qmail-cyrus-authentification

2000-03-28 Thread Markus Behr

Hi,
 
we are going to start a web mail project with more then 
300.000 users.
As imap server we use cyrus, modified to do authentification
via an oracle account_db.
We decided using qmail instead of sendmail as SMTP server.
My question is how to setup qmail working with cyrus,
especially doing the same authentification mechanism.
Is there a way to configure qmail asking cyrus for user
authentification or do we also have to change qmail doing
the pwcheck with an oracle db?
Are there already any qmail-oracle authentification modules
available? And can we use the same account_db as for cyrus
or does qmail need any other authentification values?

Thanks,

   Markus



RE: qmail-cyrus-authentification

2000-03-28 Thread Greg Owen


 As imap server we use cyrus, modified to do authentification
 via an oracle account_db.
...
 My question is how to setup qmail working with cyrus,
 especially doing the same authentification mechanism.

It isn't clear to me what you want to do.  

In short: qmail shouldn't need to know anything about the Cyrus
users, it should just hand off mail to the cyrus "deliver" program which
does know, unless you're trying to do selective relaying.

In detail:

1) If you're asking how to make qmail's delivery process correctly
deliver to users defined in cyrus via Oracle, the answer is: configure qmail
to use cyrus' "deliver" program, which presumably already knows about all
the users defined in Oracle.  No changes to qmail are needed except the
default delivery method.

For example, I've got a qmail box that delivers to Cyrus users, and
my /var/qmail/rc file has the following lines:

exec env - PATH="/var/qmail/bin:$PATH" \
 qmail-start '|preline -f /usr/cyrus/bin/deliver -e -a $USER -- $USER' \
 splogger qmail   

Note that for this to work, you either have to loosen the execution
permissions on deliver (which compromises Cyrus quotas, but I didn't care on
the server above) or wrap deliver with a setuid wrapper (presumably the
"setuidgid" program in DJB's daemontools would work).

2) If you're asking how to make qmail relay for users defined in the
Oracle database, I don't know a good answer.  Presumably you'd want to grab
the SMTP-AUTH patch and fix that up to check with Oracle, but you'll
probably still have problems with that.

3) If you're asking how to make checkpassword work with the Oracle
database, then either you or I are confused: checkpassword is used by
qmail's POP3 server, but if you're running Cyrus, you can only use Cyrus'
POP3 server anyway.

-- 
gowen -- Greg Owen -- [EMAIL PROTECTED]