disable root account at Squirrelmail

cccc · 11-14-2006, 07:12 PM

hi

I've installed virtual users and domains with Postfix, Courier and MySQL according to:

http://www.howtoforge.com/virtual_po..._quota_courier

on debian sarge stable.

I'm using Squirrelmail 1.5.1 to access to the mail accounts.

Howto disable root account at Squirrelmail ?
I mean, root shouldn't be able to login into Squirrelmail.

greetings
cccc

Dutch Master · 11-15-2006, 08:47 PM

Why not? It's your backdoor if everything else fails!

cccc · 11-16-2006, 02:50 PM

Quote:

Originally Posted by Dutch Master

Why not? It's your backdoor if everything else fails!

I would like to disable root on squirrelmail and not as a system account.

Berhanie · 11-16-2006, 10:27 PM

Squirrelmail is just a front-end to imap, so I think you need to disable imap access to root. What does your authmodulelist look like? If it's

Code:

authmodulelist="authmysql"

what's wrong with deleting root's record from the mysql table? If you need a record for root for some reason, you could disable imap for root with something like "disableimap=1" in its "options" field (you'll have to look up the exact syntax), or by giving root an impossible "crypt" field (like the empty string).