[jira] [Resolved] (JAMES-1602) Constrain users created in the UsersFileRepository to RFC 3696 compliant ones

["Steve Brewin (JIRA)" <se...@james.apache.org>]

     [ https://issues.apache.org/jira/browse/JAMES-1602?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Steve Brewin resolved JAMES-1602.
---------------------------------
       Resolution: Fixed
    Fix Version/s: 2.3.2.1

> Constrain users created in the UsersFileRepository to RFC 3696 compliant ones
> -----------------------------------------------------------------------------
>
>                 Key: JAMES-1602
>                 URL: https://issues.apache.org/jira/browse/JAMES-1602
>             Project: James Server
>          Issue Type: Bug
>          Components: UsersStore & UsersRepository
>    Affects Versions: 2.3.2
>            Reporter: Steve Brewin
>            Assignee: Steve Brewin
>            Priority: Critical
>              Labels: security
>             Fix For: 2.3.2.1
>
>   Original Estimate: 24h
>  Remaining Estimate: 24h
>
> RFC 3696 defines the syntax for the local part of a mail address that all MTAs MUST support. 
> org.apache.james.userrepository.UsersFileRepository currently allows the creation of user names that do not conform to this. As the user name is used as the local part of the mail address this allows the creation of mails that cannot be guaranteed to be accepted by all MTAs.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

---------------------------------------------------------------------
To unsubscribe, e-mail: server-dev-unsubscribe@james.apache.org
For additional commands, e-mail: server-dev-help@james.apache.org