Re: [sqwebmail] sqwebmail mem hog processes

2003-08-27 Thread Brian Candler
On Tue, Aug 26, 2003 at 03:01:44PM -0400, Jesse Guardiani wrote:
 Is there any way to get the name of the function that called free(), or the
 line number?

'bt' ought to tell you. Maybe bt is limited to a certain stack depth by
default?

Regards,

Brian.



[sqwebmail] Alias questions

2003-08-27 Thread Francisco Morales
Hi, I have a user [EMAIL PROTECTED]  and I want to do a alias 
[EMAIL PROTECTED]

Could the user do log in with [EMAIL PROTECTED] and 
[EMAIL PROTECTED] but access to the same folder?? because in 
reality is the same user.

Thanks and sorry about my english level

_
Charla con tus amigos en línea mediante MSN Messenger:  
http://messenger.microsoft.com/es




[sqwebmail] TIMEZONELIST

2003-08-27 Thread Francisco Morales
Somebody knows how to put   Europe / Spain in the TIMEZONELIST file I 
try with GMT , CET but it does not work.

Thanks

_
Localiza y ponte en contacto con tus antiguos compañeros de clase en MSN 
Compañeros.  http://mipasado.msn.es/




Re: [sqwebmail] TIMEZONELIST

2003-08-27 Thread Brian Candler
On Wed, Aug 27, 2003 at 09:41:49AM +, Francisco Morales wrote:
 Somebody knows how to put   Europe / Spain in the TIMEZONELIST file I 
 try with GMT , CET but it does not work.

$ cat sqwebmail/html/en-us/TIMEZONELIST 
# $Id: TIMEZONELIST,v 1.1 2001/10/28 19:47:11 mrsam Exp $
#
# Copyright 2001 Double Precision, Inc.  See COPYING for
# distribution information.
#
# This file lists the available timezones in the login dropdown list
#
# The first entry, * *, renders as an empty, default choice in the
# dropdown list.  It's impossible to provide a default list of every
# timezone in use, hence the default leaves your TZ setting untouched.
#
# You may wish to remove the default, and move up your local timezone
# up, since the first listed timezone is going to be the dropdown
# default.
#

*   *
WET Western Europe
CET Central Europe
EET Eastern Europe



[sqwebmail] how to debug sqwebmail 3.6.0 premature end of headers message?

2003-08-27 Thread Jesper James Jensen
Hi,

I've been using various versions of sqwebmail+vpopmail for several years 
now(on AIX), but the latest version 3.6.0 is giving me some trouble:

When i login it stops with internal server error, and Premature end of 
headers in the apache error_log, no other clue to whats wrong?

It is set up to authenticate against my vpopmail server, and this works 
ok: 
- enter a wrong password, and you are not authenticated
- enter the correct password, and it stops working

Tracing reveals that several files are read/written during authentication, 
including an ip address file in the users Maildir, so rights and 
privileges seems ok to me... 

Any way to debug whats wrong with the installation?

TIA

best regards,
Jesper James



Re: [sqwebmail] Alias questions

2003-08-27 Thread Brian Candler
On Wed, Aug 27, 2003 at 09:35:44AM +, Francisco Morales wrote:
 Hi, I have a user [EMAIL PROTECTED]  and I want to do a alias 
 [EMAIL PROTECTED]
 
 Could the user do log in with [EMAIL PROTECTED] and 
 [EMAIL PROTECTED] but access to the same folder?? because in 
 reality is the same user.

Yes but it depends on your authentication method.

I use LDAP and it will work out-of-the-box if you just have multiple values
for the same attribute: e.g.

mail: [EMAIL PROTECTED]
mail: [EMAIL PROTECTED]
maildir: /path/to/Maildir

since authldap will do a search for any entry with mail=(login name).

I expect the same is possible with mysql etc. In fact it should work with
any authentication method if you have a duplicate entry with a different
login name but the same for all other parameters (password, home dir,
maildir etc)

Regards,

Brian.



