Ken Jones wrote:
> 
> Juergen Hoffmann wrote:
> >
> > Hi all,
> >
> > I have to correct certain issues from my previous mail. Even if the user has
> > not been authenticated before he is still able to use webmail regardless of
> > vmodusers flags. Is this a bug? can someone confirm?
> >
> > Here is the call:
> >
> > vmoduser -w -r -p [EMAIL PROTECTED]
> 
> I found the solution. in the authlib/preauthvchkpw.c file
> 
> int auth_vchkpw_pre(const char *userid, const char *service,
>         int (*callback)(struct authinfo *, void *),
>                         void *arg)
> 
> service = webmail for sqwebmail
> server  = imap for courier-imap
> 
> So I can add a check for service type and check the vpopmail
> bit flags.
> 
> I'll update MrSam with a new preauthvchkpw.c this week
> 
> Ken Jones

I've put a copy of a new preauthvchkpw.c file at
http://www.inter7.com/vpopmail/preauthvchkpw.c

I tested it with sqwebmail and it allows vmoduser -w user@domain
to turn off webmail access. I haven't tested it with courier-imap
but that should work as well.

Ken

Reply via email to