Bug#341205: README's highly confused and wrong configurations

2021-01-02 Thread Markus Wanner

Control: tags -1 +pending

Hi,

On 12/30/20 7:24 PM, PICCORO McKAY Lenz wrote:
bug report #126735 and #341205 : in same topic: default installation is 
not explained (respect the courier documented) and there's no Debian 
document that points the difference.. neither a document of debian way 
and the differences..


..I'd argue that the error message provided is sub-optimal.  First of 
all, it should arguably be a 403 Forbidden HTTP response code and not 
assume it's the admin actually reading this.


Second, pointing to INSTALL is a bit blunt, given it's a whopping 4k 
lines to read.  (Some of) your additions to README.Debian are good. 
I'll adjust the error message to point to that file as well.  And given 
it's the www, actually **link** the appropriate section in the 
installation documentation online.


Regards

Markus



Bug#341205: README's highly confused and wrong configurations

2020-12-30 Thread PICCORO McKAY Lenz
Mark I have decided to send this email to all 5 bug reports at the same
time because they deal with the same topic: a rather confusing reading file
and a configuration out of all logic in the courier-webadmin and sqwebmail
packages, i just try to make the pull request for the changes required..
PLEASE read here:

first of all the new apache2 config file for sqwebmail causes problems with
path for static files, sqwebmail expected to find css file in
/sqwebmail/sqwebmail.css but i got a http 500 error cos xtrange cgi
configurations automatically made by package.. those must be erased and
admins must fine tune by is own hand in each case if want hide path in
urls, that's could be the reason of the question in debconf about copy or
symlink, although the apache script limits access the cgi can still be
accessed and there is no real security here

bug report #190725 : config web for courier-webadmin and sqwebmail are all
wrong, packages assumes apache2 (most inefficient web server), a bad taste,
bug that's not the problem: the sqwebmail case config file said "allow only
local" but is nonsense because the security is configured by a build time
configuration: https://redmine.lighttpd.net/issues/304 3 times bad made the
package make this unusable by confusion

bug report #190725 : in same topic: the localhost build in restriction of
the courier-webadmin is another very confused setting for the admin! so we
should leave this alone and provide example files as it has always been in
Debian

bug report #126735 and #341205 : in same topic: default installation is not
explained (respect the courier documented) and there's no Debian document
that points the difference.. neither a document of debian way and the
differences.. same case of the #190725

about #341205 i will send that patch to upstream but a README file must
sove the situation for now..  this patch is trivial and must be revised cos
is old

about #910527 #910529 : was merged but not property explained in NEWs or
README. the current courier-base pointing about the new permissions but
does not said nothing about the upgrade problem that still persist and
inclusively seems is also cited in the postinst script


https://salsa.debian.org/debian/courier/-/merge_requests/9

https://salsa.debian.org/debian/courier/-/merge_requests/10


Lenz McKAY Gerardo (PICCORO)
http://qgqlochekone.blogspot.com