Re: [vchkpw] Problem with vchkpw, system accounts, and smtp-auth.
> I've attempted to use vchkpw to authenticate both system (/etc/passwd) accounts > and virtual (vpopmail) accounts, as vchkpw's documentation suggests it will > do. Unfortunately, my system accounts can not authenticate via vchkpw as > called by both IMAP and SMTP-AUTH services. Virtual accounts authenticate > correctly to both mechanisms. > [...] > So, my question in a nutshell is: Does vchkpw really handle both system > and > virtual accounts, and if so, what might I be doing wrong to keep it from > working as advertised? Hi, I was able to resolve this without the assistance of the list and am embarrassed to admit that somehow, despite setting many compile-type configuration options with vpopmail, I missed the "--enable-passwd=y" directive to the configure script. I'm a tad embarrassed, but perhaps having this in the archives will help someone else resolve their issues. (Ironically, I managed to migrate all my system accounts over to vpopmail before figuring out what the problem was.) Many thanks! Cheers, Paul Robinson gotclue.net
Re: [vchkpw] disable_external_relay [PATCH]
Dear Tonino / Tom,
In between the whole expert discussion the user level curious question
"BTW, where is this user's limits info stored in case of non-mysql limits?"
got lost.
Please, let us know.
Devendra Singh
At 04/12/03 14:32 (), tonix (Antonio Nati) wrote:
Tom,
thanks for your clear explanation.
However, don't you think that kind of things should be discussed in the
general list instead of development list?
I feel that development list should deal with "implementation", "how to
develop", "how to improve code", while functionalities should be discussed
with end-users (or production users), that are interested in
functionalities, and don't care about implementation.
I'm really amazed when I discover a changed feature and see that it's been
done by developers without talking with end-users.
Ciao,
Tonino
At 03/12/2003 03/12/2003 -0700, you wrote:
On Wednesday, December 3, 2003, at 10:05 AM, tonix (Antonio Nati) wrote:
Tom,
sorry if I may be out of logic, just a fast look at the patch.
Here's how it works.
pw_gid is the user's limits.
if the user has V_OVERRIDE set, that's all they get.
otherwise, the domain limits are IN ADDITION to the user's limits.
For example:
If domain limit says no IMAP and user limit says no SMTP; user doesn't
have access to IMAP or SMTP.
Change domain limit from no IMAP to no POP. Now user limit becomes no
POP or SMTP.
We discussed this on the development list. Perhaps we need to explain it
better in the documentation.
Is it correct to keep using user flags if override is off?
Yes.
+if ((! (pw->pw_gid & V_OVERRIDE))
if user not overriding domain limits
+ && (vget_limits (domain, &limits) == 0)) {
+pw->pw_flags = pw->pw_gid | vlimits_get_flag_mask (&limits);
using mixed limits from user and domain.
Correct.
Would it be more direct to use only domain limits in such a case?
No. If you do it that way, you can't impose additional limits on a
single user in the domain (or, for example, add qmailadmin admin access).
+} else pw->pw_flags = pw->pw_gid;
else use user limits.
Correct. If V_OVERRIDE is set, or the limit lookup fails, it just uses
the user limits.
At 03/12/2003 03/12/2003 -0700, you wrote:
Here's the patch to fix the domain limits problem. It's in CVS now,
and will be in the next release (which I'll make by the end of the
week). Hopefully the email gateways won't totally screw the file up...
[snip]
Thanks for including an entire copy of the patch in your response.
