Bug 300052 - Unable to fetch list of newsgroups when password contains colon
Summary: Unable to fetch list of newsgroups when password contains colon
Status: RESOLVED UNMAINTAINED
Alias: None
Product: knode
Classification: Miscellaneous
Component: general (show other bugs)
Version: 4.8
Platform: unspecified Linux
: NOR normal
Target Milestone: ---
Assignee: kdepim bugs
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2012-05-15 10:29 UTC by Graeme Hewson
Modified: 2018-09-04 18:37 UTC (History)
0 users

See Also:
Latest Commit:
Version Fixed In:


Attachments
kioslave debug (2.10 KB, application/octet-stream)
2012-05-15 10:29 UTC, Graeme Hewson
Details

Note You need to log in before you can comment on or make changes to this bug.
Description Graeme Hewson 2012-05-15 10:29:27 UTC
Created attachment 71100 [details]
kioslave debug

To reproduce:

1. Set up a new account in KNode. For the test I used server news.eternal-september.org. I hope they don't mind (it's not the server I really want to use). User "abcdefgh", password "pq:rstuv". Of course, these are fake, for the purposes of this bug report, but tracing with Wireshark shows there's a problem with KNode.

2. Start Wireshark, and in Capture / Options enter capture filter "host news.eternal-september.org". Start capturing.

3. Click on Account / Subscribe to Newsgroups... In the popup dialog box, click Fetch List.

4. Stop capturing in Wireshark. Go to Statistics / Conversations. The TCP tab shows two TCP conversations (sessions). In the second conversation click "Follow Stream". This shows the problem with the colon in the password, where both the user and password get garbled. The password here is "pq:rstuv", remember, but the problem shows up if the colon is anywhere in the password.

200 mx04.eternal-september.org InterNetNews NNRP server INN 2.6.0 (20120411 snapshot) ready (posting ok)
MODE READER
200 mx04.eternal-september.org InterNetNews NNRP server INN 2.6.0 (20120411 snapshot) ready (posting ok)
AUTHINFO USER abcdefgh:pq
381 Enter password
AUTHINFO PASS rstuv
481 Invalid credentials
LIST
480 Authentication required for command
AUTHINFO USER abcdefgh:pq
381 Enter password
AUTHINFO PASS rstuv
481 Invalid credentials
QUIT
205 Bye!

This is the main topic of this bug report, but there are other things to point out besides:

A) There's no point in KNode trying to enter the authentication information again here, after already getting a "481 Invalid credentials" response.

B) Look at the first conversation. KNode logs in (or tries to) and then quits. There's no reason for this! Using my real account on the server where I encountered the problem, I see this (I'm munging, of course):

200
MODE READER
200
AUTHINFO USER XXX
381
AUTHINFO PASS XXX
281
QUIT
205

Response 281 means "Authentication accepted". Note that here KNode doesn't garble the account information.  

C) After step 3 above, KNode pops up an alert box entitled "Authentication Failed", with entry fields containing the existing Username and Password (the latter masked out). If I enter a different password here and try again to fetch the list of newsgroups, Wireshark shows the password hasn't been changed, and KNode is still using the original password.

D) I'm attaching output from kdebug. All output (information, warnings, errors and fatal errors) should have been logged to file, but these messages were written to the console where I started debugging:

kio_nntp(24110): Unexpected response to "LIST" command: ( 482 ) 482 Invalid Account Information
 
kio_nntp(24110)/kio (kioslave) KIO::SlaveBase::finished: finished() called after error()! Please fix the KIO slave.
Comment 1 Andrew Crouthamel 2018-09-04 18:37:34 UTC
Hello! Sorry to be the bearer of bad news, but this project has been unmaintained for many years so I am closing this bug.