Bug#406686: exim4: Client Auth Can't Handle Special Characters in Passwords

[Marc Haber]

On Sat, Jan 13, 2007 at 09:49:30AM -0500, Steaphan Greene wrote:
> The issue is apparently only with the "^" when using plain or login 
> auth.  Replacing it with "^^" did solve the problem.  I thought I had 
> found problems without the "^" and using other test symbols, but 
> apparently I had made a mistake.  The only problem characters I now find 
> are "^" and, obviously, ":".  Given this info, do you still want this 
> additional information from me?

No, Andreas' mail has thrown me back on track.

Can you try the following new plain authenticator?

plain:
  driver = plaintext
  public_name = PLAIN
  client_send = "${if !eq{$tls_cipher}{}{\
                     ^${extract{1}{::}\
                        {${sg{\
                          ${lookup{$host}nwildlsearch{CONFDIR/passwd.client}{$value}fail}\
                          }\
                          {\\N[\\^]\\N}\
                          {^^}\
                        }}\
                       }\
                     ^${extract{2}{::}\
                        {${sg{\
                          ${lookup{$host}nwildlsearch{CONFDIR/passwd.client}{$value}fail}\
                          }\
                          {\\N[\\^]\\N}\
                          {^^}\
                        }}\
                       }\
                   }fail}"

This one should double circumflexes in authentication data by itself.
I have removed - for testing - the AUTH_CLIENT_ALLOW_NOTLS_PASSWORDS
option as you are probably not using it as mail.cs.binghamton.edu
supports TLS and in fact requires TLS for authentication.

Greetings
Marc

-- 
-----------------------------------------------------------------------------
Marc Haber         | "I don't trust Computers. They | Mailadresse im Header
Mannheim, Germany  |  lose things."    Winona Ryder | Fon: *49 621 72739834
Nordisch by Nature |  How to make an American Quilt | Fax: *49 621 72739835