Hi all,
I've discovered what appears to be a bug in the header folding code of lmtpd. Cyrus-2.2.8 on Slackware Linux 9.1, 2.4 kernel. It occurs only under the following specific conditions:
1. connections to lmtpd via TCP from a different server 2. remote server connects using TLS 3. remote server passes identity of authenticated sender (AUTH=foo)
Under the above conditions, the message header added by lmtpd looks like this:
Received: from tcell2.emu.edu (tcell2.emu.edu [10.3.200.80]) (authenticated user=foo bits=0) by capybara.emu.edu (Cyrus v2.2.8) with LMTPSA (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256/256 verify=YES); Wed, 15 Sep 2004 12:48:15 +0000
(authenticated user=foo bits=0)
by capybara.emu.edu (Cyrus v2.2.8) with LMTPSA
Wed, 15 Sep 2004 12:48:15 +0000
It should be (with no wrapping before 'verify=YES'): Received: from tcell2.emu.edu (tcell2.emu.edu [10.3.200.80]) (authenticated user=foo bits=0) by capybara.emu.edu (Cyrus v2.2.8) with LMTPSA (version=TLSv1/SSLv3 cipher=AES256-SHA bits=256/256 verify=YES); Wed, 15 Sep 2004 21:02:59 +0000
I made a slight modification to the code lmtpengine.c which fixed the problem for me, but I thought I'd ask if anyone else had noticed this behavior before I submitted a patch.
-- Jason Alderfer Information Systems Eastern Mennonite University Harrisonburg, VA 22802 --- Cyrus Home Page: http://asg.web.cmu.edu/cyrus Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html
