1
0
مراية لـ https://github.com/postalserver/postal.git تم المزامنة 2025-11-30 21:32:30 +00:00

Log access CRAM-MD5 authentication failures (#2304)

see https://github.com/postalserver/postal/issues/1182#issuecomment-1360832523
هذا الالتزام موجود في:
wadabum
2023-03-13 12:41:51 +01:00
ملتزم من قبل GitHub
الأصل acc1fe71ef
التزام 9b1ed1e7e1

عرض الملف

@@ -228,7 +228,10 @@ module Postal
username, password = Base64.decode64(data).split(' ', 2).map{ |a| a.chomp }
org_permlink, server_permalink = username.split(/[\/\_]/, 2)
server = ::Server.includes(:organization).where(:organizations => {:permalink => org_permlink}, :permalink => server_permalink).first
next '535 Denied' if server.nil?
if server.nil?
log "\e[33m WARN: AUTH failure for #{@ip_address}\e[0m"
next '535 Denied'
end
grant = nil
server.credentials.where(:type => 'SMTP').each do |credential|
correct_response = OpenSSL::HMAC.hexdigest(CRAM_MD5_DIGEST, credential.key, challenge)
@@ -239,7 +242,11 @@ module Postal
break
end
end
grant || '535 Denied'
if grant.nil?
log "\e[33m WARN: AUTH failure for #{@ip_address}\e[0m"
next "535 Denied"
end
grant
end
@proc = handler