Authenticating against an IMAP server as local User

[Valerio W.]

Hello Janos,

When I use the "Authenticate against an IMAP server" option, Piler 1.3.4 also forwards authentication requests to local users. I have fail2ban installed on the IMAP server and it blocks requests for multiple failed attempts. If the IP address of Piler is temporarily blocked, Piler will no longer work. I am unable to login (even with the local users).

A simple fix is, of course, to whitlist the Piler IP. But I think the better solution would be to look up for the users locally, before asking the IMAP server for authentification ?

Best regards, Valerio

[Janos SUTO]

You are right, I'll fix the order of the authentication methods soon.

[Janos SUTO]

Please overwrite model/user/auth.php with this file, and you'll be fine: https://bitbucket.org/jsuto/piler/src/41777063f0b706cc4db63e90a028ecdf3b6fc84d/webui/model/user/auth.php?at=master&fileviewer=file-view-default

[Valerio W.]

It looks good. Thank you very much!