On 19/03/10 06:03 +0100, Lars Duesing wrote:
Hi List,
I am programming a sql canonuser-plugin. In short it does a sql-statement
(SELECT main_account FROM accounts WHERE address='%s')
This plugin is to be used in cyrus-imap.
All my code works fine. But: the canonuser-plugin is called multiple times
within the same context.
For instance:
---
DB:
main_account address
webmaster@xxxxxxxxxx lars@xxxxxxxxxx
lars@xxxxxxxxxx webmaster@xxxxxxxxxxxxxx
my code does (at the moment!) only one select statement, but is called
twice.
When I ask for webmaster@xxxxxxxxxxxxxx sasl sends webmaster@t - because the
length given back is the length from the first select.
My problem is it seems like the code is called twice at the same time.
Is this a problem of sasl or of imap?
Lars,
Without digging into the imapd code, the first thought that comes to mind is
that imapd is possibly performing a canon_user call for both your
authentication and authorization identities.
To see, you could authenticate with an authentication mech that does not
support proxy authentication (and does not pass both an authc and authz).
The LOGIN mech does not support proxy auth, but the PLAIN mech does. If
you're seeing two calls with a PLAIN authentication, but only 1 with a
LOGIN authentication, then that may be why.
--
Dan White
