Bug#406686: exim4: Client Auth Can't Handle Special Characters in Passwords

Marc Haber mh+debian-packages at zugschlus.de
Sun Jan 14 14:02:01 CET 2007


On Sat, Jan 13, 2007 at 05:42:41PM +0100, Marc Haber wrote:
> On Sat, Jan 13, 2007 at 11:39:26AM -0500, Steaphan Greene wrote:
> > On Sat, Jan 13, 2007 at 05:35:14PM +0100, Marc Haber wrote:
> > > Yes, and for the versions allowing unencrypted authentication as well. 
> > > I just wanted to know if the change works outside my lab.
> > 
> > Yep, it seems to, but I only tried my tests with test-passwords with 
> > shifted-number-keys (US QWERTY keyboard, so, "!@#$%^&*()").  I did not 
> > test it with any others, such as ":".
> 
> : is not addressed by this change. I need to ponder a little bit more
> about that to find a solution.

No go with extract, but using a RE helped. Thanks to exim-users for
helping here.

Can you please try this new, simplified authenticator?

plain:
  driver = plaintext
  public_name = PLAIN
  client_send = "<; ${if !eq{$tls_cipher}{}{\
                     ^${extract{1}{:}\
		        {${sg{\
                          ${lookup{$host}nwildlsearch{CONFDIR/passwd.client}{$value}fail}\
			  }\
			  {\\N[\\^]\\N}\
			  {^^}\
			 }}\
		       }\
		     ^${sg{\
		        ${sg{\
		          ${lookup{$host}nwildlsearch{CONFDIR/passwd.client}{$value}fail}\
			  }\
			  {\\N[\\^]\\N}\
			  {^^}\
			 }\
			}\
		        {\\N([^:]+:)(.*)\\N}{\\$2}\
		       }\
		   }fail}"


Cc'ing pkg-exim4-devel to solicit comments from the other guys there.

Greetings
Marc

-- 
-----------------------------------------------------------------------------
Marc Haber         | "I don't trust Computers. They | Mailadresse im Header
Mannheim, Germany  |  lose things."    Winona Ryder | Fon: *49 621 72739834
Nordisch by Nature |  How to make an American Quilt | Fax: *49 621 72739835




More information about the Pkg-exim4-maintainers mailing list