> -----Original Message-----
> From: FAHRIZAL RAZAK [mailto:[EMAIL PROTECTED]]
> Sent: 08 August 2001 04:03
> To: [EMAIL PROTECTED]
> Subject: False error report
[snip]
> Aug 7 18:39:38 my.host.net vpopmail[9907]: [ID 676305 mail.notice]
> vchkpw: password fail [EMAIL PROTECTED]:xxx.yyy.zzz.aaa
> Aug 7 18:45:25 my.host.net vpopmail[10621]: [ID 628377 mail.notice]
> vchkpw: password fail [EMAIL PROTECTED]:xxx.yyy.zzz.aaa
> Aug 7 18:50:05 my.host.net vpopmail[11181]: [ID 676305 mail.notice]
> vchkpw: password fail [EMAIL PROTECTED]:xxx.yyy.zzz.aaa
> Aug 7 18:55:51 my.host.net vpopmail[11928]: [ID 628377 mail.notice]
> vchkpw: password fail [EMAIL PROTECTED]:xxx.yyy.zzz.aaa
> Aug 7 18:58:52 my.host.net vpopmail[11958]: [ID 628677 mail.notice]
> vchkpw: password fail [EMAIL PROTECTED]:xxx.yyy.zzz.aaa
[snip]
Some mail tools (KDEs Kmail for instance) try to automagically
determine the securest way to download your email. This means it'll
try APOP, CRAM-MD5 etc before using a plain text password for logging
in. You'll get the password fails from one of these methods and then a
successful login right after when it uses the plain text password.
You can stop it by telling the mail tool in question to use the plain
text login for that account.
Marcus
--
Marcus Williams - http://www.onq2.com
Quintic Ltd, 39 Newnham Rd, Cambridge, CB3 9EY
