[Dovecot] Direct RADIUS support, not via PAM

Timo Sirainen tss at iki.fi
Fri Aug 8 02:02:43 EEST 2003


On Friday, Aug 8, 2003, at 01:26 Europe/Helsinki, Jethro R Binks wrote:

> However, I am running other software (Exim MTA) that also authenticates
> via radius, using the radiusclient library from:
>
> http://www.mcs.de/~lf/radius/
>
> Is there any chance that this library could be used by Dovecot as a
> further authentication option, and save me having two separate radius
> configurations for two different (but related) pieces of software, and 
> the
> need to install pam_radius_auth, which I don't otherwise use?

That doesn't look very secure. It's coders didn't seem to understand 
how strncpy() and strncat() works. I wouldn't use it or consider 
including support for it in Dovecot before auditing the whole thing.



More information about the dovecot mailing list