Go Back   HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials > Linux Forums > HOWTO-Related Questions

Do you like HowtoForge? Please consider supporting us by becoming a subscriber.
Reply
 
Thread Tools Display Modes
  #1  
Old 15th September 2010, 10:36
j.smith1981 j.smith1981 is offline
Member
 
Join Date: Nov 2008
Posts: 63
Thanks: 0
Thanked 3 Times in 3 Posts
Question Postfix courier, IMAP squirrelmail accepting any passwords for users accounts ERROR**

Hi all,

Having a bit of a worry here!

I am able to login to Squirrelmail after falco's tutorial with any password given.

ie if I type myusername@mydomain.com then say 123456 as my password, i get to login.

but if I was to say change my password 654321 it still accepts that, why on earth is this?

Does anyone know of anyway of stopping this? Just shouldnt be happening, wasnt happening yesturday thats for sure.

Be interesting to see anyones reply.

Kind regards and I look forward to a response in advance,
Jeremy.
Reply With Quote
Sponsored Links
  #2  
Old 16th September 2010, 13:57
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,701
Thanks: 1,900
Thanked 2,735 Times in 2,571 Posts
Default

How exactly did you change the password?
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
  #3  
Old 16th September 2010, 16:36
j.smith1981 j.smith1981 is offline
Member
 
Join Date: Nov 2008
Posts: 63
Thanks: 0
Thanked 3 Times in 3 Posts
Question

I didnt change the password at all.

Its just started accepting any passwords I input, its got nothing to do with changing passwords at all.

The example I gave was what I have found wrong.

Not even that above I mean say I typed invents into the password field, it would still let me in without it being what its supposed to be as such

Say my real password was 'welcome1'

The password I input into squirrelmail login was s56pj879, it would still let me in with the latter password, even though its completely different to the database.

I am really confused as this should not be happening!

Jeremy
Reply With Quote
  #4  
Old 16th September 2010, 16:38
j.smith1981 j.smith1981 is offline
Member
 
Join Date: Nov 2008
Posts: 63
Thanks: 0
Thanked 3 Times in 3 Posts
Lightbulb

Right I have this.

Its obviously not working for that user, I input a username say myuser@example.com

With password : 45645 (stored in the users password row for that selected user 'myuser@'

But on the database its actually 123456 yea?

But then 45645 is a password for another user, how come its obviously accepting that as a valid password?

Thats what I am essentially getting at.

Its got nothing to do with changing of passwords, doesnt appear to work even that for me, so there's no point in pondering that as I havent changed passwords for any of the email accounts.

Jeremy

Last edited by j.smith1981; 16th September 2010 at 16:43.
Reply With Quote
  #5  
Old 17th September 2010, 13:25
j.smith1981 j.smith1981 is offline
Member
 
Join Date: Nov 2008
Posts: 63
Thanks: 0
Thanked 3 Times in 3 Posts
Question

I have these logs which may have something to do with it:

Its a logcheck script.

Quote:
Sep 17 11:37:39 server1 clamd[3209]: SelfCheck: Database status OK.
Sep 17 11:45:37 server1 postfix/smtpd[6662]: sql_select option missing
Sep 17 11:45:37 server1 postfix/smtpd[6662]: auxpropfunc error no mechanism available
Sep 17 11:45:48 server1 postfix/smtpd[6681]: sql_select option missing
Sep 17 11:45:48 server1 postfix/smtpd[6681]: auxpropfunc error no mechanism available
Sep 17 11:55:39 server1 clamd[3209]: SelfCheck: Database status OK.
Sep 17 12:03:34 server1 postfix/smtpd[7092]: sql_select option missing
Sep 17 12:03:34 server1 postfix/smtpd[7092]: auxpropfunc error no mechanism available
This may shed some light onto this problem perhaps?

Hmm bit annoying though!

Thanks for your help so far though,
Jeremy
Reply With Quote
  #6  
Old 17th September 2010, 15:30
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,701
Thanks: 1,900
Thanked 2,735 Times in 2,571 Posts
Default

Does your /etc/postfix/sasl/smtpd.conf look exactly like in the tutorial?
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
  #7  
Old 17th September 2010, 17:10
j.smith1981 j.smith1981 is offline
Member
 
Join Date: Nov 2008
Posts: 63
Thanks: 0
Thanked 3 Times in 3 Posts
Default

There isnt one, this is for the centos 4.8 tutorial though was that supposed to be in there for this tutorial?
Reply With Quote
  #8  
Old 18th September 2010, 13:09
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,701
Thanks: 1,900
Thanked 2,735 Times in 2,571 Posts
Default

Ok, on CentOS 4.8, the file is /usr/lib/sasl2/smtpd.conf (32bit) or /usr/lib64/sasl2/smtpd.conf (64bit). Does it look like in the tutorial?
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
  #9  
Old 20th September 2010, 10:24
j.smith1981 j.smith1981 is offline
Member
 
Join Date: Nov 2008
Posts: 63
Thanks: 0
Thanked 3 Times in 3 Posts
Question

Thanks falco, I have copied the contents of the file here:

Quote:
pwcheck_method: authdaemond
log_level: 3
mech_list: PLAIN LOGIN
authdaemond_path:/var/spool/authdaemon/socket
Hmm i've emptied the SQL tables to see if that helps with this.

Looking forward to your reply, still think it could be a glitch though myself unless I havent removed or amended something in there (I always copy and paste commands now so it could be my mistake).

Hope this helps with my annoying situation lol.

Thanks again,
Jez.
Reply With Quote
  #10  
Old 21st September 2010, 18:31
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,701
Thanks: 1,900
Thanked 2,735 Times in 2,571 Posts
 
Default

The file looks ok. I'm not sure what is wrong. Are there any other errors in your mail log?
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
dovecot: lda: Fatal: Unknown user dpicella Installation/Configuration 1 22nd August 2010 02:59
ERROR: Connection dropped by IMAP server. [Centos 5.4, courier imap,squirrel, etc] darevil HOWTO-Related Questions 7 9th June 2010 14:49
localhost postfix/master: fatal: bind 127.0.0.1 port 125: Permission denied g18c Installation/Configuration 4 24th March 2009 17:39
Centos 4.4 32bit Hangs, High Server load 3cwired_com Server Operation 11 16th November 2006 15:47
Verify email setup meekish Installation/Configuration 28 27th October 2006 15:36


All times are GMT +2. The time now is 21:03.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.