why is dovecot "Allowing any password"
aki.tuomi at dovecot.fi
Thu Mar 22 10:34:11 EET 2018
On 22.03.2018 10:30, mj wrote:
> On 03/21/2018 10:34 PM, @lbutlr wrote:
>> The question is does it allow remote users to login with no password?
> Yes, and the answer is: no.
>> If not, then the message ie nearly notification that login without a
>> password is potentially possible.
> Yes, but a worrying one. That's why i decided to post here.
>> I have no idea why you would have nopassword=y set in the first
>> place, so it seems the simplest way to eliminate this problem is to
>> take that out and have a secure environment for sending mail.
> Yes, however, for SOGo with Native Outlook compatibility or SAML
> logon, the config is required.
I have no idea *WHY* it is required by SOGo. It does not make sense.
More information about the dovecot