]> git.ipfire.org Git - thirdparty/dovecot/core.git/commitdiff
auth: Use rip instead of real_rip in policy server attributes
authorAki Tuomi <aki.tuomi@dovecot.fi>
Fri, 1 Dec 2017 11:49:31 +0000 (13:49 +0200)
committerAki Tuomi <aki.tuomi@dovecot.fi>
Thu, 15 Feb 2018 08:08:10 +0000 (10:08 +0200)
real_rip contains proxy IP, not client IP

src/auth/auth-settings.c

index 6a6d8b7dfd7cfeacb4793f824e1ceac7a4898184..d54a1491275d15ebfac455c796c9dbe49b4051d5 100644 (file)
@@ -300,7 +300,7 @@ static const struct auth_settings auth_default_settings = {
        .policy_server_timeout_msecs = 2000,
        .policy_hash_mech = "sha256",
        .policy_hash_nonce = "",
-       .policy_request_attributes = "login=%{orig_username} pwhash=%{hashed_password} remote=%{real_rip} device_id=%{client_id} protocol=%s",
+       .policy_request_attributes = "login=%{orig_username} pwhash=%{hashed_password} remote=%{rip} device_id=%{client_id} protocol=%s",
        .policy_reject_on_fail = FALSE,
        .policy_hash_truncate = 12,