[horde] Everybody can log in as administrator without password

[Kevin M. Myer]

Quoting horde at a1v.de:

> Hi,
>
> I changed from "SQL authentication" to "Let Horde app....." with IMP,
> but nothing changed.
>
> "Should we always store and validate the IP address..." is marked.

Is your config file actually getting saved?  It sounds like
$conf['auth']['driver'] is always set to auto.  Can the user you run your
webserver under write to horde/config/conf.php and horde/config/conf.php.bak?

Kevin

-- 
Kevin M. Myer
Senior Systems Administrator
Lancaster-Lebanon Intermediate Unit 13  http://www.iu13.org