So do I. I always reset passwords. Regarding the clear text password I remember
a dicussion some long time ago wherean possible authentication problem was
pointed out:
http://www.mail-archive.com/[email protected]/msg16852.html
http://www.mail-archive.com/[email protected]/msg16844.html
I still set password fields to a VARCHAR(1), so I can only see the password's
first letter. I have never experienced any authentication issues in the last
couple of years.
Johannes
Am 19.05.2009 23:54, schrieb Eric Shubert:
I (shamefully, on occasion) use /home/vpopmail/bin/vuserinfo for
password lookups.
FWIW, looking up passwords (storing passwords in clear text, to be
precise) is considered to be a bad practice from a security standpoint.
A more secure way is to have the admin reset the password when
forgotten. I'm not sure why QMT is configured to store PWs in clear
text. Might want to consider changing that in a future release.
---------------------------------------------------------------------------------
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
If you need professional help with your setup, contact them today!
---------------------------------------------------------------------------------
Please visit qmailtoaster.com for the latest news, updates, and packages.
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
