Package: imp4
Version: 4.0.2-2
When trying to administer IMAP users by filing in the "admin" array
in servers.php, an error is generated when going to "Users" under the
Horde "Administration" tab. The problem appears to be that the
password is encrypted in the session, but not decrypted for login to
the IMAP server for administration purposes. (Regular user IMAP
login does decrypt, and so works fine.)
The fix is easy. Change /usr/share/horde3/imp/lib/api.php line 265 from
$params['admin_password'] = $params['password'];
to
$params['admin_password'] = Secret::read(Secret::getKey('imp'),
$params['password']);
This change appears to have always been in upstream, so I'm not sure
how the bug crept in here. See http://cvs.horde.org/diff.php?
r1=1.86&r2=1.87&f=imp%2Flib%2Fapi.php
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]