Hi
I got a problem with the loginnames that roundcube sends to the server for authentication. It seems that the username given to roundcube on loginscreen is processed with strtolower() to lower case and send to the server. My user for example is user@domain.tld but I can login to roundcube as well with UsEr@domain.tld which would never work in direct communication with the server (for example with Thunderbird). Is there a reason why roundcube lower-cases the usernames? If my user would be User@domain.tld then the login in roundcube will always be rejected as roundcube sends user@domain.tld which does NOT exist on the server.
Is there a setting in the conf to force roundcube to send the username as given by the user without any forcing of lower-case?
Thanks for any help Cheers
tobi _______________________________________________ List info: http://lists.roundcube.net/users/
On 12/18/2009 5:53 PM, tobi wrote:
Is there a setting in the conf to force roundcube to send the username as given by the user without any forcing of lower-case?
I always lowercase any/all logins to my mail servers.
Why on earth would anyone want case sensitive usernames?
Am 19.12.2009 00:37, schrieb Charles Marcus:
On 12/18/2009 5:53 PM, tobi wrote:
Is there a setting in the conf to force roundcube to send the username as given by the user without any forcing of lower-case?
I always lowercase any/all logins to my mail servers.
Why on earth would anyone want case sensitive usernames?
I don't need it, I don't have it ;-) We had a discussion in our forum and I could not believe the claim that rc let the user login with User. So I tested and saw okay that's true. I expected the same behaviour from rc as from "normal" mailclients which take the credentials as given and therefore get a reject from the server. So there is no config variable to achieve that?
Regards
tobi _______________________________________________ List info: http://lists.roundcube.net/users/
On 12/18/2009, tobi (tobster@brain-force.ch) wrote:
So there is no config variable to achieve that?
I don't know, but I always force lowercase on my auth mechanisms, so I don't have to care what silly users type into the username field in $random_mail_client. _______________________________________________ List info: http://lists.roundcube.net/users/
Am 19.12.2009 01:16, schrieb Charles Marcus:
On 12/18/2009, tobi (tobster@brain-force.ch) wrote:
So there is no config variable to achieve that?
I don't know, but I always force lowercase on my auth mechanisms, so I don't have to care what silly users type into the username field in $random_mail_client.
I know that one should not do this but if the username is J.Doe@domain.tld then the login with rc will always fail. The auth at the imap server is case-sensitive. So you think the only way would be to perform some source-diving? :-)
List info: http://lists.roundcube.net/users/
On Sat, 19 Dec 2009 00:51:19 +0100, tobi tobster@brain-force.ch wrote:
Am 19.12.2009 00:37, schrieb Charles Marcus:
On 12/18/2009 5:53 PM, tobi wrote:
Is there a setting in the conf to force roundcube to send the username as given by the user without any forcing of lower-case?
I always lowercase any/all logins to my mail servers.
Why on earth would anyone want case sensitive usernames?
I don't need it, I don't have it ;-) We had a discussion in our forum and I could not believe the claim that rc let the user login with User. So I tested and saw okay that's true. I expected the same behaviour from rc as from "normal" mailclients which take the credentials as given and therefore get a reject from the
server.
So there is no config variable to achieve that?
Regards
tobi
Personally I don't think forcing lowercase for usernames is bad.. and if you really want to compare with other clients then I think you should be comparing with other webmail clients. I don't have a Hotmail account, but I just tested with Gmail by capitalising 3 of the letters in my login name and it logged in just fine.
Cheers, Mark
List info: http://lists.roundcube.net/users/
Am 19.12.2009 01:58, schrieb Mark Little:
Personally I don't think forcing lowercase for usernames is bad.. and if you really want to compare with other clients then I think you should be comparing with other webmail clients. I don't have a Hotmail account, but I just tested with Gmail by capitalising 3 of the letters in my login name and it logged in just fine.
Cheers, Mark
I did not mean that lowercase usernames is bad. I just thought that it would be possible to turn it off in roundcube
Regards
tobi _______________________________________________ List info: http://lists.roundcube.net/users/
I do the force to lower case on my IMAP server (Dovecot). Users can enter jdoe, Jdoe, JDoe or JDOE and all work. In my mind, the IMAP server is where this should happen, not the client.
