I have configured my system to enable learned passwords, and this is
working as expected. Any user that logs in sets their password on the
first authentication. 

However, I have noticed that users logging in with APOP are able to
check their mail, but NO password is set in the database. Indeed they
can put whatever they want in the password field, and they will still be
allowed to check that POP box.

I am using vpopmail 5.3.8 with --enable-roaming-users=y --enable-mysql=y
--enable-clear-passwd=y --enable-learn-passwords=y

Has anyone else experienced this?


Paul Fries

Reply via email to