You are viewing a plain text version of this content. The canonical link for it is here.
Posted to server-dev@james.apache.org by "Ralf Hauser (JIRA)" <se...@james.apache.org> on 2005/05/25 20:02:56 UTC

[jira] Created: (JAMES-376) encoding pop input as "ASCII" causes problems with passwords that are 8-bit

encoding pop input as "ASCII" causes problems with passwords that are 8-bit
---------------------------------------------------------------------------

         Key: JAMES-376
         URL: http://issues.apache.org/jira/browse/JAMES-376
     Project: James
        Type: Bug
  Components: POP3Server  
    Versions: 2.2.0    
 Environment: Linux
    Reporter: Ralf Hauser


it appears that new Outlook allows for 8 bit instead of the ascii, so if a password containing a "ü" or other Umlaut is used, there may be problems.


org.apache.james.pop3server.POP3Handler.handleConnection(Socket connection) 

determines the encoding.

It doesn't appear that base64 or alike as in http://james.apache.org/rfclist/pop3/rfc1734.txt is used.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
   http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see:
   http://www.atlassian.com/software/jira


---------------------------------------------------------------------
To unsubscribe, e-mail: server-dev-unsubscribe@james.apache.org
For additional commands, e-mail: server-dev-help@james.apache.org


[jira] Commented: (JAMES-376) encoding pop input as "ASCII" causes problems with passwords that are 8-bit

Posted by "Stefano Bagnara (JIRA)" <se...@james.apache.org>.
    [ http://issues.apache.org/jira/browse/JAMES-376?page=comments#action_12361628 ] 

Stefano Bagnara commented on JAMES-376:
---------------------------------------

there is no reference to Base64 encoding in http://james.apache.org/rfclist/pop3/rfc1939.txt.
I just added a test with ristretto to the pop3 server, added a user with an extended char and checked the inbox via pop3 and it worked.


> encoding pop input as "ASCII" causes problems with passwords that are 8-bit
> ---------------------------------------------------------------------------
>
>          Key: JAMES-376
>          URL: http://issues.apache.org/jira/browse/JAMES-376
>      Project: James
>         Type: Bug
>   Components: POP3Server
>     Versions: 2.2.0
>  Environment: Linux
>     Reporter: Ralf Hauser

>
> it appears that new Outlook allows for 8 bit instead of the ascii, so if a password containing a "ü" or other Umlaut is used, there may be problems.
> org.apache.james.pop3server.POP3Handler.handleConnection(Socket connection) 
> determines the encoding.
> It doesn't appear that base64 or alike as in http://james.apache.org/rfclist/pop3/rfc1734.txt is used.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
   http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see:
   http://www.atlassian.com/software/jira


---------------------------------------------------------------------
To unsubscribe, e-mail: server-dev-unsubscribe@james.apache.org
For additional commands, e-mail: server-dev-help@james.apache.org


[jira] Resolved: (JAMES-376) encoding pop input as "ASCII" causes problems with passwords that are 8-bit

Posted by "Stefano Bagnara (JIRA)" <se...@james.apache.org>.
     [ http://issues.apache.org/jira/browse/JAMES-376?page=all ]
     
Stefano Bagnara resolved JAMES-376:
-----------------------------------

    Resolution: Cannot Reproduce

I'm not sure to understand the bug report: James pop3 server does not support the AUTH extension you are referring.
If this report is a request for a new feature then if should be created as a new feature and not a bug. AUTH is not a mandatory extension for POP3 so this should not be considered a bug.
If, instead, you think the problem is in some bad response from james pop3 server, then provide more informations!

> encoding pop input as "ASCII" causes problems with passwords that are 8-bit
> ---------------------------------------------------------------------------
>
>          Key: JAMES-376
>          URL: http://issues.apache.org/jira/browse/JAMES-376
>      Project: James
>         Type: Bug
>   Components: POP3Server
>     Versions: 2.2.0
>  Environment: Linux
>     Reporter: Ralf Hauser

>
> it appears that new Outlook allows for 8 bit instead of the ascii, so if a password containing a "ü" or other Umlaut is used, there may be problems.
> org.apache.james.pop3server.POP3Handler.handleConnection(Socket connection) 
> determines the encoding.
> It doesn't appear that base64 or alike as in http://james.apache.org/rfclist/pop3/rfc1734.txt is used.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
   http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see:
   http://www.atlassian.com/software/jira


---------------------------------------------------------------------
To unsubscribe, e-mail: server-dev-unsubscribe@james.apache.org
For additional commands, e-mail: server-dev-help@james.apache.org


[jira] Commented: (JAMES-376) encoding pop input as "ASCII" causes problems with passwords that are 8-bit

Posted by "Ralf Hauser (JIRA)" <se...@james.apache.org>.
    [ http://issues.apache.org/jira/browse/JAMES-376?page=comments#action_12361636 ] 

Ralf Hauser commented on JAMES-376:
-----------------------------------

what is "ristretto"?

