Hacktoberfest 2026：メンテナが10月に向けて印を付けた、オープンで初心者向けの issue。 Hacktoberfest の issue を見る

[IMAP] login without domain is alowed and creates new users

オープン
  • 何か問題がありますか？
#128 コメント 13 件 リアクション 0 件 担当者 0 名 GitHub で見る

まだ誰も着手していません。

評価

難易度
4/5
見積もり時間
3〜5日
初心者へのやさしさ
42/100
issue の種類
バグ
明瞭さ
おおむね明確
活発さ
停滞
技術スタック
php
領域
authentication, backend

調査の方向性

Start by reproducing the behavior with the shown OC_User_IMAP configuration, especially with domain stripping disabled. Compare authentication for [email protected] and user, and verify the resulting Nextcloud UIDs and external-account records. Done means a domainless login is rejected when the IMAP server rejects it and no unintended user is created.

索引モデルが issue の本文から書いたものです。

説明

1. to develop bug
Steps to reproduce
  1. setup nextcloud and configure user_external as further below (especially with false for domain stripping).
  2. login as [email protected] and everything seems to work as it should: new users get automatically created with uid [email protected].
    also the tables users_external, accounts and credentials seem fine...
  3. now try to login as user with the same (correct) password: then a new user with uid user gets created and seems to work like a normal nextcloud-user, although a login without the domain does not work at the plain IMAP-server! 😲
  4. first i thought this issue occurres because this instance has accidentally created new users without domain while migrating from user_external <0.6.0.
    but i've deleted them all and this bug seems to "work" also for completely new users.
Expected behaviour

user_external should IMHO not add the domain for authentication and even more important not strip it for the nextcloud uid especially if it is configured to have uids with domain!
in best case this creates confusion or panic at the users and is just annoying for admins... but in the worst case with more than one user_backends resp. domain, this creates a hell of a mess and serious trouble!

Actual behaviour

see Steps to reproduce

Affected Authentication backend

at least IMAP (i don't use other)

Server configuration

User External App version: (see Nextcloud apps page)
0.8.0

Operating system:
ubuntu

Web server:
apache

Database:
mysql 5.7.28

PHP version:
7.2.24

Nextcloud version: (see Nextcloud admin page)
16.0.8.1

Updated from an older Nextcloud/ownCloud or fresh install:
updated from at least NC13

Where did you install Nextcloud from:
hoster script

Signing status:

Signing status 
No errors have been found.

List of activated apps:

App list 
quite a bunch, but IMHO in this case irrelevant.

Nextcloud configuration:

Config report 
...
  'user_backends' => 
  array (
    0 => 
    array (
      'class' => 'OC_User_IMAP',
      'arguments' => 
      array (
        0 => 'mail.server.tld',
        1 => 993,
        2 => 'ssl',
        3 => 'domain.tld',
        4 => false,
        5 => false,
      ),
    ),
  ),
...
Logs
Web server error log
Web server error log 
nothing regarding this issue
Nextcloud log (data/nextcloud.log)
Nextcloud log 
nothing regarding this issue
Browser log
Browser log 
nothing regarding this issue
主要言語
JavaScript
スター
120
フォーク
72
30日以内にマージされた PR はありません

環境構築

はじめの一歩

  1. issue を最後まで読み、次にプロジェクトのコントリビューションガイドを読みます。
  2. 着手することを issue にコメントします — 二人が同じ作業をするのを防げます。
  3. リポジトリをフォークし、ブランチを切って変更します。
  4. issue 番号を参照したプルリクエストを送ります。

nextcloud/user_external のほかの issue

nextcloud/user_external の issue をすべて見る

似ている issue

JavaScript の issue をもっと見る

新しい issue をメールで受け取る

初心者向けの GitHub issue を短くまとめたダイジェスト。