I shouldn't get a NO and a OK, should I? I should only get the NO.
Strict IMAP clients could get confused.

* OK dbmail imap (protocol version 4r1) server 2.1 ready to run
. LOGIN test test
. NO login rejected
. OK LOGIN completed

It seems like imapcommands.c should check the return value of
dbmail_imap_session_handle_auth(...)


177:        dbmail_imap_session_handle_auth(self, self->args[0], self-
>args[1]);

and "return" immediately if it returns nonzero.

An additional result is that 
179:                db_log_ip(self->ci->ip);

is called if imap_before_smtp is true - WHETHER OR NOT the
authentication actually succeeded.

IMO, the server should hangup if the authentication fails.

-- 
Internet Connection High Quality Web Hosting
http://www.internetconnection.net/

Reply via email to