ouch.. big problem.

Tom Ryan tomryan@camlaw.rutgers.edu
Mon, 30 Apr 2001 22:34:12 -0400 (EDT)


Tonight I had a user write me that he was using imp, logged out, logged
back in again a couple of minutes later and saw someone elses account.

I looked at the logs and indeed there seemed to be simul logins. here's
some info for the imap logs

imapd[18576]: [ID 806292 mail.debug] imap service init from 128.6.180.11
imapd[18577]: [ID 806292 mail.debug] imap service init from 128.6.180.11
imapd[18577]: [ID 666661 mail.info] Authenticated user=user1
imapd[18576]: [ID 666661 mail.info] Authenticated user=user2

any ideas?

we're using 2.2.4, phplib, msql for the phplib and mysql for the prefsdb,
etc.

Tom

-- 
_______________________________________________________________________
Tom Ryan                                            Voice: 856-225-6361
Consulting System Administrator                       Fax: 856-969-7900
Rutgers School of Law - Camden