Postfix courier, IMAP squirrelmail accepting any passwords for users accounts ERROR**

Discussion in 'HOWTO-Related Questions' started by j.smith1981, Sep 15, 2010.

  1. j.smith1981

    j.smith1981 New Member

    Hi all,

    Having a bit of a worry here!

    I am able to login to Squirrelmail after falco's tutorial with any password given.

    ie if I type [email protected] then say 123456 as my password, i get to login.

    but if I was to say change my password 654321 it still accepts that, why on earth is this?

    Does anyone know of anyway of stopping this? Just shouldnt be happening, wasnt happening yesturday thats for sure.

    Be interesting to see anyones reply.

    Kind regards and I look forward to a response in advance,
  2. falko

    falko Super Moderator ISPConfig Developer

    How exactly did you change the password?
  3. j.smith1981

    j.smith1981 New Member

    I didnt change the password at all.

    Its just started accepting any passwords I input, its got nothing to do with changing passwords at all.

    The example I gave was what I have found wrong.

    Not even that above I mean say I typed invents into the password field, it would still let me in without it being what its supposed to be as such

    Say my real password was 'welcome1'

    The password I input into squirrelmail login was s56pj879, it would still let me in with the latter password, even though its completely different to the database.

    I am really confused as this should not be happening!

  4. j.smith1981

    j.smith1981 New Member

    Right I have this.

    Its obviously not working for that user, I input a username say [email protected]

    With password : 45645 (stored in the users password row for that selected user '[email protected]'

    But on the database its actually 123456 yea?

    But then 45645 is a password for another user, how come its obviously accepting that as a valid password?

    Thats what I am essentially getting at.

    Its got nothing to do with changing of passwords, doesnt appear to work even that for me, so there's no point in pondering that as I havent changed passwords for any of the email accounts.

    Last edited: Sep 16, 2010
  5. j.smith1981

    j.smith1981 New Member

    I have these logs which may have something to do with it:

    Its a logcheck script.

    This may shed some light onto this problem perhaps?

    Hmm bit annoying though!

    Thanks for your help so far though,
  6. falko

    falko Super Moderator ISPConfig Developer

    Does your /etc/postfix/sasl/smtpd.conf look exactly like in the tutorial?
  7. j.smith1981

    j.smith1981 New Member

    There isnt one, this is for the centos 4.8 tutorial though was that supposed to be in there for this tutorial?
  8. falko

    falko Super Moderator ISPConfig Developer

    Ok, on CentOS 4.8, the file is /usr/lib/sasl2/smtpd.conf (32bit) or /usr/lib64/sasl2/smtpd.conf (64bit). Does it look like in the tutorial?
  9. j.smith1981

    j.smith1981 New Member

    Thanks falco, I have copied the contents of the file here:

    Hmm i've emptied the SQL tables to see if that helps with this.

    Looking forward to your reply, still think it could be a glitch though myself unless I havent removed or amended something in there (I always copy and paste commands now so it could be my mistake).

    Hope this helps with my annoying situation lol.

    Thanks again,
  10. falko

    falko Super Moderator ISPConfig Developer

    The file looks ok. I'm not sure what is wrong. Are there any other errors in your mail log?

Share This Page