<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
</head>
<body bgcolor="#FFFFFF" text="#000000">
Sounds like one big security risk waiting to happen to me... not
only misconfiguration, but also e.g. intermediate server errors will
leave owncloud wide open for anyone to access?<br>
<div class="gmail_quote"> <br>
Lukas Reschke <a class="moz-txt-link-rfc2396E"
href="mailto:lukas@owncloud.org"><lukas@owncloud.org></a>
schrieb:
<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex;
border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
<div dir="ltr">On Thu, Jun 20, 2013 at 9:32 AM, Ron Trompert <span
dir="ltr"><<a href="mailto:ron.trompert@surfsara.nl"
target="_blank">ron.trompert@surfsara.nl</a>></span>
wrote:<br>
<div class="gmail_extra">
<div class="gmail_quote">
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">
Yesterday I have installed Owncloud 5.0.7. I have
configured the admin user and in addition, I have
allowed for other user to authenticate themselves using
another webdav server. All of this works, but now I am
able to login to the admin account using any password.<br>
</blockquote>
</div>
<br>
You've most likely misconfigured the other WebDAV server,
any statuscode except 401 or 403 will be interpreted as
valid login.
<div><br>
</div>
-- <br>
<div dir="ltr">ownCloud<br>
Your Cloud, Your Data, Your Way!<br>
<div><br>
</div>
<div>
<div>GPG: 0xEB32B77BA406BE99</div>
</div>
</div>
</div>
</div>
<pre style="white-space: pre-wrap; word-wrap:break-word; font-family: sans-serif; margin-top: 0px"><hr>
Owncloud mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Owncloud@kde.org">Owncloud@kde.org</a>
<a href="https://mail.kde.org/mailman/listinfo/owncloud">https://mail.kde.org/mailman/listinfo/owncloud</a>
</pre>
</blockquote>
</div>
</body>
</html>