Mailing List Archive

[Bug 667] New: Dovecot authentication bug - missing close
------- You are receiving this mail because: -------
You are on the CC list for the bug.

http://bugs.exim.org/show_bug.cgi?id=667
Summary: Dovecot authentication bug - missing close
Product: Exim
Version: 4.69
Platform: Other
OS/Version: All
Status: NEW
Severity: bug
Priority: medium
Component: SMTP Authentication
AssignedTo: nigel@exim.org
ReportedBy: nigel@exim.org
CC: exim-dev@exim.org


On Jul 31, 2007 11:42 AM, Chris Laif <chris.laif@googlemail.com> wrote:
Hi.

I'm using SMTP auth with Exim authenticating against Dovecot's auth
socket. The (excellent) SMTP test tool "swaks"
(http://jetmore.org/john/code/#swaks) tries multiple auth mechanismus
consecutively which leads to the following message in Dovecot's log
file:

Error: auth(default): BUG: Authentication client gave a PID 6738 of
existing connection


This bug can be fixed by adding a "close(fd);" in src/auths/dovecot.c.
Without the close()-call Exim does not shut down the connection and a
subsequent connection (announcing the same client PID during
handshake) will fail. You'll most likely see the above warning message
if a SMTP client tries multiple auth mechanisms with a wrong password.

Would be nice to have this fixed upstream in the Exim source.

Please also have a look at:
http://www.exim.org/lurker/message/20071127.164551.f35ace1e.ja.html


--
Configure bugmail: http://bugs.exim.org/userprefs.cgi?tab=email

--
## List details at http://lists.exim.org/mailman/listinfo/exim-dev Exim details at http://www.exim.org/ ##