[sqwebmail] Re: TIMEZONELIST

2003-08-27 Thread Paul L. Allen

Francisco Morales writes:

 Somebody knows how to put   Europe / Spain in the TIMEZONELIST file I 
 try with GMT , CET but it does not work.

As you ought to be able to see by looking at the timezone list that comes
with sqwebmail, you specify timezones by using the conventions of the
Olsen tz system (a standard part of many Unix variants these days).  The
reason you cannot use abbreviations like CET is that more than one
country may use the same abbreviation for entirely different timezones
(for example, both the US and Australia have an EST).

For mainland Spain you use Europe/Madrid.  However, if your server is in
Spain and correctly configured to have Europe/Madrid as its timezone then
the default TIMEZONELIST entry will use that anyway.  It goes without
saying that you should be running ntpd to ensure that your server's
clock is accurate.

Do a find for a directory called zoneinfo and in that you will see
a file called zone.tab listing every timezone your server knows about.
Or grab http://www.sktb.net/make_timezonelist.txt which is a perl
script that compiles a TIMEZONELIST containing every timezone your
server knows about which you can then edit to suit your needs.

-- 
Paul Allen
Softflare Support



[sqwebmail] sqwebmail problem

2003-08-27 Thread Catalin Petcu
Hello.
I recently installed sqwebmail on a slackware 8.1
I use sendmail.
Evrithing works just fine.
I can send e-mails but the problem is I can't read them.
The Inbox folder is always empty despide that I just receives lots of 
e-mails.
Can anyone help me with these anoymg problem?
--
Catalin Petcu
Network Administrator
Memorial Data, Caracal, Olt, Romania



Re: [sqwebmail] Re: how to debug sqwebmail 3.6.0 premature end of headersmessage?

2003-08-27 Thread Jesper James Jensen
Hi,

I have been looking through these options:

The sqwebmail cgi is able to execute (show login screen, identify bad 
logins), can write a file in the users maildir structure, and authenticate 
through vpopmail. 

Then there is the problem of unreadable files/dirs, i can't identify what 
it failing trying to read/write without some way to debug it...

I have also compiled the binary with static libraries to avoid linking 
problems...

regards,
Jesper James
 




Paul L. Allen [EMAIL PROTECTED]
27-08-03 12:10

 
To: [EMAIL PROTECTED]
cc: 
Subject:[sqwebmail] Re: how to debug sqwebmail 3.6.0 premature end of 
headers 
message?


Jesper James Jensen writes:

 When i login it stops with internal server error, and Premature end 
of 
 headers in the apache error_log, no other clue to whats wrong?

This is a standard apache problem with any CGI which terminates with
an error message before outputing the vital Content-Type header.  There
are several reasons why it can happen.  One is that the CGI doesn't have
executable permission.  Another is that your apache has suexec and the
executable has the wrong owner, or the directory it is in is world
writeable, or the CGI is setuid or setgid (or any of the other things that 

upset suexec).  Another is that there is some problem with your system
libraries that are causing the CGI to fail prematurely.

-- 
Paul Allen
Softflare Support









Re: [sqwebmail] sqwebmail problem

2003-08-27 Thread Jim Kubicek
Check your directory permissions.  Then if you are still having issues,
please provide the list with more information.

Can you see if there is anything in the Maildir/new directory?

Jim
- Original Message - 
From: Catalin Petcu [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, August 27, 2003 5:48 AM
Subject: [sqwebmail] sqwebmail problem


 Hello.
 I recently installed sqwebmail on a slackware 8.1
 I use sendmail.
 Evrithing works just fine.
 I can send e-mails but the problem is I can't read them.
 The Inbox folder is always empty despide that I just receives lots of
 e-mails.
 Can anyone help me with these anoymg problem?
  --
 Catalin Petcu
 Network Administrator
 Memorial Data, Caracal, Olt, Romania






[sqwebmail] Re: default domain

2003-08-27 Thread Paul L. Allen

Tanmaya Anand writes:

 I want that user should only type his user name,  he should be logged in.
 For example, [EMAIL PROTECTED] , when opens mail.abc.com/cgi-bin/sqwebmail
  or abc.con/cgi-bin/sqwebmail, he should only supply his username user1 
  not complete [EMAIL PROTECTED]

In recent sqwebmails this is accomplished using the logindomainlist
file.  See README.logindomainlist.html.

