[tpop3d-discuss] New features ?
chris at ex-parrot.com
Tue, 3 Dec 2002 09:28:59 +0000
On Tue, Dec 03, 2002 at 01:07:52AM +0100, Jakob Hirsch wrote:
> Uh, I feel a little bad right now, because we're doing this since ages.
> And to make it more evil, the passwords are even written in mail-log:
> tpop3d: auth_mysql_new_user_pass: [jakob!revolution.de;
> email@example.com] failed login with wrong password
> tpop3d: auth_perl_new_user_pass: (perl code): jakob!revolution.de
> is not for oldpopuser_auth (wrong pass "test"?)
> It was rather unintentionally, when I migrated from our passwd-style
> authentication system with the obligation to allow the people to use
> their old user/pass, so I write some perl code to handle this. Logging
> wrong passwords was handy for debugging, so I kept it in.
Ah, as in
> I agree with you to let it out of the main distribution. It's simply not
> worth the code. And I see no reason why somebody would want to have them
> in a database.
Exactly. Obviously, anybody is entitled to add this
facility to tpop3d themselves....
``Do you think it's a little dangerous handing out guns in a bank?''
(Michael Moore, to teller in bank which gives out hand-guns to
customers opening new accounts)