What mailer are you using? QMAIL, What? Is it vpopmail or are you using some sort of sendmail thing?
Sam -----Original Message----- From: George Leatherman [mailto:[EMAIL PROTECTED] Sent: Tuesday, June 29, 2004 4:02 PM To: Samuel Hill Subject: Re: Upper Case NOT Allowed in UserName Authentication Thank You for responding.... I do have customers with Upper/Lower case usernames and passwords and they do know that they are case sensitive. But apparently something along the authentification doesn't. I've used both checkpassword-pam and /etc/tmda-cgi clear text but neither accept Upper Case. I entered JOE as the username - why is getpwnam() returning it in LOWER case? str='getpwnam(): name not found: joe' Here's a snip from a wrong password (I thought that any program that returns 0 is authenticated) Capturing the debug stream... Setting up file authentication with file '/etc/tmdauth' Setting up checkpw authentication with '/var/qmail/bin/checkpwd -sradius' Auth program is '/var/qmail/bin/checkpwd -sradius -sradius' Trying checkpw method UID = 0, EUID = 0 Successful pipe(). Successful fork(), PID = 6566 PID = 6566, status = 256 Authentication returned: 0 Thank you Sam! George ----- Original Message ----- From: "Samuel Hill" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, June 29, 2004 12:58 PM Subject: RE: Upper Case NOT Allowed in UserName Authentication > I think it is pretty standard security to be strict on > username/password and case. What is wrong with just telling your users > that the username and password is case sensitive? > > You can modify the html template (in the template directory) with a > statement. > > Is the problem that your users have some with upper case > usernames/passwords? > > PS. I think your emails are in html or something, people will not > respond to those. > > Sam > > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > On Behalf Of George Leatherman > Sent: Tuesday, June 29, 2004 2:09 PM > To: [EMAIL PROTECTED] > Subject: Upper Case NOT Allowed in UserName Authentication > > > Howdy, > > I've installed the latest tmda and tmda-cgi with Blue patch on a > Linux9.1 machine. I use /etc/tmda mode 400 for plaintext > username/password authentification - simple enough but > ALL username/password combinations MUST be in lower case before it is > authenticated. > Any username/password charactures in UPPER case results in WRONG > PASSWORD > with the source message of > > Username z2ycrnuc not found in system. > str='getpwnam(): name not found: z2ycrnuc' > > The username I inputed was Z2yCRnuc > > > I've tried checkpassword-pam also "/var/qmail/bin/checkpassword-pam > -slogin" > This reports the same after recompiling. Using checkpassword with POP3 > I do > get authenticated. > > Is there a workaround or am I not seeing something I should? I > appreciate your help with this great program and any comments with be > absorbed too! > > George > > _____________________________________________ > tmda-users mailing list ([EMAIL PROTECTED]) > http://tmda.net/lists/listinfo/tmda-users > _____________________________________________ tmda-users mailing list ([EMAIL PROTECTED]) http://tmda.net/lists/listinfo/tmda-users
