You (Jonathan S. Thyer) write:
>ka_UserAuthenticate call in there to provide the functionality you need.
>I recompiled and tested both imapd, and the pop server.  Both work
>just fine.

        Wouldn't you also want to add a setpag call or run it under
pagsh?  popper looks only at the drop, but imapd happily will let you
browse any mbox it can read in the file system.
        It's also good to disallow empty passwords and to set a minuid
in that file.  (For example, any uid under 100 is not permitted to login
successfully).  Otherwise, they become a entry point for people to
hammer on your system.

                    Yours,
                            Larry Schwimmer
                            [EMAIL PROTECTED]

Reply via email to