james-server-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Steve Brewin (JIRA)" <server-...@james.apache.org>
Subject [jira] [Resolved] (JAMES-1602) Constrain users created in the UsersFileRepository to RFC 3696 compliant ones
Date Wed, 05 Aug 2015 17:42:05 GMT

     [ https://issues.apache.org/jira/browse/JAMES-1602?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Steve Brewin resolved JAMES-1602.
---------------------------------
       Resolution: Fixed
    Fix Version/s: 2.3.2.1

> Constrain users created in the UsersFileRepository to RFC 3696 compliant ones
> -----------------------------------------------------------------------------
>
>                 Key: JAMES-1602
>                 URL: https://issues.apache.org/jira/browse/JAMES-1602
>             Project: James Server
>          Issue Type: Bug
>          Components: UsersStore & UsersRepository
>    Affects Versions: 2.3.2
>            Reporter: Steve Brewin
>            Assignee: Steve Brewin
>            Priority: Critical
>              Labels: security
>             Fix For: 2.3.2.1
>
>   Original Estimate: 24h
>  Remaining Estimate: 24h
>
> RFC 3696 defines the syntax for the local part of a mail address that all MTAs MUST support.

> org.apache.james.userrepository.UsersFileRepository currently allows the creation of
user names that do not conform to this. As the user name is used as the local part of the
mail address this allows the creation of mails that cannot be guaranteed to be accepted by
all MTAs.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

---------------------------------------------------------------------
To unsubscribe, e-mail: server-dev-unsubscribe@james.apache.org
For additional commands, e-mail: server-dev-help@james.apache.org


Mime
View raw message