why is dovecot "Allowing any password"
lists at merit.unu.edu
Wed Mar 21 18:31:54 EET 2018
Thanks for the quick answer!
On 03/21/2018 05:24 PM, Aki Tuomi wrote:
> This is what 'nopassword=y' does. I'm guessing this is an attempt to allow logging in from localhost without password, but I'd use master password (for applications or webmails), or
Yes, the config is taken from the SOGo configuration guide, which can be
Yes, but we have args = nopassword=y allow_nets=127.0.0.1/32
so it should only allow passwordless logins from localhost, right..?
And in "Debug: static(username,126.96.36.199,<g2/rF+ZnjAAu5ceg>): Allowing any
password" 188.8.131.52 is NOT localhost...
(obviously 184.108.40.206 is not the *real* ip, bit it's a *real* ip from the
internet, NOT localhost...
More information about the dovecot