Arne Berglund System Administrator, Internet Services Lane Education Service District Eugene, OR ______________
On Sat, 19 Dec 2009 02:03:41 +0100, tobi tobster@brain-force.ch wrote:
Am 19.12.2009 01:58, schrieb Mark Little:
Personally I don't think forcing lowercase for usernames is bad.. and
if
you really want to compare with other clients then I think you should
be
comparing with other webmail clients. I don't have a Hotmail account, but I just tested with Gmail by capitalising 3 of the letters in my login name and it logged in just fine.
Cheers, Mark
I did not mean that lowercase usernames is bad. I just thought that it would be possible to turn it off in roundcube
Regards
tobi _______________________________________________ List info: http://lists.roundcube.net/users/
List info: http://lists.roundcube.net/users/
Pretty stupid thread.
Everyone in the whole world knows that email addresses are case insensitive. Why on earth would case matter?
Thats like having two domains, www.xyz.com compared to Www.xyz.com
Like I said, pretty stupid.
xxx
On Fri, 18 Dec 2009 17:12:36 -0800, Arne Berglund aberglund@lesd.k12.or.us wrote:
I do the force to lower case on my IMAP server (Dovecot). Users can
enter
jdoe, Jdoe, JDoe or JDOE and all work. In my mind, the IMAP server is
where
this should happen, not the client.
Arne Berglund System Administrator, Internet Services Lane Education Service District Eugene, OR ______________
On Sat, 19 Dec 2009 02:03:41 +0100, tobi tobster@brain-force.ch wrote:
Am 19.12.2009 01:58, schrieb Mark Little:
Personally I don't think forcing lowercase for usernames is bad.. and
if
you really want to compare with other clients then I think you should
be
comparing with other webmail clients. I don't have a Hotmail account, but I just tested with Gmail by capitalising 3 of the letters in my login name and it logged in just fine.
Cheers, Mark
I did not mean that lowercase usernames is bad. I just thought that it would be possible to turn it off in roundcube
Regards
tobi _______________________________________________ List info: http://lists.roundcube.net/users/
List info: http://lists.roundcube.net/users/
List info: http://lists.roundcube.net/users/
Email addresses are case insensitive, but usernames don't have to be and frequently are not. Since many multi-domain systems use the email address as username, there is some relevance.
Arne Berglund System Administrator, Internet Services Lane Education Service District Eugene, OR ______________
On Sat, 19 Dec 2009 03:20:28 +0000, Steve Perkins expendable@sgperkins.org wrote:
Pretty stupid thread.
Everyone in the whole world knows that email addresses are case insensitive. Why on earth would case matter?
Thats like having two domains, www.xyz.com compared to Www.xyz.com
Like I said, pretty stupid.
xxx
On Fri, 18 Dec 2009 17:12:36 -0800, Arne Berglund aberglund@lesd.k12.or.us wrote:
I do the force to lower case on my IMAP server (Dovecot). Users can
enter
jdoe, Jdoe, JDoe or JDOE and all work. In my mind, the IMAP server is
where
this should happen, not the client.
Arne Berglund System Administrator, Internet Services Lane Education Service District Eugene, OR ______________
On Sat, 19 Dec 2009 02:03:41 +0100, tobi tobster@brain-force.ch
wrote:
Am 19.12.2009 01:58, schrieb Mark Little:
Personally I don't think forcing lowercase for usernames is bad.. and
if
you really want to compare with other clients then I think you should
be
comparing with other webmail clients. I don't have a Hotmail
account,
but I just tested with Gmail by capitalising 3 of the letters in my login name and it logged in just fine.
Cheers, Mark
I did not mean that lowercase usernames is bad. I just thought that it would be possible to turn it off in roundcube
Regards
tobi _______________________________________________ List info: http://lists.roundcube.net/users/
List info: http://lists.roundcube.net/users/
List info: http://lists.roundcube.net/users/
Am 19.12.2009 04:20, schrieb Steve Perkins:
Pretty stupid thread.
Everyone in the whole world knows that email addresses are case insensitive. Why on earth would case matter?
