[Web-cyradm] User authentication is ignored!

George Kontostanos gkontos.mail at gmail.com
Tue Oct 30 09:32:50 CET 2007


Solved by changing :

auth sufficient pam_mysql.so user=postfix passwd=postfix
host=localhost db=mail table=accountuser usercolumn=username
passwdcolumn=password crypt=1 logtable=log logmsgcolumn=msg
logusercolumn=user loghostcolumn=host logpidcolumn=pid
logtimecolumn=time

to:

auth required pam_mysql.so user=postfix passwd=postfix
host=localhost db=mail table=accountuser usercolumn=username
passwdcolumn=password crypt=1 logtable=log logmsgcolumn=msg
logusercolumn=user loghostcolumn=host logpidcolumn=pid
logtimecolumn=time

I suggest that everyone should have a look at this since it appears to
be a serious security issue.

On 10/29/07, Marcel Hartmann <mail at marcel-hartmann.com> wrote:
> Sorry i mean the saslauthd! Not postfix!
>
> Regards
> Marcel
>
> _____________________________________________
>
> Marcel Hartmann
>
> Bokeler Landstraße 24a    26215 Wiefelstede - Bokel
> Tel. 044 02 - 69 50 62      Fax 044 02 - 69 55 801
> e-Mail:                             mail at marcel-hartmann.com
>
>
> _______________________________________________
> This mailing list is hosted and supported
> by bit-heads GmbH | http://www.bit-heads.ch
>
> _______________________________________________
> Web-cyradm mailing list
> Web-cyradm at web-cyradm.org
> http://www.web-cyradm.org/mailman/listinfo/web-cyradm
>


More information about the Web-cyradm mailing list