RE: [Exim] exim AUTH driver - \000 in string bug?

Top Page
Delete this message
Reply to this message
Author: Jeff AA
Date:  
To: exim-users, 'Jeff AA'
Subject: RE: [Exim] exim AUTH driver - \000 in string bug?
> -----Original Message-----
> From: exim-users-admin@???
> [mailto:exim-users-admin@exim.org] On Behalf Of Philip Hazel
> Sent: 12 August 2002 21:18
> To: Jeff AA
> Cc: exim-users@???
> Subject: Re: [Exim] exim AUTH driver - \000 in string bug?
>
>


>
> It is true that Exim cannot handle strings containing nulls.
> It operates
> with null-terminated C strings.
>
> The embedded nulls for plaintext are recognized in the *incoming*
> authenticator data, and are used to delimit the separate
> strings - just
> like C strings!
>
> I cannot see any easy way round this.
>
> --
> Philip Hazel            University of Cambridge Computing Service,
> ph10@???      Cambridge, England. Phone: +44 1223 334714.


Thanks Philip - I agree, it was a really bad design slip-up to embed
NULL in the key in the Cyrus SASLDB auxprop authenticator - so far no
response on whether they would consider changing it, just a response
saying that they could not understand why I would want to share AUTH
between Exim and Imap.

Do you have a recommendation on how to integrate Exim and SASL
authentication to enable AUTHed mail users to relay?

Regards
Jeff