Since Courier's authentication functions are now external to its IMAP and POP3 services, the results are always going to be the same. I also just discovered another bug when testing the auto-learning password feature. It has to do with CRAM-MD5 authentication.
If I do a plaintext login which will check against the hashed password stored in the SQL table, I can login with any password. However, a CRAM-MD5 login (which checks against the clear password) with any password will fail. If both the hashed password and clear password in the SQL table are NULL (empty), I'd expect the behavior to be the same regardless of CRAM-MD5 or plaintext. Well, I'm going to upgrade to v5.4.26d and then recompile Courier-auth. I'll let you know if anything changes. Wouldn't it be funny if the "--enable-sql-logging" option which reportedly is the cause of another problem I'm having is also the source of this problem? -----Original Message----- From: Ken Jones [mailto:[EMAIL PROTECTED] Sent: Monday, April 14, 2008 12:53 PM To: vchkpw@inter7.com Subject: Re: [vchkpw] not auto-learning passwords Try logging in with pop3 and see if the password gets learned. note that you should recompile courier-imap if you change vpopmail's configure options. courier statically links the vpopmail library. -- Ken Jones !DSPAM:4803e001120509851213893!
