<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
<pre>Congratulations,
Your solution has worked with six w2k3 domain controllers and 20.000 accounts !!!!
RedHat Enterprise Linux 4.0 UP 2
Dovecot: dovecot-1.0-0_33.rc15.el4.at.i386.rpm <a
href="http://dl.atrpms.net/all/dovecot-1.0-0_33.rc15.el4.at.i386.rpm"></a>
Thanks
On Thu, 2006-11-09 at 10:47 +0000, Chris Wakelin wrote:
><i>
</i>><i> Matheus Antonio Oliveira wrote:
</i>><i> > People,
</i>><i> >
</i>><i> > Almost resolved, but with "blank password" against a "active directory - ldap -
</i>><i> > windows 2003 sp1" the user was logged in. See following logs.
</i>><i> >
</i>><i> > Good notice: the situation doesn't happen in "active directory - ldap - windows
</i>><i> > 2000 sp4"
</i>><i> >
</i>><i>
</i>><i> Oh dear - you're right! We're using 2003 Active Directory (but in "2000
</i>><i> mode") and I can repeat the behaviour with my test rc12 server ...
</i>><i>
</i>><i> * OK University of Reading IMAP test ready.
</i>><i> . LOGIN <username> ""
</i>><i> . OK Logged in.
</i>
Umm.. The auth bind succeeds with the empty password?
So should I just add a check that empty password will always fail if
auth_bind=yes? This prevents having users who don't have a password (eg.
they'd be proxied elsewhere), but I guess it's not that important.</pre>
</body>
</html>