156343 - [LDAP] address lookup appears to be case sensitive when dir server lookup is enabled

Status: VERIFIED FIXED

(MailNews Core :: Security: S/MIME, defect, P1)

Description

[Charles Rosendahl]

If a directory server is configured for fetching encryption certificates during
mail composition and the recipient name is not identical to the name in the
certificate, it appears that the client is attempting to retrieve the
certificate from the directory server even when the cert exists locally.

example:
Enable directory server lookups on the netscape global directory.
Compose a mail message to [e-mail], encrypt, and send.

Actual behavior:
- If the cert doesn't exist in the local db already, a fetch will be performed
and the cert will be added to the local directory.
- If the cert already exists in the local db (which is the case the second time
around), a fetch is still performed even though it should not be.

The cert contains the email address [e-mail].  Bug 130692 fixed the
case sensitivity issue (i.e. [e-mail] vs. [e-mail]) and it
is still fixed.

The problem here is that once a dir server is enabled for lookups, the
case-sensitivity code appears to be out of step with the execution logic.

Expected behavior:
Once the cert exists in the local db, regardless of case, there is no further
need to perform a directory lookup and fetch operation.

Comment 1

[Stephane Saux]

Kai

Comment 2

[Kai Engert [:KaiE:]]

Attachment: Patch v1

Comment 3

[Javier Delgadillo]

Comment on attachment 96009 [details] [diff] [review]
Patch v1

r=javi

Comment 4

[jag (Peter Annema)]

Comment on attachment 96009 [details] [diff] [review]
Patch v1

sr=jag

Comment 5

[Kai Engert [:KaiE:]]

fixed on trunk

Comment 6

[Charles Rosendahl]

Trunk build 20020904 Windows

Reopening - the browser cannot find any user in the configured directory server.

Directory - nsdirectory.netscape.com
base dn:  dc=com

look for [e-mail] or [e-mail] or [e-mail] -
none are found.  The RTM release with the same profile finds the users.

Comment 7

[Charles Rosendahl]

Changed severity as directory lookup no longer appears to be working at all on
the trunk.

Comment 8

[Kai Engert [:KaiE:]]

I have looked at the new failure. I'm closing this bug, since the new problem is
caused by something else => bug 172028

Comment 9

[Kai Engert [:KaiE:]]

Regression keyword moved to new bug.

Comment 10

[Charles Rosendahl]

Verified on 20021007 Trunk Builds