Hi all,

after i downloaded and installed the new version of vpopmail, it settled my problem, but for the existing domains and users, i need to manually delete them in vpasswd. anyway .. thanks to you all.

Kenny Lee

----- Original Message ----- From: "Marcello Lupo" <[EMAIL PROTECTED]>
To: <vchkpw@inter7.com>
Sent: 2007-09-20 03:53 PM
Subject: Re: [vchkpw] Disable clear password

Hi Kenny,
if you use mysql to store user data you should drop the clear password column too. It happend the same to me few months ago. I forgot to disable the clear password and after, when i recompiled and reinstalled, vpopmail was still putting the clear text password in the table till i didn't dropped the column in the DB.
I hope it can help.

Kenny Lee wrote:
Hi Jeremy,

after the re-compiling, i tried to create a new domain, and found that the [EMAIL PROTECTED] also showed out the clear password while i used "vuserinfo" command.

i unable to download the perl script you mentioned below ..

Kenny Lee

From: "Jeremy Kister" <[EMAIL PROTECTED]>
To: <vchkpw@inter7.com>
Sent: 2007-09-20 02:44 PM
Subject: Re: [vchkpw] Disable clear password

On 9/20/2007 2:28 AM, Kenny Lee wrote:
What i have tried ...
i go back to the installation folder, re-run again "./configure --disable-clear-passwd", then "make" and "make install-strip" ... but the result also same, when i used "vuserinfo" to view user's detail, the command still can show up the clear password of the user.

You did the right thing recompiling. That should make new passwords not contain the clear text.

But you've got to go through all the vpasswd files manually to remove the clear passwords from existing mailboxes.

I actually did the same thing years ago and published the code:


Jeremy Kister

Reply via email to