Bug #63126 [Opn->Asn]: DISABLE_AUTHENTICATOR ignores array
| From: | remi@php.net | Date: | Sat, 24 Nov 2012 13:39:40 +0000 |
| Subject: | Bug #63126 [Opn->Asn]: DISABLE_AUTHENTICATOR ignores array | ||
| References: | 1 | Groups: | php.bugs |
| Request: | Send a blank email to php-bugs+get-174896@lists.php.net to get a copy of this message | ||
Edit report at https://bugs.php.net/bug.php?id=63126&edit=1
ID: 63126
Updated by: remi@php.net
Reported by: remi@php.net
Summary: DISABLE_AUTHENTICATOR ignores array
-Status: Open
+Status: Assigned
Type: Bug
Package: IMAP related
Operating System: GNU/Linux (Fedora 18)
PHP Version: 5.4.7
-Assigned To:
+Assigned To: remi
Block user comment: N
Private report: N
Previous Comments:
------------------------------------------------------------------------
[2012-09-21 07:55:31] remi@php.net
I try to send my first pull request, I hope this is ok
https://github.com/php/php-src/pull/200
------------------------------------------------------------------------
[2012-09-21 07:38:31] remi@php.net
I can find a exchange server an test the fix.
Test script:
$inbox =
imap_open($server,$userlogin,$password,OP_HALFOPEN,1,array('DISABLE_AUTHENTICATOR' =>
array('GSSAPI','NTLM')));
var_dump(imap_errors());
Without the patch:
array(2) {
[0]=>
string(148) "Kerberos error: Credentials cache file
'/run/user/1000/krb5cc_ea1f24ead9d3199b715d4d57505d4335/t (try running kinit) for
exchange2007.xxxx"
[1]=>
string(55) "SECURITY PROBLEM: insecure server advertised AUTH=PLAIN"
}
With the patch:
array(1) {
[0]=>
string(55) "SECURITY PROBLEM: insecure server advertised AUTH=PLAIN"
}
------------------------------------------------------------------------
[2012-09-21 06:42:50] remi@php.net
This also affects php 5.3
------------------------------------------------------------------------
[2012-09-21 06:33:46] remi@php.net
Description:
------------
According to source code, DISABLE_AUTHENTICATOR could be a string or an array.
Works as expected:
imap_open($srv,$user,$pass,OP_HALF_OPEN,1,
array('DISABLE_AUTHENTICATOR'=>'GSSAPI');
Doesn't works:
imap_open($srv,$user,$pass,OP_HALF_OPEN,1,
array('DISABLE_AUTHENTICATOR'=>array('GSSAPI','NTLM'));
The trivial attached patch should fix this (but cannot test it)
------------------------------------------------------------------------
--
Edit this bug report at https://bugs.php.net/bug.php?id=63126&edit=1