Re: New release is HERE! Vexim 2.2.2 RC1, Google code, and more!

On Thu, May 13, 2010 at 1:24 PM, Avleen Vig <[email protected]>wrote:

> With a *HUGE* thank you to Mike Garrett and Gordon Dickens who did all
> of the work for this release.
>
>
> This is an RC release, hopefully the only one. If people could test it
> and let me know if it works, that would be great :-)
> I hope to have the stable release tomorrow or the day after.
>

One thing I've noticed (and actually, this exists in the previous version as
well):
You can't have [email protected].  The login page seems to assume that if
the localpart is siteadmin, then it must be the actual built-in user
"siteadmin", as if I use the password for the "super" siteadmin, even when
specifying a domain, it will login as the "super" site admin.

If you have your "siteadmin" password as "supersecret"  and then you create
"[email protected]" with the password of "password" you have the
following problems when logging in:
username: "siteadmin", domain name: "domain.com", password: "password" -
error "login failed"
username: "siteadmin", domain name: "domain.com", password: "supersecret" -
login success but as the "super" siteadmin.

Not a huge deal, and I don't think it should postpone the release of this
security update, but something to think about.

_______________________________________________
Vexim mailing list
[email protected]
http://silverwraith.com/mailman/listinfo/vexim