Re: [NNTP] Interoperability with 502 answer to GROUP command

Russ Allbery <[email protected]> Tue, 15 May 2012 10:00:10 -0700

Newsgroups	gmane.ietf.nntp
Organization	The Eyrie
Message-ID	<[email protected]>

"Clive D.W. Feather" <[email protected]> writes:
> Julien LIE said:

>> GROUP group.auth2
>> 502 Read access denied

> No, this should be another 480. After all, in principle you could
> reauthenticate as user2.

No, you can't; see RFC 4643:

   After a successful authentication, the client MUST NOT issue another
   AUTHINFO command in the same session.  A server MUST NOT return the
   AUTHINFO capability in response to a CAPABILITIES command, and a
   server MUST reject any subsequent AUTHINFO commands with a 502
   response.

After you've authenticated, if you still can't read the group but the
group is not hidden, "permission denied" is the correct error code so far
as I can see.

-- 
Russ Allbery ([email protected])             <http://www.eyrie.org/~eagle/>