The 5.11.1 introduce a new parameter SOGoForbidUnknownDomainsAuth, by
default set at NO.

 

DO NOT SET THIS PARAMETER TO YES as it introduces a critical security error
allowing your user to authenticate to the webmail with any password. The
mail with not works as the imap is not the correct one. But calendars and
contacts will work.

 

Letting this parameter unset or set at NO is OK.

 

Alinto's working on a fix and new release as soon as possible.

Quentin

Reply via email to