Package: imp4
Version: 4.0.2-2

When trying to administer IMAP users by filing in the "admin" array in servers.php, an error is generated when going to "Users" under the Horde "Administration" tab. The problem appears to be that the password is encrypted in the session, but not decrypted for login to the IMAP server for administration purposes. (Regular user IMAP login does decrypt, and so works fine.)

The fix is easy.  Change /usr/share/horde3/imp/lib/api.php line 265 from

$params['admin_password'] = $params['password'];

to

$params['admin_password'] = Secret::read(Secret::getKey('imp'), $params['password']);


This change appears to have always been in upstream, so I'm not sure how the bug crept in here. See http://cvs.horde.org/diff.php? r1=1.86&r2=1.87&f=imp%2Flib%2Fapi.php


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to