The following issue has been RESOLVED. 
====================================================================== 
http://www.dbmail.org/mantis/view.php?id=183 
====================================================================== 
Reported By:                OutboundIndex
Assigned To:                aaron
====================================================================== 
Project:                    DBMail
Issue ID:                   183
Category:                   Database layer
Reproducibility:            always
Severity:                   major
Priority:                   normal
Status:                     resolved
Resolution:                 fixed
Fixed in Version:           SVN Trunk
====================================================================== 
Date Submitted:             22-Mar-05 22:45 CET
Last Modified:              08-Feb-06 20:02 CET
====================================================================== 
Summary:                    delivery to users with no alias is case sensitive
Description: 
In bug report 159 (which appears to have been removed from the bugtracker?)
I reported a problem with delivery and aliases. That issue was of course
resolved. The patch however has created a bug which I am reporting now: 

Mail addressed to [EMAIL PROTECTED] or [EMAIL PROTECTED] arrives fine to
recipient IF:

alias: [EMAIL PROTECTED] deliver_to (any user)

BUT 

Mail addressed to [EMAIL PROTECTED] 

IS NOT delivered to [EMAIL PROTECTED] IF there is no alias, just a user
account named [EMAIL PROTECTED]

Mail addressed to [EMAIL PROTECTED] IS delivered to [EMAIL PROTECTED] if there
is no alias.

Thus, with a redundant alias - case insensitive
Without a redundant aliase - delivery address is treated as case
sensitive.
====================================================================== 

---------------------------------------------------------------------- 
 OutboundIndex - 23-Mar-05 00:28  
---------------------------------------------------------------------- 
I stated the wrong version. We have version 2.0.3 plus the alias related
patch for bug 159, debian pkg. Paul called it 2.0.4 at the time but was
asked to revert the version number lower. 

---------------------------------------------------------------------- 
 aaron - 21-Apr-05 10:40  
---------------------------------------------------------------------- 
The issue is that the user's table delivery uses auth_user_exists() to look
up the user. This is a case-sensitive function. We could make this function
case-insensitive, which would also serve to prevent creating usernames that
differ only in case, which is potentially a problem if the deliveries are
not case sensitive.

Password checking occurs in auth_user_validate, which does and should
continue to require proper case in both the username and password. 

---------------------------------------------------------------------- 
 aaron - 08-Feb-06 20:02  
---------------------------------------------------------------------- 
Changing db_user_exists to be case insensitive in 2.1.SVN. 

Issue History 
Date Modified   Username       Field                    Change               
====================================================================== 
22-Mar-05 22:45 OutboundIndex  New Issue                                    
23-Mar-05 00:28 OutboundIndex  Note Added: 0000626                          
21-Apr-05 10:40 aaron          Note Added: 0000665                          
08-Feb-06 20:02 aaron          Status                   new => resolved     
08-Feb-06 20:02 aaron          Fixed in Version          => SVN Trunk       
08-Feb-06 20:02 aaron          Resolution               open => fixed       
08-Feb-06 20:02 aaron          Assigned To               => aaron           
08-Feb-06 20:02 aaron          Note Added: 0000998                          
======================================================================

Reply via email to