Anyway,, let me describe in more detail how I ran into the problem:

In a UTF-8 web-application, I let my james-users choose their passwords and store them in a mysql DB.

James then retrieves them from the mysql and attempts to validate them with what it gets from the MUA. Perhaps, me converting the UTF-8 from the DB back into ISO-8859-1 before comparison would have solved the problem, at least as long as the users only choose passwords with characters existing in ISO-8859-1 ?

> encoding pop input as "ASCII" causes problems with passwords that are 8-bit
> ---------------------------------------------------------------------------
>
>          Key: JAMES-376
>          URL: http://issues.apache.org/jira/browse/JAMES-376
>      Project: James
>         Type: Bug
>   Components: POP3Server
>     Versions: 2.2.0
>  Environment: Linux
>     Reporter: Ralf Hauser

>
> it appears that new Outlook allows for 8 bit instead of the ascii, so if a password containing a "ü" or other Umlaut is used, there may be problems.
> org.apache.james.pop3server.POP3Handler.handleConnection(Socket connection) 
> determines the encoding.
> It doesn't appear that base64 or alike as in http://james.apache.org/rfclist/pop3/rfc1734.txt is used.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
   http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see:
   http://www.atlassian.com/software/jira


---------------------------------------------------------------------
To unsubscribe, e-mail: server-dev-unsubscribe@james.apache.org
For additional commands, e-mail: server-dev-help@james.apache.org


[jira] Commented: (JAMES-376) encoding pop input as "ASCII" causes problems with passwords that are 8-bit

Posted by "Ralf Hauser (JIRA)" <se...@james.apache.org>.
    [ http://issues.apache.org/jira/browse/JAMES-376?page=comments#action_12361627 ] 

Ralf Hauser commented on JAMES-376:
-----------------------------------

Probably, I was misleading with my reference to the RFC.

The problem already occurs now with the  private void doPASS(String command,String argument,String argument1)
 in https://svn.apache.org/repos/asf/james/server/trunk/src/java/org/apache/james/pop3server/POP3Handler.java or rather 
public boolean test(String name, String password) {
in https://svn.apache.org/repos/asf/james/server/trunk/src/java/org/apache/james/userrepository/UsersFileRepository.java

or public boolean verifyPassword(String pass) { 
in https://svn.apache.org/repos/asf/james/server/trunk/src/java/org/apache/james/userrepository/DefaultUser.java

> encoding pop input as "ASCII" causes problems with passwords that are 8-bit
> ---------------------------------------------------------------------------
>
>          Key: JAMES-376
>          URL: http://issues.apache.org/jira/browse/JAMES-376
>      Project: James
>         Type: Bug
>   Components: POP3Server
>     Versions: 2.2.0
>  Environment: Linux
>     Reporter: Ralf Hauser

>
> it appears that new Outlook allows for 8 bit instead of the ascii, so if a password containing a "ü" or other Umlaut is used, there may be problems.
> org.apache.james.pop3server.POP3Handler.handleConnection(Socket connection) 
> determines the encoding.
> It doesn't appear that base64 or alike as in http://james.apache.org/rfclist/pop3/rfc1734.txt is used.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
   http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see:
   http://www.atlassian.com/software/jira


---------------------------------------------------------------------
To unsubscribe, e-mail: server-dev-unsubscribe@james.apache.org
For additional commands, e-mail: server-dev-help@james.apache.org


[jira] Commented: (JAMES-376) encoding pop input as "ASCII" causes problems with passwords that are 8-bit

Posted by "Stefano Bagnara (JIRA)" <se...@james.apache.org>.
    [ http://issues.apache.org/jira/browse/JAMES-376?page=comments#action_12361638 ] 

Stefano Bagnara commented on JAMES-376:
---------------------------------------

the POP3 connection is not UTF8: you should save the password in db as the same byte sequence that you expect in the pop3 connection.


> encoding pop input as "ASCII" causes problems with passwords that are 8-bit
> ---------------------------------------------------------------------------
>
>          Key: JAMES-376
>          URL: http://issues.apache.org/jira/browse/JAMES-376
>      Project: James
>         Type: Bug
>   Components: POP3Server
>     Versions: 2.2.0
>  Environment: Linux
>     Reporter: Ralf Hauser

>
> it appears that new Outlook allows for 8 bit instead of the ascii, so if a password containing a "ü" or other Umlaut is used, there may be problems.
> org.apache.james.pop3server.POP3Handler.handleConnection(Socket connection) 
> determines the encoding.
> It doesn't appear that base64 or alike as in http://james.apache.org/rfclist/pop3/rfc1734.txt is used.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
   http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see:
   http://www.atlassian.com/software/jira


---------------------------------------------------------------------
To unsubscribe, e-mail: server-dev-unsubscribe@james.apache.org
For additional commands, e-mail: server-dev-help@james.apache.org