[
https://issues.apache.org/jira/browse/JAMES-1602?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Steve Brewin resolved JAMES-1602.
---------------------------------
Resolution: Fixed
Fix Version/s: 2.3.2.1
> Constrain users created in the UsersFileRepository to RFC 3696 compliant ones
> -----------------------------------------------------------------------------
>
> Key: JAMES-1602
> URL: https://issues.apache.org/jira/browse/JAMES-1602
> Project: James Server
> Issue Type: Bug
> Components: UsersStore & UsersRepository
> Affects Versions: 2.3.2
> Reporter: Steve Brewin
> Assignee: Steve Brewin
> Priority: Critical
> Labels: security
> Fix For: 2.3.2.1
>
> Original Estimate: 24h
> Remaining Estimate: 24h
>
> RFC 3696 defines the syntax for the local part of a mail address that all
> MTAs MUST support.
> org.apache.james.userrepository.UsersFileRepository currently allows the
> creation of user names that do not conform to this. As the user name is used
> as the local part of the mail address this allows the creation of mails that
> cannot be guaranteed to be accepted by all MTAs.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
