thunderbird adds servername to username with no chance to disable
Categories
(Thunderbird :: Account Manager, defect)
Tracking
(Not tracked)
People
(Reporter: dmitry.zvorikin, Unassigned)
Details
Attachments
(3 files)
Comment 1•8 years ago
|
||
| Reporter | ||
Comment 2•8 years ago
|
||
| Reporter | ||
Updated•8 years ago
|
Comment 3•8 years ago
|
||
Comment 5•8 years ago
|
||
Comment 7•7 years ago
|
||
Comment 8•7 years ago
|
||
Comment 9•7 years ago
|
||
Comment 10•7 years ago
|
||
Aceman wrote:
So what did you put there? Can we have a screenshot?
Attached is a screenshot that shows a very similar username and hostname, both containing @. I changed the username so that it intentionally fails, but as you can see the reported username does not contain the concatenated/appended hostname, at lease according to the screenshot.
So this bug seems to be invalid. However, I will check also with wireshark to make sure the hostname is not appended. I will report back what I see and probably this bug can be closed.
Comment 11•7 years ago
|
||
(In reply to gene smith from comment #10)
Attached is a screenshot that shows a very similar username and hostname, both containing @.
Sorry only the username contains @.
So this bug seems to be invalid. However, I will check also with wireshark to make sure the hostname is not appended. I will report back what I see and probably this bug can be closed.
Yes, I verified with stunnel/wireshark that for PLAIN login (after decoding the BASE64 string) only the entered username is sent, in my case this was sent:
youareloggednow@bitback.pl***************
where ***... is the password. It did NOT send
youareloggednow@bitback.pl@alfa-dach.home.pl***************
I suspect that the reporters had other problems while trying to log in and username@hostname theory was a red herring. Note also in the attached logs it does show username@hostname but, looking at the code, I don't see anywhere else these are joined except in the MOZ_LOG() string for logging purposes.
Description
•