Koozali.org: home of the SME Server

Contribs.org Forums => Koozali SME Server 10.x => Topic started by: Michail Pappas on August 14, 2023, 12:13:27 PM

Title: [SOLVED]SMTP password fails if it includes double quotes (at the end or possibly
Post by: Michail Pappas on August 14, 2023, 12:13:27 PM
Today a number of packages were available on my 10.1 production box, one of them being smeserver-qpsmtpd-2.7.0-12.

One of my users that sends and retrieves mail using thunderbird over S/POP and Secure SMTP noted that he could retrieve email, but sending produced an incorrect password error message.

After tracking logs etc and changing the password to something completely different things worked again. Setting the password from web admin to what it previously was made the issue re-appear.

Thinking that this might have something to do with the characters in the password, I removed on a hunch its last character which was double-quotes ("). After doing so, the password was happily accepted when trying to send email.

Opened issue 12395 for it: https://bugs.koozali.org/show_bug.cgi?id=12395
Title: Re: SMTP password fails if it includes double quotes (at the end or possibly anywhe
Post by: ReetP on August 14, 2023, 02:58:04 PM
As per my #c4

https://bugs.koozali.org/show_bug.cgi?id=12395#c4

Quote
This is due to an issue with escaping passwords which use certain characters. I had some fixes and they got missed - my bad - as we were trying to fix a couple of different things at the same time :-(

See https://bugs.koozali.org/show_bug.cgi?id=10103 and related bugs plus 12193 cvm-unix

There are a couple of methods to solve this but not sure which is the best. JP is going to have a look at it later so a fix will be forthcoming PDQ.

Sorry for the aggro.

See the bug for temporary fixes.

========================================

Please note - the reason these things get missed is that we do not have enough people testing. Simple as that.

We are very few and we are not infallible.

We are trying to test multiple fixes and new features at the same time and things get missed. The more testers we have the less chance there are of mistakes.

It is in the hands of the community to help here.

Ask us if you want to help.
Title: Re: SMTP password fails if it includes double quotes (at the end or possibly anywhe
Post by: Jean-Philippe Pialasse on August 14, 2023, 10:30:32 PM
fixed rpm is in smeupdates-testing


yum update smeserver-qpsmtpd --enablerepo=smeupdates-testing

needs testing and verifying it fixes the issue
Title: Re: SMTP password fails if it includes double quotes (at the end or possibly anywhe
Post by: Michail Pappas on August 16, 2023, 07:45:55 AM
needs testing and verifying it fixes the issue
Done, also changed the bug state to VERIFIED (hope I did not overstep here :) ).
Title: Re: SMTP password fails if it includes double quotes (at the end or possibly anywhe
Post by: Jean-Philippe Pialasse on August 16, 2023, 02:01:17 PM
Done, also changed the bug state to VERIFIED (hope I did not overstep here :) ).

you did it perfectly!
keep on !

thank you for reporting, with details and being part of the verification actively.

This is how a community project can work!
thank you. 
Title: Re: [SOLVED]SMTP password fails if it includes double quotes (at the end or possibly
Post by: ReetP on August 17, 2023, 07:50:33 PM
For ref - updates are out.

https://forums.koozali.org/index.php/topic,55029.msg289981.html#msg289981