Hi AKi,

Thanks for the quick answer!

On 03/21/2018 05:24 PM, Aki Tuomi wrote:
This is what 'nopassword=y' does. I'm guessing this is an attempt to allow 
logging in from localhost without password, but I'd use master password (for 
applications or webmails), or

Yes, the config is taken from the SOGo configuration guide, which can be seen here:
https://sogo.nu/files/docs/v2/SOGoNativeOutlookConfigurationGuide.html

Yes, but we have args = nopassword=y allow_nets=127.0.0.1/32
so it should only allow passwordless logins from localhost, right..?

And in "Debug: static(username,1.2.3.4,<g2/rF+ZnjAAu5ceg>): Allowing any password" 1.2.3.4 is NOT localhost...

(obviously 1.2.3.4 is not the *real* ip, bit it's a *real* ip from the internet, NOT localhost...

MJ

Reply via email to