Programming Languages: Perl, PHP
License: GNU General Public License version 2.0 (GPLv2)
browse code,
statistics,
last commit on 2012-05-28
svn co https://postfixadmin.svn.sourceforge.net/svnroot/postfixadmin postfixadmin
Fixed in SVN trunk r1397 + r1398.
2012-05-28 13:27:43 PDT by christian_boltz
christian_boltz committed revision 1398 to the Postfix Admin SVN repository, changing 1 files.
2012-05-28 13:26:43 PDT by christian_boltz
christian_boltz committed revision 1397 to the Postfix Admin SVN repository, changing 4 files.
2012-05-28 13:05:48 PDT by christian_boltz
Known bug, see https://sourceforge.net/tracker/?func=detail&aid=3094804&group_id=191583&atid=937964.
2012-05-28 12:19:02 PDT by christian_boltz
The escaping also breaks the resulting password hash, see https://sourceforge.net/tracker/?func=detail&aid=3301752&group_id=191583&atid=937964.
2012-05-28 12:18:29 PDT by christian_boltz
I'm closing this as "works for me". To summarize the previous comments: If you use dovecot 2.x, you'll have to set $CONF['dovecotpw'] = '/path/to/doveadm pw' doveadm from dovecot 2.0.0 to 2.0.7 will not work because it checks if the input comes from a tty. You have to use at least dovecot 2.0.8. dovecot 1.x is still supported - in this case, just use $CONF['dovecotpw'] =...
2012-05-28 12:14:41 PDT by christian_boltz
Thinking about this again, I'm finally closing this request as "wontfix". Reasons are: - the password would be available in the browser cache - if someone can read your cache, then he'll be able to steal the password. - it would only work with cleartext passwords - the idea of an additional clear_password column makes things even worse - if the config says to encrypt the password,
2012-05-28 12:10:10 PDT by christian_boltz
IMHO the implementation is (mostly) done and will progress while moving everything to the *Handler classes. If I'm really bored one day ;-) I'll also check functions.inc.php and change everything to use the Config and Lang classes there. However, I don't see the need to keep this request open. If you disagree, please speak up - otherwise this request will be auto-closed in 4 weeks.
2012-05-28 11:51:52 PDT by christian_boltz
This is not what $CONF[show_password] was made for ;-) From config.inc.php: // Show Password // Always show password after adding a mailbox or admin. // If you want to always see what password was set set this to 'YES'. $CONF['show_password'] = 'NO'; Your patch would include the password in the edit-admin form, visually obscured as '*******' - but it would be available in clear text if...
2012-05-28 11:24:28 PDT by christian_boltz
This was accidently ;-) fixed in SVN trunk by using DomainHandler instead of the old create-domain.php/edit-domain.php scripts some months ago.
2012-05-28 11:14:35 PDT by christian_boltz