> Date: Tue, 16 Jun 2015 09:46:05 -0700 > From: gordon.mess...@gmail.com > To: courier-users@lists.sourceforge.net > Subject: Re: [courier-users] spammer masquerading as root > > On 06/16/2015 05:44 AM, alan milligan wrote: > > on my Linux it injects !! into/as password in /etc/shadow > > And /etc/passwd should have an 'x' in the password field. Does it? > root:x:0:0:root:/root:/bin/bash But of course > > Do you have a "root" user in LDAP? > ldapsearch -x uid=root And of course not.
authtest verifies that it's getting the system root account. Alan
------------------------------------------------------------------------------
_______________________________________________ courier-users mailing list courier-users@lists.sourceforge.net Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users