dovecot-1.1: DIGEST-MD5 auth: Hash generation from plaintext pas...

dovecot at dovecot.org dovecot at dovecot.org
Sat Sep 13 20:05:18 EEST 2008


details:   http://hg.dovecot.org/dovecot-1.1/rev/aff3092c2d5c
changeset: 7886:aff3092c2d5c
user:      Timo Sirainen <tss at iki.fi>
date:      Sat Sep 13 20:05:14 2008 +0300
description:
DIGEST-MD5 auth: Hash generation from plaintext passwords wasn't done with the original username.

diffstat:

1 file changed, 2 insertions(+), 1 deletion(-)
src/auth/passdb.c |    3 ++-

diffs (13 lines):

diff -r 3903bc4fc618 -r aff3092c2d5c src/auth/passdb.c
--- a/src/auth/passdb.c	Sat Sep 13 14:10:21 2008 +0300
+++ b/src/auth/passdb.c	Sat Sep 13 20:05:14 2008 +0300
@@ -92,7 +92,8 @@ bool passdb_get_credentials(struct auth_
 
 		/* we can generate anything out of plaintext passwords */
 		plaintext = t_strndup(*credentials_r, *size_r);
-		if (!password_generate(plaintext, auth_request->user,
+		if (!password_generate(plaintext,
+				       auth_request->original_username,
 				       wanted_scheme, credentials_r, size_r)) {
 			auth_request_log_error(auth_request, "password",
 				"Requested unknown scheme %s", wanted_scheme);


More information about the dovecot-cvs mailing list