Menu

#3 [SECURITY] Clear-text passwords world-readable??

open
nobody
9
2004-04-26
2004-04-26
Robin Green
No

In jamm.schema there is an entry as follows:

attributetype ( 1.3.6.1.4.1.12461.1.1.7 NAME
'clearPassword'
DESC 'A separate text that stores the mail
account password in clear text'
EQUALITY octetStringMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.40{128})

But there is no access control for this attribute in
the HOWTO!!

Three questions:

1. Is this attribute actually used?

2. If so, why does it exist?

3. If there is a good reason, what should I put in
slapd.conf to control access appropriately?

Discussion

  • Robin Green

    Robin Green - 2004-04-26

    Logged In: YES
    user_id=2202

    By the way, please note I am (trying to) use Dovecot, so I
    don't need it if it's only used for Courier.

     
  • Robin Green

    Robin Green - 2004-04-26
    • priority: 5 --> 9
     

Log in to post a comment.

MongoDB Logo MongoDB