Bug#702941: normalize patch is incomplete

[Ondřej Surý]

Package: cyrus-imapd-2.4
Version: 2.4.16-3
Severity: important

Just creating bug for user reported problem:
http://lists.andrew.cmu.edu/pipermail/info-cyrus/2013-March/036835.html

> Is your system RedHat/CentOS/Fedora ?
> I think their version (since 2.3.x) have a patch that "normalize" 
> (lowercase + strip leading and trailing whitespaces) authentication ids. 
> From what I could see it appears it was added as a configuration option, 
> but the code is not complete and so the default value (enabled) applies.

> Maybe it's the same patch than in RedHat. There the issue is that cyrus 
> configuration code is separated in 2 parts: one in the core library 
> (pretty much static; values accessed with 
> libcyrus_config_getxxx/libcyrus_config_setxxx), the other being 
> accessible in all services and populated from the content of imapd.conf 
> (values accessed with config_getxxx).
> The patch declares the option in both parts and uses 
> libcyrus_config_getxxx to query the value because it is needed in the 
> core library. From what I could see, what is lacking is a line of code - 
> usually in imap/global.c:cyrus_init - do get the value from imapd.conf 
> and set it in the core library, like it is already done for some other 
> options. Example with username_tolower:
> 
>      libcyrus_config_setswitch(CYRUSOPT_USERNAME_TOLOWER,
>                    config_getswitch(IMAPOPT_USERNAME_TOLOWER));


-- System Information:
Debian Release: 7.0
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 3.2.0-4-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash