[tpop3d-discuss] Auth-Ldap BUG

Simon Loader simon at surf.org.uk
Fri, 06 Sep 2002 13:08:41 +0100


>
> >
> > Yes that is the problem ldap is accepting no password and
> > binding as anonymous.
> >
> > Well the The whole of tpop3d.c code is fine, I will muck around with the
> > ldap
> > system ... I thought I switched that off.
>
>Ah, splendid.
>
>Hmm. I guess tpop3d should have a `permit empty password'
>setting, default `no'.

Possibly yes as there is a reason I allow anonymous auth to read some users
data, but I would have thought ldap bind would produce and error I will
read my manpages and see what I can find.

-- 
Simon Loader