[imp] error in logon

[Eric Rostetter]

Quoting Chris Swenson <cswenson at students.curry.edu>:

> Cathy says she sent an email to Anne but then realized she sent it as Jim. (
> don't know how she realized this, kids)

Possible...

> Researching the horde.log, and the web server logs and e-mail logs confirm
> that an email was sent from Cathy's IP address to Anne but that the "sent
> from" reflects Jim's email address.

The question is "why"?

> There is an email in Jim's out box to Anne, There is an email in Anne's inbox
> from Jim, but Cathys IP address is at the header.

Sounds like it really happened then, no?

> Could imp have passed the wrong cookie with the id to a user?

Not given your facts, *unless* the browser is buggy.  Most likely, it didn't
use cookies at all, and instead used url sessions.  In this case, the above
is very much possible.

I'd check your server setup to make sure it uses cookies, and the client machine
in question to make sure it uses cookies.  If there are history entries or
bookmarks with sessions in the urls, then there is the smoking gun.

--
Eric Rostetter
The Department of Physics
The University of Texas at Austin

Why get even? Get odd!