mainClasspath Extensions - Support: sr #103351, in DEBUG mode, warn if server ask...

 
 

sr #103351: in DEBUG mode, warn if server ask for an AUTH, but not authenticator is given

Submitter:  Ralf Hauser <ralfhauser>
Submitted:  Fri 10 Sep 2004 09:20:55 AM UTC
   
 
Category:  None Priority:  5 - Normal
Severity:  1 - Wish Status:  Duplicate
Privacy:  Public Assigned to:  dog
Open/Closed:  Closed Operating System:  None
* Mandatory Fields

Add a New Comment Rich Markup
   

Tue 28 Sep 2004 04:56:07 PM UTC, comment #3: 

Any class in the VM can access the session properties. The default session instance is a singleton, so it lasts until the Session class is garbage collected.

Chris Burdess <dog>
Group administrator
Fri 10 Sep 2004 10:24:00 PM UTC, comment #2: 

SaslClientFactory.LOGIN really doesn't appear to be implemented yet --> bug #10346

Ralf Hauser <ralfhauser>
Fri 10 Sep 2004 09:10:30 PM UTC, comment #1: 

if sasl returns null, mention
to add the ${JRE_HOME}/lib/security/${VM_NAME}.security:

     security.provider.N=gnu.crypto.jce.GnuCrypto
    
see also: http://www.gnu.org/software/gnu-crypto/manual/Installing-the-GNU-Crypto-Provider.html#Installing%20the%20GNU%20Crypto%20Provider

Anonymous
Fri 10 Sep 2004 09:20:55 AM UTC, original submission:  

Just to ease migration of Sun users to gnu mail users, warn if
auth.password, auth.user, smtp.host, smtp.sender are used.

or should this even result in an error?

Chris> None of the above are documented by GNU JavaMail and as you say, they are

> ignored. Perhaps you're not actually supplying any authentication
> credentials, in which case the SMTPTransport cannot be expected to
> authenticate for you.
>
> Use the Transport.connect method specifying a username and password, or
> specify an Authenticator for the session. GNU JavaMail will never support
> authentication credentials stored in session properties, as this is
> inherently insecure.

Why is having them in a session inherently insecure?
Doesn't this session object just live for the particular message being processed?

Ralf Hauser <ralfhauser>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

CC list is empty

 

There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

Only logged-in users can vote.

 

Follow 3 latest changes.

Date Changed by Updated Field Previous Value => Replaced by
2004-09-29 dog StatusNone Duplicate
    Assigned toNone dog
    Open/ClosedOpen Closed

Back to the top

Powered by Savane 3.13-f8d8.
Corresponding source code