 Also, i want to make a custom HTML page from which i can ask user's 
 username  password  using POST, i submit it to sqwebmail, which in 
 logs the user into his account.

Why not simply use sqwebmail's login page?  If it's a matter of
keeping the URL simple then you could always use apache's rewrite
facilities or put up a page with a meta refresh tag.

-- 
Paul Allen
Softflare Support




Re: [sqwebmail] Problem with authentication in sqwebmail

2003-08-27 Thread Jim Kubicek
http://faq.mydot.net/cgi-bin/faq?file=5keywords=1
- Original Message - 
From: Carlos Martinez [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, August 27, 2003 10:06 AM
Subject: [sqwebmail] Problem with authentication in sqwebmail


Hello list,

I have a Red Hat 8 mail server with the following:
- qmail (format: Maildir and POP3)
- vpopmail
- sqwebmail
- vchkpasswd

By the way I edited the html and commented the part about the ip address
security in the sqwebmail login form.

All are the latest versions.

The problem is:

Usually users can log to sqwebmail without problems but sometimes it sends
the Invalid or wrong password message even when these are ok.

Any idea about what can be done to fix this?
Thanks


_
Carlos J. Martínez Gárate
Especialista Web
Integra Ingeniería
[EMAIL PROTECTED]





Re: [sqwebmail] Problem with authentication in sqwebmail

2003-08-27 Thread Brian Candler
On Wed, Aug 27, 2003 at 10:06:08AM -0500, Carlos Martinez wrote:
 Hello list,
 
 I have a Red Hat 8 mail server with the following:
 - qmail (format: Maildir and POP3)
 - vpopmail
 - sqwebmail
 - vchkpasswd
 
 By the way I edited the html and commented the part about the ip address security in 
 the sqwebmail login form.
 
 All are the latest versions.
 
 The problem is:
 
 Usually users can log to sqwebmail without problems but sometimes it sends the 
 Invalid or wrong password message even when these are ok.
 
 Any idea about what can be done to fix this?

See http://faq.mydot.net/ and find the 'vpopmail' entry

Regards,

Brian.



Re: [sqwebmail] Problem with authentication in sqwebmail

2003-08-27 Thread leonard
  Usually users can log to sqwebmail without problems but sometimes it sends the 
  Invalid or wrong password message even when these are ok.
  
  Any idea about what can be done to fix this?
 
 See http://faq.mydot.net/ and find the 'vpopmail' entry

http://faq.mydot.net/cgi-bin/faq?file=5keywords=1

Compile --without-authdaemon, I asked the same question myself,
besides authdaemon is running as root which is never a good thing ;)

And don't forget to:

chown -R vpopmail.vchkpw /var/cache/sqwebmail
chown vpopmail.vchkpw authdaemon

chown vpopmail.vchkpw sqwebmail
chmod +s sqwebmail

-- 
Clef 0x6D525996 | www.keyserver.net pgp.mit.edu pki.surfnet.nl
Fingerprint = 3B64 5F7C B27B A047 AF4F E5FD A2A3 B0D3 6D52 5996



Re: [sqwebmail] Problem with authentication in sqwebmail

2003-08-27 Thread Tim
hi all, I have the info here now from my server tech guy,

what happens is when trying to login from the web based part of sqwebmail,
most times it will not work for me and sometimes it will,
most times not.
  I have users emailing me and telling me they cannot get in,
these are ppl that just registered for an email account from surfing my 
website.

My hosting tech man Brian gets in no problem from work and from home.

