Displaying 6 results from an estimated 6 matches for "znjaau5ceg".
2018 Mar 21
2
why is dovecot "Allowing any password"
Hi,
I noticed the following in the logs of our debian wheezy server:
> Mar 21 07:13:47 mail dovecot: auth: Debug: ldap(username,1.2.3.4,<g2/rF+ZnjAAu5ceg>): bind search: base=CN=Users, DC=samba, DC=company, DC=com filter=(&(objectclass=person)(sAMA
> ccountName=username)(!(userAccountControl=514)))
> Mar 21 07:13:47 mail dovecot: auth: Debug: ldap(username,1.2.3.4,<g2/rF+ZnjAAu5ceg>): result: uid=username; uid unused
> Mar 21 0...
2018 Mar 21
0
why is dovecot "Allowing any password"
> On 21 March 2018 at 18:12 mj <lists at merit.unu.edu> wrote:
>
>
> Hi,
>
> I noticed the following in the logs of our debian wheezy server:
>
> > Mar 21 07:13:47 mail dovecot: auth: Debug: ldap(username,1.2.3.4,<g2/rF+ZnjAAu5ceg>): bind search: base=CN=Users, DC=samba, DC=company, DC=com filter=(&(objectclass=person)(sAMA
> > ccountName=username)(!(userAccountControl=514)))
> > Mar 21 07:13:47 mail dovecot: auth: Debug: ldap(username,1.2.3.4,<g2/rF+ZnjAAu5ceg>): result: uid=username; uid unused
>...
2018 Mar 21
2
why is dovecot "Allowing any password"
...figuration guide, which can be
seen here:
https://sogo.nu/files/docs/v2/SOGoNativeOutlookConfigurationGuide.html
Yes, but we have args = nopassword=y allow_nets=127.0.0.1/32
so it should only allow passwordless logins from localhost, right..?
And in "Debug: static(username,1.2.3.4,<g2/rF+ZnjAAu5ceg>): Allowing any
password" 1.2.3.4 is NOT localhost...
(obviously 1.2.3.4 is not the *real* ip, bit it's a *real* ip from the
internet, NOT localhost...
MJ
2018 Mar 21
0
why is dovecot "Allowing any password"
...; seen here:
> https://sogo.nu/files/docs/v2/SOGoNativeOutlookConfigurationGuide.html
>
> Yes, but we have args = nopassword=y allow_nets=127.0.0.1/32
> so it should only allow passwordless logins from localhost, right..?
>
> And in "Debug: static(username,1.2.3.4,<g2/rF+ZnjAAu5ceg>): Allowing any
> password" 1.2.3.4 is NOT localhost...
>
> (obviously 1.2.3.4 is not the *real* ip, bit it's a *real* ip from the
> internet, NOT localhost...
>
> MJ
Looking at the code for v2.2.13, it would seem that
a) when using nopassword, it will log the de...
2018 Mar 21
2
why is dovecot "Allowing any password"
Hi Aki,
On 03/21/2018 05:43 PM, Aki Tuomi wrote:
> Mar 21 07:13:48 mail dovecot: auth: static(username,1.2.3.4,<g2/rF+ZnjAAu5ceg>): allow_nets check failed: IP not in allowed networks
>
> this indicates that the request is marked failed.
So, what you are saying is: the logline "Allowing any password" is
'wrong'? Access was actually DENIED, even though it says "Allowing any
password" a...
2018 Mar 21
0
why is dovecot "Allowing any password"
> On 21 March 2018 at 18:58 mj <lists at merit.unu.edu> wrote:
>
>
> Hi Aki,
>
> On 03/21/2018 05:43 PM, Aki Tuomi wrote:
> > Mar 21 07:13:48 mail dovecot: auth: static(username,1.2.3.4,<g2/rF+ZnjAAu5ceg>): allow_nets check failed: IP not in allowed networks
> >
> > this indicates that the request is marked failed.
>
> So, what you are saying is: the logline "Allowing any password" is
> 'wrong'? Access was actually DENIED, even though it says "Allow...