why is dovecot "Allowing any password"

Aki Tuomi aki.tuomi at dovecot.fi
Thu Mar 22 10:34:11 EET 2018



On 22.03.2018 10:30, mj wrote:
>
>
> On 03/21/2018 10:34 PM, @lbutlr wrote:
>> The question is does it allow remote users to login with no password?
> Yes, and the answer is: no.
>
>> If not, then the message ie nearly notification that login without a
>> password is potentially possible.
> Yes, but a worrying one. That's why i decided to post here.
>
>> I have no idea why you would have nopassword=y set in the first
>> place, so it seems the simplest way to eliminate this problem is to
>> take that out and have a secure environment for sending mail.
>
> Yes, however, for SOGo with Native Outlook compatibility or SAML
> logon, the config is required.
>
> (https://sogo.nu/files/docs/v2/SOGoNativeOutlookConfigurationGuide.html)
>
> Thanks,
> MJ

I have no idea *WHY* it is required by SOGo. It does not make sense.

Aki


More information about the dovecot mailing list