Print Page - Dollar symbol in passwords

Title: Dollar symbol in passwords
Post by: V5C on November 01, 2010, 01:41:20 PM

Hello

I seem to be having an issue with the Roundcube login. I'm using IMAP for authentication and it appears that passwords which contain a dollar sign do not work.

I don't know if this is because of PHP's use of variables and whether the dollar is not being escaped...

Does anyone know if this is an issue or if there is something I can turn on to enable it?

Thanks

Title: Dollar symbol in passwords
Post by: JohnDoh on November 01, 2010, 02:59:41 PM

have you tried changing password_charset in the config file? I think if you turn on imap_debug you can see what its sending to the server, may be that will give more clues.

Title: Dollar symbol in passwords
Post by: V5C on November 02, 2010, 06:00:34 AM

Thanks JohnDoh. Encoding is set to ISO-8859-1. I've just turned on IMAP debug and the log file seems to show that the dollar is correctly in the password on sending to the IMAP server.

I'm off to see what Dovecot might be doing to not allow it to work.

Thanks again!

Title: Dollar symbol in passwords
Post by: V5C on November 02, 2010, 06:42:45 AM

I found the issue. It was with the dovecotpw util. It seems that this does not escape dollar symbols. So I was getting the same result with:

dovecotpw -p one$two -s HMAC-MD5
dovecotpw -p one -s HMAC-MD5

Escaping the dollar symbol with a backslash appears to work

dovecotpw -p one\$two -s HMAC-MD5

Roundcube Community Forum

Release Support => Pending Issues => Topic started by: V5C on November 01, 2010, 01:41:20 PM