Squirrelmail mixing up user profiles

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi all.

I have a SquirrelMail version 1.4.23 [SVN] running on Debian 7.11 with PHP
5.4.45-0+deb7u6 / Apache 2.2.22 .
This is the relevant section of config.php

> $data_dir                 = '/var/lib/squirrelmail/data/';
> $attachment_dir           = '/var/spool/squirrelmail/attach/';
> $dir_hash_level           = 0;
> $default_left_size        = '150';
> $force_username_lowercase = false;
> $default_use_priority     = true;
> $hide_sm_attributions     = false;
> $default_use_mdn          = true;
> $edit_identity            = false;
> $edit_name                = true;
> $hide_auth_header         = false;
> $allow_thread_sort        = false;
> $allow_server_sort        = false;
> $allow_charset_search     = true;
> $uid_support              = true;
> 
> $plugins[0] = 'translate';
> $plugins[1] = 'squirrelspell';
> $plugins[2] = 'spamcop';
> $plugins[3] = 'filters';
> $plugins[4] = 'calendar';
> $plugins[5] = 'abook_take';
> $plugins[6] = 'administrator';
> $plugins[7] = 'newmail';
> $plugins[8] = 'bug_report';
> $plugins[9] = 'sent_subfolders';
> $plugins[10] = 'mail_fetch';
> $plugins[11] = 'listcommands';
> $plugins[12] = 'message_details';
> $plugins[13] = 'delete_move_next';
> $plugins[14] = 'attachment_tnef';
> $plugins[15] = 'empty_folders';
> $plugins[16] = 'html_mail';
> $plugins[17] = 'view_as_html';
> $plugins[18] = 'info';
> $plugins[19] = 'change_sqlpass';
> $plugins[20] = 'quicksave';
> $plugins[21] = 'squirrel_logger';

About a few moths ago I was notified that one user was having an issue where
his outgoing emails displayed another user¹s details (From:, Reply-To:). The
two users log in from the same computer with the same OS account but their
mailboxes belong to different domains.
The same behaviour also happens on another computer.

These are the headers of the outgoing message:

> Received: from XXX ([XXX])
>         (SquirrelMail authenticated user USER_1@xxxxxxxxxxx)
>         by webmail.domain.con with HTTP;
>         Mon, 15 Aug 2016 23:11:50 +0200
> Message-ID: <cb522d262e5186f43805ea5abaa8fc66.squirrel@xxxxxxxxxxxxxxxxxx>
> Date: Mon, 15 Aug 2016 23:11:50 +0200
> Subject: Re: Ris: Invio documenti come da accordi
> From: ³USER_2² <USER_2@xxxxxxxxxxx>
> To: ³XXX² <user@xxxxxxx>
> Cc: YYY
> Reply-To: USER_2@xxxxxxxxxxx
> User-Agent: SquirrelMail/1.4.23 [SVN]
> MIME-Version: 1.0
> Content-Type: multipart/mixed;boundary="----=_20160815231150_40101"
> X-Priority: 3 (Normal)
> Importance: Normal
> 

The authentication string is indeed correct but all the details belong to
USER_2.
There is no SMTP authentication from the webmail but I do check the MAIL
FROM: on a list of addresses that the user is permitted to send mail as.
Both USER_1 and USER_2 only have their respective accounts so if
SquirrelMail had used USER_2 during the SMTP transaction, it would have been
refused.

Has anyone experienced this issue before? How can I fix it without having to
delete and recreate the profiles?

Thank you.




------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most 
engaging tech sites, SlashDot.org! http://sdm.link/slashdot
-----
squirrelmail-users mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: squirrelmail-users@xxxxxxxxxxxxxxxxxxxxx
List archives: http://news.gmane.org/gmane.mail.squirrelmail.user
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-users




[Index of Archives]     [Video For Linux]     [Yosemite News]     [Yosemite Photos]     [gtk]     [KDE]     [Cyrus SASL]     [Gimp on Windows]     [Steve's Art]     [Webcams]

  Powered by Linux