- --+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+- Christopher Wakelin, c.d.wakelin@reading.ac.uk IT Services Centre, The University of Reading, Tel: +44 (0)118 378 8439 Whiteknights, Reading, RG6 2AF, UK Fax: +44 (0)118 975 3094
On Mon, 2005-09-05 at 09:36 +0200, Max CtRiX wrote:
Hello,
I have noticed a weird behaviour in dovecot 0.99 which, I hope, is not replicated in 1.0-alpha.
First I have to say that it works very well. So if I login with user foo@bar.com, the maildir is created.
But when I log in with User FOO@BAR.COM, or FOO@BAR.com, then two other maildirs are created. Authentication is ok (I'm using mysql backend) but no mails are obviously found.
One problem here is that mysql matches strings case-insensitively. If you changed your pass_query to match the username case-sensitively, this problem wouldn't exist (I'm not sure how that could be done, probably there's some function).
With 1.0alpha you can also return a changed username in pass_query. For example:
password_query = SELECT userid as user, password FROM users WHERE userid = '%u'
That changes the username to be in the same case as it's in database.
participants (3)
-
Chris Wakelin
-
Max CtRiX
-
Timo Sirainen