And I'll add that at the end, with pw_clear_passwd set to null, login succeeds via IMAP but fails via Squirrelmail.
-Andy -------- Forwarded Message -------- Subject: Re: [qmailtoaster] dovecot Date: Wed, 3 Oct 2018 19:12:11 -0800 From: Andrew Swartz <[email protected]> To: [email protected] Eric, With pw_clear_passwd set to '0123456789' I successfully logged in via this technique using password '0123456789'. I used SQL to reset pw_clear_passwd to null. Again I successfully logged in via this technique using password '0123456789'. -Andy On 10/3/2018 6:02 PM, Eric Broch wrote: > Try the CLI commands I sent. There can be issues with the configuration > of squirrelmail and roundcube. > > IMAP: > > # openssl s_client -crlf -connect localhost:993 > > imap> tag login [email protected] $userpassword > > > Submission: > > # cd /usr/local/bin > # wget http://www.jetmore.org/john/code/swaks/latest/swaks > # chown root.root swaks > # chmod +x swaks > > # swaks --to [email protected] --from [email protected] --server > $yourqmthost --port 587 --ehlo test -tls --auth login --auth-user > [email protected] --auth-password $userpassword > > > On 10/3/2018 7:45 PM, Andrew Swartz wrote: >> Eric, >> >> On Centos7 QMT: >> >> I just created a new user account and set the password to '0123456789'. >> Then I used your SQL command to set pw_clear_passwd to null. >> Then I viewed the table to confirm it was empty (it was). >> Then I tried to log in to Squirrelmail using password '0123456789': >> Login failed. >> Then I used your SQL command to reset pw_clear_passwd back to '0123456789'. >> Then I tried to log in to Squirrelmail using password '0123456789': >> success. >> >> This seems different from your experience. >> >> This sucks because it seems to mean no easy fix for this problem. >> >> >> -Andy >> >> >> >> >> On 10/3/2018 4:24 PM, Eric Broch wrote: >>> I've been contacted by someone who removed the clear text password from >>> an account and had issued logging into Dovecot even after a restart. The >>> fix of course is to reset the password with /home/vpopmail/bin/vpasswd. >>> Does anyone else want to confirm/refute my findings that w/o the clear >>> text password Dovecot will work? >>> > > -- > Eric Broch > White Horse Technical Consulting (WHTC) >
smime.p7s
Description: S/MIME Cryptographic Signature
