I guess you assume then that imapd is setuid, otherwise, how is a user expected to run it and have access to the mail store? that's fine, i just want to know your expectations up front are in line with reality


On Tue, 28 Sep 2004, Ken Murchison wrote:

Christiaan den Besten wrote:
Cyrus doesn't support running imapd from the command line. All process are spawned from the master process.

What type of application requires you to run imapd from the command line? I *might* be able to add a command line switch which allows you to do this if its of general use.


We have aprox 300 users who have shell access on the same machine as where the cyrus process runs. It would be -very- nice if they wouldn't have to enter their username/password whenever they run Pine.

Pine supports pre-start commands: "ssh-command=/usr/sbin/imapd" is what we now use with uw-imapd. They can then access their mail folder without having to authenticate themselves.

Attached is a quick proof-of-concept patch against the current CVS (2.2.x) which allows the services to be run outside of master and implements PREAUTH for imapd and allows EXTERNAL to be used for pop3d and nntpd. In order for the services to be run from the command line, they MUST be setuid 'cyrus'.


If people find this useful (I still think this is questionable), I can clean it up and commit it to CVS. I don't know whether the methods I'm using to detect that the process is running outside of master and that the client is connected on stdio are foolproof, but they were quick to implement without too much thought (and didn't require a new command line option).

--
Kenneth Murchison     Oceana Matrix Ltd.
Software Engineer     21 Princeton Place
716-662-8973 x26      Orchard Park, NY 14127
--PGP Public Key--    http://www.oceana.com/~ken/ksm.pgp

---
Cyrus Home Page: http://asg.web.cmu.edu/cyrus
Cyrus Wiki/FAQ: http://cyruswiki.andrew.cmu.edu
List Archives/Info: http://asg.web.cmu.edu/cyrus/mailing-list.html

Reply via email to