Discussion:
[SM-USERS] Squirrelmail mixing up user profiles
Andrea
2016-12-17 10:15:16 UTC
Permalink
Hi all.

I have a SquirrelMail version 1.4.23 [SVN] running on Debian 7.11 with PHP
5.4.45-0+deb7u6 / Apache 2.2.22 .
This is the relevant section of config.php
$data_dir = '/var/lib/squirrelmail/data/';
$attachment_dir = '/var/spool/squirrelmail/attach/';
$dir_hash_level = 0;
$default_left_size = '150';
$force_username_lowercase = false;
$default_use_priority = true;
$hide_sm_attributions = false;
$default_use_mdn = true;
$edit_identity = false;
$edit_name = true;
$hide_auth_header = false;
$allow_thread_sort = false;
$allow_server_sort = false;
$allow_charset_search = true;
$uid_support = true;
$plugins[0] = 'translate';
$plugins[1] = 'squirrelspell';
$plugins[2] = 'spamcop';
$plugins[3] = 'filters';
$plugins[4] = 'calendar';
$plugins[5] = 'abook_take';
$plugins[6] = 'administrator';
$plugins[7] = 'newmail';
$plugins[8] = 'bug_report';
$plugins[9] = 'sent_subfolders';
$plugins[10] = 'mail_fetch';
$plugins[11] = 'listcommands';
$plugins[12] = 'message_details';
$plugins[13] = 'delete_move_next';
$plugins[14] = 'attachment_tnef';
$plugins[15] = 'empty_folders';
$plugins[16] = 'html_mail';
$plugins[17] = 'view_as_html';
$plugins[18] = 'info';
$plugins[19] = 'change_sqlpass';
$plugins[20] = 'quicksave';
$plugins[21] = 'squirrel_logger';
About a few moths ago I was notified that one user was having an issue where
his outgoing emails displayed another user¹s details (From:, Reply-To:). The
two users log in from the same computer with the same OS account but their
mailboxes belong to different domains.
The same behaviour also happens on another computer.
Received: from XXX ([XXX])
by webmail.domain.con with HTTP;
Mon, 15 Aug 2016 23:11:50 +0200
Date: Mon, 15 Aug 2016 23:11:50 +0200
Subject: Re: Ris: Invio documenti come da accordi
Cc: YYY
User-Agent: SquirrelMail/1.4.23 [SVN]
MIME-Version: 1.0
Content-Type: multipart/mixed;boundary="----=_20160815231150_40101"
X-Priority: 3 (Normal)
Importance: Normal
The authentication string is indeed correct but all the details belong to
USER_2.
There is no SMTP authentication from the webmail but I do check the MAIL
FROM: on a list of addresses that the user is permitted to send mail as.
Both USER_1 and USER_2 only have their respective accounts so if
SquirrelMail had used USER_2 during the SMTP transaction, it would have been
refused.

Has anyone experienced this issue before? How can I fix it without having to
delete and recreate the profiles?

Thank you.




------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot
-----
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-***@lists.sourceforge.net
List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users
Alan in Toronto
2016-12-18 13:31:29 UTC
Permalink
Post by Andrea
Hi all.
I have a SquirrelMail version 1.4.23 [SVN] running on Debian 7.11 with PHP
5.4.45-0+deb7u6 / Apache 2.2.22 .
This is the relevant section of config.php
About a few moths ago I was notified that one user was having an issue where
his outgoing emails displayed another user¹s details (From:, Reply-To:). The
two users log in from the same computer with the same OS account but their
mailboxes belong to different domains.
The same behaviour also happens on another computer.
Has anyone experienced this issue before? How can I fix it without having to
delete and recreate the profiles?
IIRC, user accounts can get mixed up if user1 neglects to logout before user2 logs
in on the same computer in the same browser. If they used different browsers then it
wouldn't be a problem, and if user1 logged out it wouldn't happen.




------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot
-----
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-***@lists.sourceforge.net
List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users
Loading...