On Wednesday 05 July 2006 23:08, Sam Varshavchik wrote:
> Hrvoje Habjanić writes:
> > On Wednesday 05 July 2006 12:46, Sam Varshavchik wrote:
[...]
> >> Because I've yet to see a logical explanation why authlib needs to know
> >> this.  authlib's purpose is to verify account passwords.  That's it. 
> >> The client's IP address is completely and totally irrelevant as far as
> >> the answer to the following question: is the password valid?
> >
> > True.
> >
> > BUT there then should be some kind of mechanism to limit/deny specific
> > user based on IP address (and maybe some other criteria).
>
> If you start chasing every kind of marginal situation that someone dreams
> up, thing will quickly spiral downhill.

Maybe. If you do it wisely, you can benefit a lot. I modified courier 
heavily -  wrote interface for OracleDB, IP checking, made quota aware of 
directories and a bunch of other small fixes. And it's working great for over 
a year now.

>
> I happen to have some knowledge of things that go on inside the corporate
> networks of 800 lb. corporate gorillas.  Literally billions of dollars in
> financial transactions move every day.  Now, I can tell you that one of the
> things they do NOT do, as far as remote access from employees, is have some
> kind of stupid IP-based restrictions.

For example: 
So, you made a car, with only driver seat, and you like it. It's great for 
you, but ppl who use it say that everything is great, EXCEPT they would like 
to see more seats in the car. And you say - it's stupid?

It's yours software, you wrote it, you make rules. Pls, don't say "it stupid" 
just because you can't see it's use. :-)

What everyone would like to know what is the best way to implement this 
functionality. Bottom line, you could make general purpose interface and then 
ppl will wrote their own modules for different kinds of authen/autor-tication 
and contribute to development of courier. I think that would be great. :-))

Keep up the good work.

H.

Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Courier-imap mailing list
[email protected]
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-imap

Reply via email to