changeset 22832:2bff47454113

auth: Use rip instead of real_rip in policy server attributes real_rip contains proxy IP, not client IP
author Aki Tuomi <aki.tuomi@dovecot.fi>
date Fri, 01 Dec 2017 13:49:31 +0200
parents b68382cc3b25
children 3fa6e10877c7
files src/auth/auth-settings.c
diffstat 1 files changed, 1 insertions(+), 1 deletions(-) [+]
line wrap: on
line diff
--- a/src/auth/auth-settings.c	Tue Feb 06 15:12:26 2018 +0200
+++ b/src/auth/auth-settings.c	Fri Dec 01 13:49:31 2017 +0200
@@ -300,7 +300,7 @@
 	.policy_server_timeout_msecs = 2000,
 	.policy_hash_mech = "sha256",
 	.policy_hash_nonce = "",
-	.policy_request_attributes = "login=%{orig_username} pwhash=%{hashed_password} remote=%{real_rip} device_id=%{client_id} protocol=%s",
+	.policy_request_attributes = "login=%{orig_username} pwhash=%{hashed_password} remote=%{rip} device_id=%{client_id} protocol=%s",
 	.policy_reject_on_fail = FALSE,
 	.policy_hash_truncate = 12,