Bug 38848

Summary:	auth cache allows login with old email address
Product:	UCS	Reporter:	Daniel Tröder <troeder>
Component:	Mail - Dovecot	Assignee:	Daniel Tröder <troeder>
Status:	CLOSED FIXED	QA Contact:	Sönke Schwardt-Krummrich <schwardt>
Severity:	normal
Priority:	P5	CC:	najjar, walkenhorst
Version:	UCS 4.0
Target Milestone:	---
Hardware:	Other
OS:	Linux
What kind of report is it?:	---	What type of bug is this?:	---
Who will be affected by this bug?:	---	How will those affected feel about the bug?:	---
User Pain:		Enterprise Customer affected?:
School Customer affected?:		ISV affected?:
Waiting Support:		Flags outvoted (downgraded) after PO Review:
Ticket number:		Bug group (optional):
Max CVSS v3 score:
Bug Depends on:
Bug Blocks:	34839

Description Daniel Tröder

2015-07-07 11:21:40 CEST

After changing the mailPrimaryAddress it is still possible to log into Dovecot with the previous email address. Dovecot automatically creates a new mail home for the old address.

Comment 1 Daniel Tröder

2015-07-07 12:11:40 CEST

Commit 61832 / 0.0.0-51 flushes Dovecots auth cache after a modification of the email address.

Comment 2 Sönke Schwardt-Krummrich

2015-07-08 00:44:40 CEST

Tested; auth cache is flushed after changing mailPrimaryAddress
→ VERIFIED

Comment 3 Janek Walkenhorst

2015-07-09 18:15:58 CEST

<http://errata.univention.de/ucs/4.0/237.html>