I saw links from earlier email from this list, but, want to make sure what 
it is i need to have Brian
try to  do.
He has installed and set this all up for me, going well above and beyond 
what he is suposed to do as far as my server tech guy goes, but, i have 
been hosting my site with his company
for over 4 years.
anyway, below is a email from him with the tech stuff, i notice one with a 
question mark beside it.
I am hunting the fix, not really knowing about this deep of technical 
stuff, so i can ask him to read, look, at the links, etc i find and make 
the changes.
ok, done rattling, MANY thanks inadvance for leading me to what needs 
to be altered, and, many thanks to sqwebmail, i think it is great:

= begin letter from host tech Brian 
That's weird.. I tried it again from here and on my home PC (both seperate
operating systems) and I can get in ok.. we use the exact (I copied it
all) same setup and configuration information for ourselves here at the 
office/hosting company
with no problems.

You're using:
VPOPMail 5.2
SQWebMail 3.6.0 (With authdaemon - this is needed for vchkpw right?)
QMailAdmin 1.0.2
QMail 1.03
EZMlm 0.53
Autorespond 2.0.2
VQRegister 2.5
= end letter from   my host tech Brian =
MANY thanks in advance all,

Tim





 below is early mail from this mailing list that i do not know if i 
need to have brian do or not

At 09:11 AM 8/27/2003, you wrote:
  Usually users can log to sqwebmail without problems but sometimes it 
sends the Invalid or wrong password message even when these are ok.
 
  Any idea about what can be done to fix this?

 See http://faq.mydot.net/ and find the 'vpopmail' entry

http://faq.mydot.net/cgi-bin/faq?file=5keywords=1

Compile --without-authdaemon, I asked the same question myself,
besides authdaemon is running as root which is never a good thing ;)
And don't forget to:

chown -R vpopmail.vchkpw /var/cache/sqwebmail
chown vpopmail.vchkpw authdaemon
chown vpopmail.vchkpw sqwebmail
chmod +s sqwebmail





Re: [sqwebmail] default domain

2003-08-27 Thread Trevor Astrope
On Wed, 27 Aug 2003, Tanmaya Anand wrote:

 hi
 
 I want that user should only type his user name,  he should be logged in.
 For example, [EMAIL PROTECTED] , when opens mail.abc.com/cgi-bin/sqwebmail
  or abc.con/cgi-bin/sqwebmail, he should only supply his username user1 
  not complete [EMAIL PROTECTED]

This is how I did it. Using the logindomainlist was not an option for me,
since I have 5000 virtual domains already configured with unique
usernames, so having them all listed in logindomainlist was not practical
and seems like a spammer's honeypot to me. Also, I needed pop to use the
same authentication method, so it wasn't practical to force 5000 users to
change their email configurations to include the domain in their pop
configurations.

What I did was to use an sql database, in my case postgresql, since we already 
use postgresql extensively and have a dedicated postgresql server. In 
order to accomplish this, I had to use a custom query. The id field 
contains the unique username, but the query returns a field I called 
'email' which contains the [EMAIL PROTECTED] form of the email address.

Using unique usernames in the id field should be enough, but the problem
is if the id field only contains a username and no @domain, sqwebmail will
append the server's hostname or the value of
/usr/local/share/sqwebmail/hostname to the username to form the email
address.

I had to also define the DEFAULT_DOMAIN in authpgsqlrc, because the custom 
query requires that a domain name be sent to sqwebmail or it won't attempt 
the query. So, I just used example.com, but I never use the $(domain) 
variable. It is just there to make sqwebmail happy.

Here is an example query...Mine does some joins with some existing 
customer tables, but this is enough to get it working:

PGSQL_SELECT_CLAUSE SELECT email, crypt, '', uid, gid, \
   home, maildir, '', name \
FROM passwd \
WHERE id = '$(local_part)'

Just adjust it to your own configuration.

I also compiled courier-imap with 
--with-authdaemonvar=/usr/local/share/sqwebmail/var/authdaemon so pop3d 
and sqwebmail share the same authdaemon. Now, if pop3d could use the same 
sqwebmail cache as well, that would be fantastic, but this doesn't seem 
possible, as courier-imap doesn't use a cache.

