Re: [SM-USERS] Forcing a logout (invalidating current session)

2009-11-05 Thread Andrew Daviel
On Sat, 31 Oct 2009, Paul Lesniewski wrote: > On Fri, Oct 30, 2009 at 2:07 PM, Andrew Daviel wrote: >> >> We had a user account compromised somehow (bad guys got the password). >> >> The user has changed their password. >> How can I kick off any logged-in sessions and make sure they can't login >

Re: [SM-USERS] Forcing a logout (invalidating current session)

2009-10-30 Thread Paul Lesniewski
On Fri, Oct 30, 2009 at 2:07 PM, Andrew Daviel wrote: > > We had a user account compromised somehow (bad guys got the password). > > The user has changed their password. > How can I kick off any logged-in sessions and make sure they can't login > without knowing the new password ? As others have

Re: [SM-USERS] Forcing a logout (invalidating current session)

2009-10-30 Thread Res
On Fri, 30 Oct 2009, Tomas Kuliavas wrote: > Spammer will be kicked out, if he or she tries to open any page with imap > authentication. Left folder listing, mailbox listing, message display or > sending message and saving it in Sent folder will destroy session. unless they use imapproxy, which a

Re: [SM-USERS] Forcing a logout (invalidating current session)

2009-10-30 Thread Tomas Kuliavas
Andrew Daviel-3 wrote: > > > We had a user account compromised somehow (bad guys got the password). > > The user has changed their password. > How can I kick off any logged-in sessions and make sure they can't login > without knowing the new password ? > Spammer will be kicked out, if he or

[SM-USERS] Forcing a logout (invalidating current session)

2009-10-30 Thread Andrew Daviel
We had a user account compromised somehow (bad guys got the password). The user has changed their password. How can I kick off any logged-in sessions and make sure they can't login without knowing the new password ? I zapped the security tokes in user prefs (seemed like a good idea) BTW, inter