Thats like having two domains, www.xyz.com compared to Www.xyz.com
Like I said, pretty stupid.
xxx
The localpart of an email address can be case-sensitive. The domainpart not.. For me it's more stupid if a client changes the given username before sending it to a server ;-) For me the best would be to lowercase the username only if the server reject the login, but first it should be tried a given by the user (because some users know what they do if they enter John instead of john)
On Fri, 18 Dec 2009 17:12:36 -0800, Arne Berglund aberglund@lesd.k12.or.us wrote:
I do the force to lower case on my IMAP server (Dovecot). Users can
enter
jdoe, Jdoe, JDoe or JDOE and all work. In my mind, the IMAP server is
where
this should happen, not the client.
Arne Berglund System Administrator, Internet Services Lane Education Service District Eugene, OR
@Arne How you do this on dovecot? I have a Dovecot running too, but so far I could not find a setting to lower-case loginnames before verify with doveot/passwd. Is there such an easy setting in dvecot.conf? I mean without "fighting" with the source and re-compile.
Thanks and regards
tobi _______________________________________________ List info: http://lists.roundcube.net/users/
On 12/18/2009, Mark Little (marklittle@koallo.com) wrote:
Personally I don't think forcing lowercase for usernames is bad.
I don't either, but it makes the most sense to do this at the SERVER level, not the client level.
On 12/19/2009, tobi (tobster@brain-force.ch) wrote:
The localpart of an email address can be case-sensitive. The domainpart not.. For me it's more stupid if a client changes the given username before sending it to a server ;-)
I agree with this actually.
It should be the SERVER that decides if case-sensitive local parts are allowed, not the client.
@Arne How you do this on dovecot? I have a Dovecot running too, but so far I could not find a setting to lower-case loginnames before verify with doveot/passwd. Is there such an easy setting in dvecot.conf?
Set this variable in /etc/dovecot/dovecot.conf:
auth_username_format = %Lu
And restart Dovecot.
See http://wiki.dovecot.org/MainConfig#Authentication_processes for other options.
Arne Berglund System Administrator, Internet Services Lane Education Service District Eugene, OR ______________ _______________________________________________ List info: http://lists.roundcube.net/users/
Steve Perkins wrote:
Pretty stupid thread.
Everyone in the whole world knows that email addresses are case insensitive. Why on earth would case matter?
Thats like having two domains, www.xyz.com compared to Www.xyz.com
Like I said, pretty stupid.
What the hell is everyone talking about?
From RFC 5231 (and the previous ones):
Verbs and argument values (e.g., "TO:" or "to:" in the RCPT command
and extension name keywords) are not case sensitive, with the sole
exception in this specification of a mailbox local-part (SMTP
Extensions may explicitly specify case-sensitive elements). That is,
a command verb, an argument value other than a mailbox local-part,
and free form text MAY be encoded in upper case, lower case, or any
mixture of upper and lower case with no impact on its meaning.
* The local-part of a mailbox MUST BE treated as case sensitive. *
Therefore, SMTP implementations MUST take care to preserve the case
of mailbox local-parts. In particular, for some hosts, the user
"smith" is different from the user "Smith". However, exploiting the
case sensitivity of mailbox local-parts impedes interoperability and
is discouraged. Mailbox domains follow normal DNS rules and are
hence not case sensitive.
(emphasis mine). If you can deliver mail case-sensitively, you should be able to /retrieve/ mail case-sensitively. If your LDA/IMAP server override this (per the recommendation), then so be it; but at that point the case-folding is no longer the responsibility of the client. _______________________________________________ List info: http://lists.roundcube.net/users/
Michael Orlitzky wrote:
From RFC 5231 (and the previous ones):
Ugh, 5321 of course. _______________________________________________ List info: http://lists.roundcube.net/users/
Did anyone open a bug report for RC to fix this so that it honors the case the user enters?
Yes I opend a bug report. See http://trac.roundcube.net/ticket/1486393
Cheers
tobi On Wed, 23 Dec 2009 09:04:46 -0500, Charles Marcus CMarcus@Media-Brokers.com wrote:
Did anyone open a bug report for RC to fix this so that it honors the case the user enters?
List info: http://lists.roundcube.net/users/
-
Arne Berglund -
Charles Marcus -
Mark Little -
Michael Orlitzky -
Steve Perkins -
tobi -
Tobias