One other thing I do is send  a hangup signal to the authdaemon every hour 
to prevent the persistent db connections from timing out, as we use a 
stateful firewall between the webmail server and our database server. I 
added this line to the /etc/cron.hourly/sqwebmail-cron-cleancache script:

kill -HUP `cat /usr/local/share/sqwebmail/var/authdaemon/pid`

It's not pretty, but it works.

I hope this helps someone else.

Trevor




[sqwebmail] Re: default domain

2003-08-27 Thread Paul L. Allen

Trevor Astrope writes:

 This is how I did it. Using the logindomainlist was not an option for me,
 since I have 5000 virtual domains already configured with unique
 usernames, so having them all listed in logindomainlist was not practical
 and seems like a spammer's honeypot to me.

If each of those virtual domains has a unique domain name that follows
a sensible pattern then the - modifier with suitable wildcards is the
right way to go.

On our shared servers the access to webmail for domain foo.com is through
http://mail.foo.com and so an entry of *:mail.*:- in the logindomainlist
does the trick.  Instead of a drop-down it populates a text input
field with the mail domain foo.com.  No drop-down, which would be very 
slow and would leak information about who our clients are to all the other
clients (some of our clients are business competitors of other of
our clients).

The idea of assigning every single user a unique username is a horrible
way of doing things.  You can't let each domain maintain their userlist 
themselves using something like qmailadmin and they have to trouble you
each time they want to add a new user (if you wanted to place a limit
on how many users a domain can have there are better ways of doing it).
You also get the problem that users have to remember that just because 
they're  [EMAIL PROTECTED] their POP3  username is not fred or [EMAIL PROTECTED] but
instead it is waq37v.  Most users pick a password they can remember but 
with your  method every time Outlook trashes their e-mail details they're 
going to  have to ask you for their username again because they've lost the
piece of paper they wrote it down on.

Last week I migrated a company from their ISP's mail system where each
user had picked up mail with a username like xar28v and I thought their
ISP had done it that way because the techies there did not know about 
sqwebmail/vpopmail/qmailadmin and had essentially put together a nasty
hack around a MTA that did not directly support virtual domains.  Never
did I dream that they might have forced that horrible system on top of 
sqwebmail/vpopmail, but now I have to wonder if that's what they did.

The only worse way of implementing virtual domains would be to insist
that the local part of the mailbox name is unique so that if somebody
grabs sales for his virtual domain then none of the other virtual
domains can use it.  I've seen a system set up that way too and thought
the people who did it were idiots.

 Also, I needed pop to use the same authentication method, so it wasn't 
 practical to force 5000 users to change their email configurations to 
 include the domain in their pop configurations.

Well, yes, it's too late now.  But with a little thought beforehand
you could have done it the sensible way...

 It's not pretty, but it works.

For some value of works.  Even setting up virtual domains the sensible
way and then putting aliases in place to deliver [EMAIL PROTECTED] to
[EMAIL PROTECTED] would be less broken than all the kluges you had
to put in place to get your method to work.  You are understating the
case when you say your solution is not pretty.

Many people have put in a lot of time writing sqwebmail, vpopmail, and 
qmailadmin (not to mention the alternaive webmail packages, alternatve
mail admin web interfaces, and alternative mail delivery packages) so that 
you can implement virtual domains in a sensible manner.  You're proposing
a system that means more work for the server admin and more problems for
end-users while gaining nothing (that I can see) by doing it that way.

What on earth possessed you to ignore all the support for doing virtual 
domains properly and come up with a horrendous bodge like that?  What gives
you the idea that you're doing anyone any favours by encouraging others to 
do the same?  If I had locked myself into a setup like that through
ignorance and only later learned I could have done it more sensibly
and with less hassle for everyone concerned I'd be trying to conceal the 
fact, not offer my bad solution to other people.

-- 
Paul Allen
Softflare Support