[prev in list] [next in list] [prev in thread] [next in thread] 

List:       squirrelmail-plugins
Subject:    Re: [SM-PLUGINS] vacation_local "Bad Password"
From:       Paul Lesneiwski <paul () squirrelmail ! org>
Date:       2005-08-23 12:30:30
Message-ID: 430B16E6.900 () squirrelmail ! org
[Download RAW message or body]



greg wm wrote:
> hi folks,
> 
> apparently vacation_local is somehow sensitive to $ in the user's password.
> 
> if a user's password is set to 242aba$@%
> attempting to enter the vacation_local plugin gets:
> 
> *ERROR:* An error occurred uploading the file: Bad password
> 
> if the user's password is set to 242aba%@% ($ changed to %)
> it then works fine.
> 
> we're not using ldap, simple /etc/passwd & /etc/shadow setup.
> RPMs:
> kernel-2.6.9-11.EL
> httpd-2.0.52-12.1.ent.centos4
> php-4.3.9-3.8
> squirrelmail-1.4.3a-12.EL4.centos4
> courier-imap-4.0.3-1
> source:
> vacation-1.2.6.1.tar.gz
> vacation_local-2.0-1.4.tar.gz
> 
> this is of course easy to workaround.  change the password.  but if
> anybody happens to come up with a fix of course i would rather be able
> to tell my users my server is clever enough that they can keep their
> favourite password and still use the squirrelmail vacation feature too..

What backend are you using??  If SUID, try opening
squirrelmail_vacation>proxy.c and look for this line, about 200 lines
down from the top:

         || strstr(argv[SRC], "$") != NULL || strstr(argv[DEST], "$") !=
NULL

Try commenting it out....




-------------------------------------------------------
SF.Net email is Sponsored by the Better Software Conference & EXPO
September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices
Agile & Plan-Driven Development * Managing Projects & Teams * Testing & QA
Security * Process Improvement & Measurement * http://www.sqe.com/bsce5sf
--
squirrelmail-plugins mailing list
Posting Guidelines: http://squirrelmail.org/wiki/wiki.php?MailingListPostingGuidelines
List Address: squirrelmail-plugins@lists.sourceforge.net
List Archives: http://news.gmane.org/thread.php?group=gmane.mail.squirrelmail.plugins
List Archives: http://sourceforge.net/mailarchive/forum.php?forum_id=3931
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-plugins
[prev in list] [next in list] [prev in thread] [next in thread]