Displaying 3 results from an estimated 3 matches for "saml2".
Did you mean:
saml
2018 Mar 22
2
why is dovecot "Allowing any password"
...o connect to it like it would to an exchange server.
(so: not in imap mode, and not using regular username/password
authentication)
Normally, SOGo simply reuses the provided username/password to connect
to the imap server, but in the above scenario, these are not available.
The same goes for a SAML2 authenticated SOGo webmail logon.
In these scenarios, SOGo uses the 127.0.0.1 connection, to logon to
imap. Since it does know the username.
I guess a better solution would be for SOGo to be able to do
'transformations' to the username/password, to change the regular
username/unknownpa...
2018 Mar 22
0
why is dovecot "Allowing any password"
...to an exchange server.
> (so: not in imap mode, and not using regular username/password
> authentication)
>
> Normally, SOGo simply reuses the provided username/password to connect
> to the imap server, but in the above scenario, these are not available.
>
> The same goes for a SAML2 authenticated SOGo webmail logon.
>
> In these scenarios, SOGo uses the 127.0.0.1 connection, to logon to
> imap. Since it does know the username.
>
> I guess a better solution would be for SOGo to be able to do
> 'transformations' to the username/password, to change the r...
2018 Mar 22
5
why is dovecot "Allowing any password"
On 03/21/2018 10:34 PM, @lbutlr wrote:
> The question is does it allow remote users to login with no password?
Yes, and the answer is: no.
> If not, then the message ie nearly notification that login without a password is potentially possible.
Yes, but a worrying one. That's why i decided to post here.
> I have no idea why you would have nopassword=y set in the first place, so it