[vchkpw] APOP/Learned Passwords
I have configured my system to enable learned passwords, and this is working as expected. Any user that logs in sets their password on the first authentication. However, I have noticed that users logging in with APOP are able to check their mail, but NO password is set in the database. Indeed they can put whatever they want in the password field, and they will still be allowed to check that POP box. I am using vpopmail 5.3.8 with --enable-roaming-users=y --enable-mysql=y --enable-clear-passwd=y --enable-learn-passwords=y Has anyone else experienced this? Thanks! Regards, Paul Fries [EMAIL PROTECTED]
Re: [vchkpw] APOP/Learned Passwords
That's because only POP3 has that functionality. sqwebmail and courier imap also lack this feature. Regards, Tren On Fri, 6 Sep 2002, Paul Fries wrote: I have configured my system to enable learned passwords, and this is working as expected. Any user that logs in sets their password on the first authentication. However, I have noticed that users logging in with APOP are able to check their mail, but NO password is set in the database. Indeed they can put whatever they want in the password field, and they will still be allowed to check that POP box. I am using vpopmail 5.3.8 with --enable-roaming-users=y --enable-mysql=y --enable-clear-passwd=y --enable-learn-passwords=y Has anyone else experienced this? Thanks! Regards, Paul Fries [EMAIL PROTECTED] -- =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- - Tren Blackburn - Ownermailto:[EMAIL PROTECTED] = = EOT Networks http://www.eotnetworks.com - - Infinite Solutions for a Finite World (403) 818-7658 = =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Re: [vchkpw] APOP/Learned Passwords
it's correct, since APOP method doesn't send user's paswword in clear-text, and every time password send is different from the previous, so it is impossible (and unreasonable) to learn apop-passwords. New users should use clear-text password at first login to make this feature work. - Original Message - From: Paul Fries [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Saturday, September 07, 2002 5:09 AM Subject: [vchkpw] APOP/Learned Passwords I have configured my system to enable learned passwords, and this is working as expected. Any user that logs in sets their password on the first authentication. However, I have noticed that users logging in with APOP are able to check their mail, but NO password is set in the database. Indeed they can put whatever they want in the password field, and they will still be allowed to check that POP box. I am using vpopmail 5.3.8 with --enable-roaming-users=y --enable-mysql=y --enable-clear-passwd=y --enable-learn-passwords=y Has anyone else experienced this? Thanks! Regards, Paul Fries [EMAIL PROTECTED]
