"Active Clients" Screen not listing active IMAP client.

Redfield shared this problem ago

Published

I'm logged in on Thunderbird, but the Active Clients Screen (Settings > Security > Active Clients) does not list Thunderbird as an active client, even when Thunderbird is active and open. I've tried sending and receiving an email via Thunderbird, and that also works - it's just the listing on Active clients screen that's broken.

This seems like a somewhat critical security issue, because if mailbox does not recognize the Thunderbird session, I'm not certain that "Sign out from all Clients" is going to actually sign out of the Thunderbird session either, which is necessary since I usually use the button when I sell or get robbed or otherwise lose access to my computer.

Anyone else having a similar issue, or is this just me?

The same problem 0

Replies (3)

TeCer ●

https://documentation.open-xchange.com/7.10.6/middleware/command_line_tools/logging_and_monitoring/logincounter.html

it seems that on open-xchange thunderbird or other imap/pop clients are not supported in the list of active clients.
I can see my browser, oxdrive, davx but no thunderbird or fairemail (android client).

Reply URL

Redfield ●

https://documentation.open-xchange.com/8/middleware/command_line_tools/logging_and_monitoring/logincounter.html

Sadly, seems like the newer version 8 of the open-xchange middleware also doesn't support any more clients than the last one.

https://documentation.open-xchange.com/components/middleware/http/8/index.html#!sessionmanagement/all

There are these /sessionmanagement endpoint on the http API though - It's pretty much exactly what I need, but it also doesn't really mention anything about supported clients. Also I don't know what I'd actually do with just this, considering it is literally a route path without a domain/place to plug it into. Hopefully the team gets around to building a robust session/client management interface.

URL

SiggiB ●

Same here. Web Sessions are logged but e-mail clients (apps) not. In my case I use only on mobile apps and I tried try of them. Non has been logged.

I agree to Redfield. That is a critical security issue.

Reply URL

Eric Test ●

I was trying to find an alternative to gmail and found this issue. Apparently such an important issue has not been solved after a year. I guess I will keep looking.

Reply URL