Bug#385788: [pkg-horde] Bug#385788: Fails to unencrypt admin passwd from servers.php

[Ola Lundqvist]

Hi

This is fixed in the version in unstable/testing. I do not think
it is severe enough for a stable update.

Regards,

// Ola

On Sun, Sep 03, 2006 at 12:27:07AM -0400, sam wrote:
> Package: imp4
> Version: 4.0.2-2
> 
> When trying to administer IMAP users by filing in the "admin" array  
> in servers.php, an error is generated when going to "Users" under the  
> Horde "Administration" tab.  The problem appears to be that the  
> password is encrypted in the session, but not decrypted for login to  
> the IMAP server for administration purposes.  (Regular user IMAP  
> login does decrypt, and so works fine.)
> 
> The fix is easy.  Change /usr/share/horde3/imp/lib/api.php line 265 from
> 
> $params['admin_password'] = $params['password'];
> 
> to
> 
> $params['admin_password'] = Secret::read(Secret::getKey('imp'),  
> $params['password']);
> 
> 
> This change appears to have always been in upstream, so I'm not sure  
> how the bug crept in here.  See  http://cvs.horde.org/diff.php? 
> r1=1.86&r2=1.87&f=imp%2Flib%2Fapi.php
> 
> 
> _______________________________________________
> pkg-horde-hackers mailing list
> pkg-horde-hackers at lists.alioth.debian.org
> http://lists.alioth.debian.org/mailman/listinfo/pkg-horde-hackers
> 

-- 
 --------------------- Ola Lundqvist ---------------------------
/  opal at debian.org                     Annebergsslingan 37      \
|  opal at lysator.liu.se                 654 65 KARLSTAD          |
|  +46 (0)54-10 14 30                  +46 (0)70-332 1551       |
|  http://www.opal.dhs.org             UIN/icq: 4912500         |
\  gpg/f.p.: 7090 A92B 18FE 7994 0C36  4FE4 18A1 B1CF 0FE5 3DD9 /
 ---------------------------------------------------------------