Hello!

First of all, THANKS to everybody that have answered my previous posts!!!! ;)

Ok, the question: I noticed that dbmail logs to the maillog. When a
user logs in, this is what I get:
Apr  6 12:10:33 localhost dbmail/imap4d[3075]: COMMAND: [A001 LOGIN
"user" "pass"]

where "pass" is the plain text password of the user! So I tought, "if
I use SSL (specifically stunnel 4) for imap, the password is not going
to show in the logs". But stunnel for imap is working and the password
still shows!

Maybe I've been barking at the wrong tree, meaning that I tought
stunnel will fix this and it doesn't. Does anybody knows the solution
for this?

Thanks a LOT!

Cheers!

Lorna.

Reply via email to