D. Hilbig wrote:
I configured vpopmail v5.4.25 with the
--enable-learn-passwords option.

I created a user without a password:
  ./vadduser -n [EMAIL PROTECTED]

I then logged into Courier-IMAP's pop3d-ssl with:
  USER [EMAIL PROTECTED]
  PASS anything
and it let me login.

I then did it again but with a different password
and I was able to login again.

I looked in the mysql table vpopmail.vpopmail to see
that the password field wasn't updated.

What's going on here?  Where is the failure?
Hopefully not a short between the floor and the keyboard. ;)


vpopmail v5.4.25 on CentOS Linux v5.1 (x86 32-bit).

My configuration options:

./configure --enable-learn-passwords \
  --enable-onchange-script \
  --enable-spamassassin \
  --enable-spamc-prog=/usr/bin/spamc \
  --enable-auth-module=mysql \
  --enable-sql-logging \
  --enable-mysql-limits \
  --enable-valias

Try logging in with pop3 and see if the password gets learned.

note that you should recompile courier-imap if you change
vpopmail's configure options. courier statically links the
vpopmail library.

--
Ken Jones

Reply via email to