hi list,
I'm looking for a safe way to add users to a webmail service set up
on qmail + vmailmgr + courier-imap + twig (a php mailclient). The part
missing is, you guessed, adding new users automagically. Now I'm
straining my head to think of the safest solution to give inmmediate
registration to new users.
All of the webmail users are running on the same UID
the best path I could think of is writing a cgi that takes the info,
validates the username and pw to make sure no escaping/shell invocation
gets through and then pass them as parameters to a suid perl script that
changes to the proper user, goes to its ~ and invokes vadduser.
do you see any trouble with this approach, besides the care I must
take to take the results (success/failure) all the way back to the cgi?
or maybe there is a well know and understood sanctioned way to do it?
martin
