severity 917331 normal
thanks

On Wed, 26 Dec 2018 09:21:21 +0000, halfdog writes:
>No matter which password is entered, inc will always send the
>password string "(null)" to the server, thus failing authentication.

thanks for reporting this; i can confirm your observation, and it looks
as if there's a bug in the 'credentials: legacy' handling (which happens to
be the default as per man mh-profile).

i'll investigate the issue as soon as i find a bit of time.

however, the netrc credentials mechanism is not affected by the bug,
so for the time being i'd suggest using that as a workaround.
(because this workaround exists i'm lowering the severity of
the bug to normal.)

ie 'credentials: file:.netrc' in .mh_profile, and a 0600-chmod'd ~/.netrc with
'machine localhost login testme password whatever'
does convince inc to pass the password as expected.

regards
az


-- 
Alexander Zangerl + GPG Key 2FCCF66BB963BD5F + http://snafu.priv.at/
#define sizeof(x) rand() -- Dark_Brood

Attachment: signature.asc
Description: Digital Signature

Reply via email to