[exim-dev] [Bug 667] New: Dovecot authentication bug - missi…

Top Page
Delete this message
Reply to this message
Author: Nigel Metheringham
Date:  
To: exim-dev
New-Topics: [exim-dev] [Bug 667] Dovecot authentication bug - missing close
Subject: [exim-dev] [Bug 667] New: Dovecot authentication bug - missing close
------- You are receiving this mail because: -------
You are on the CC list for the bug.

http://bugs.exim.org/show_bug.cgi?id=667
           Summary: Dovecot authentication bug - missing close
           Product: Exim
           Version: 4.69
          Platform: Other
        OS/Version: All
            Status: NEW
          Severity: bug
          Priority: medium
         Component: SMTP Authentication
        AssignedTo: nigel@???
        ReportedBy: nigel@???
                CC: exim-dev@???



On Jul 31, 2007 11:42 AM, Chris Laif <chris.laif@???> wrote:
Hi.

I'm using SMTP auth with Exim authenticating against Dovecot's auth
socket. The (excellent) SMTP test tool "swaks"
(http://jetmore.org/john/code/#swaks) tries multiple auth mechanismus
consecutively which leads to the following message in Dovecot's log
file:

Error: auth(default): BUG: Authentication client gave a PID 6738 of
existing connection


This bug can be fixed by adding a "close(fd);" in src/auths/dovecot.c.
Without the close()-call Exim does not shut down the connection and a
subsequent connection (announcing the same client PID during
handshake) will fail. You'll most likely see the above warning message
if a SMTP client tries multiple auth mechanisms with a wrong password.

Would be nice to have this fixed upstream in the Exim source.

Please also have a look at:
http://www.exim.org/lurker/message/20071127.164551.f35ace1e.ja.html


--
Configure bugmail: http://bugs.exim.org/userprefs.cgi?tab=email