global admin without defaultdomain?

[Christian Schulte]

Kendrick Vargas schrieb:

> As for only being able to log in via localhost to your global admin account, 
> it's a bug whether you like it or not :-) Relying on a bug to maintain 
> your security is really bad security. The only time I feel secure in my 
> setups is when I know everything is working as it should, otherwise theres 
> always that bit of doubt about things always working right.

I would say I rely on a well-known "mis-configuration" of my system
rather than a bug. When I noticed it I liked its influence on cyrus and
did not change it. Everything is working as it should when everything
else is setup correctly. Nothing wrong with cyrus. Just use
fully-qualified _hostnames_ where they have to be fully-qualified ;-)

--
Christian