29 Dec
2004
29 Dec
'04
1:21 p.m.
On Wed, 2004-12-29 at 13:06 +0200, Timo Sirainen wrote:
first_valid_gid / last_valid_gid aren't really that important to change. They are only extra checks to prevent accidental use of eg. some daemon accounts due to unset passwords. So if you are using only virtual users and not /etc/passwd at all, it's rather useless to change them.
first/last_valid_uid I mean. The first/last_valid_gid are even less useful. But sure, setting them can prevent some damage if dovecot-auth has a security hole.