---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.528 / Virus Database: 324 - Release Date: 16/10/03
Re: [vchkpw] Problem with email bouncing
Hi Trell, > Trells.com works just fine however the bazalar.com and others are > giving me an error like Sorry. Although I'm listed as a best-preference > MX or A for that host, it isn't in my control/locals file, so I don't > treat it as local. Besides the fact that I don't understand your weird directory structure: This error is raised by qmail; vpopmail is not involved (yet). Please post the output of /var/qmail/bin/qmail-showctl. > To my knowledge vpopmail removes the locals entry and places everything > in the virtualdomains file. If the domain is in locals, it should be in [more]rcpthosts, too. Otherwise your qmail configuration is broken. If the domain is in [more]rcpthosts, vadddomain will not add it because it already exists. Conclusion: vadddomain will not delete the domain from locals to put it into virtualdomains. Instead it will refuse to add the domain. Jonas
Re: [vchkpw] Problem with email bouncing
On Thursday, December 4, 2003, at 02:00 PM, Trell wrote: I have 5 different domains each with there own qmail/vpopmail/ instances. I set each up exactly the same, installed qmail with its own uid/gid and each has there own home directories. Example trells.com was installed in /var/qmail and then vpopmail in /opt/ vpopmail/5.3.27 Then for each different domain there in a seperate directory structure such as /opt/domains/bazalar/qmail and /opt/ domains/bazalar/vpopmail/5.3.27 and so forth. Trells.com works just fine however the bazalar.com and others are giving me an error like Sorry. Although I'm listed as a best-preference MX or A for that host, it isn't in my control/locals file, so I don't treat it as local. Did you add the domains with vadddomain? It should have put the domain names in /var/qmail/control/rcpthosts or morercpthosts (in addition to control/virtualhosts and users/assign). I'm not sure I understand your directory structure. On most qmail installations, you have one instance of qmail installed to /var/qmail, one instance of vpopmail installed to /home/vpopmail, and then all of the domains are stored in /home/vpopmail/domains (with the domain name as the directory name). -- Tom Collins - [EMAIL PROTECTED] QmailAdmin: http://qmailadmin.sf.net/ Vpopmail: http://vpopmail.sf.net/ Info on the Sniffter hand-held Network Tester: http://sniffter.com/
[vchkpw] Problem with email bouncing
Hey guys this is weird and I hope you can help me really quick. I have 5 different domains each with there own qmail/vpopmail/ instances. I set each up exactly the same, installed qmail with its own uid/gid and each has there own home directories. Example trells.com was installed in /var/qmail and then vpopmail in /opt/ vpopmail/5.3.27 Then for each different domain there in a seperate directory structure such as /opt/domains/bazalar/qmail and /opt/ domains/bazalar/vpopmail/5.3.27 and so forth. Trells.com works just fine however the bazalar.com and others are giving me an error like Sorry. Although I'm listed as a best-preference MX or A for that host, it isn't in my control/locals file, so I don't treat it as local. To my knowledge vpopmail removes the locals entry and places everything in the virtualdomains file. Please help this is getting annoying. Thanks, Trell
[vchkpw] bugs in qmailadmin 1.0.29 .qmailadmin-hooks code?
BUG1:
In user.c line 1046:
error =execl(cmd, Newu, Domain, Password1, Gecos, NULL);
sprintf(StatusMessage, "%s, \"%s\", %s, %s, %s, %s\n",
get_html_text("202"), cmd, hooks[hook_type],
Newu, Domain, Password1, Gecos);
if (error == -1) return (-1);
exit(127);
Shouldn't the 2nd parameter be cmd as well per the manpage?
"The const char *arg and subsequent ellipses in the execl, execlp, and
execle functions can be thought of as arg0, arg1, ..., argn. Together
they describe a list of one or more pointers to null-terminated strings
that represent the argument list available to the executed program.
The first argument, by convention, should point to the file name asso-
ciated with the file being executed."
Running a perl script from .qmailadmin-hooks the first parameter ARGV[0]
ends up being the domain, not the name.
BUG2:
blank lines in .qmailadmin-hooks cause a coredump.
BUG3:
if you do not specify all three lines (adduser,moduser,deluser) the edit
page displays garbled errors (create .qmailadmin-hooks and just put a
adduser line in it and you'll see what I mean)
-- Yermo
-
DTLink Software http://www.dtlink.com
FieldPost Business Email http://www.fieldpost.com
Nuts and Bolts Interactive, Inc. http://www.nbinteractive.com
-
[vchkpw] Make Error on Sqwebmail
Hello - I am getting the following error wihen running "make" with sqwebmail-3.6.1.20031109I am running qmail-1.03, vpopmail-5.2.2, and qmailadmin-1.0.6 all the rest are up and working great. I set my umask to 022 when running the "make"the ./configure went well with no errors... I am assuming from the error below that it is saying it can not find the gcc complier? I know that you have to edit conf-cc and conf-ld at times...but I do not see those files. Is there a patch that I need to apply or something that I have to edit? I check some FAQ's and the only answer I saw was that someone did not have a c compiler. make[2]: Entering directory `/var/www/cgi-bin/sqwebmail-3.6.1.20031109/gdbmobj' Compiling testgdbm.C ./../depcomp: line 414: exec: g++: not found make[2]: *** [testgdbm.o] Error 127 make[2]: Leaving directory `/var/www/cgi-bin/sqwebmail-3.6.1.20031109/gdbmobj' make[1]: *** [all] Error 2 make[1]: Leaving directory `/var/www/cgi-bin/sqwebmail-3.6.1.20031109/gdbmobj' make: *** [all-recursive] Error 1 best regards - Martin
[vchkpw] 'vdeldomain' changes permissions on rcpthost
This may be a bug that's fixed in the newer release, if so my second question will be relevant. I'm running version 5.2.1. ISSUE: When I delete a vpop domain with 'vdeldomain', the permissions on /var/qmail/control/rcpthost change to 600 immediatley. No other control files are effected QUESTION: If I should upgrade to the newer release (probably a good idea anyway), how do I do it on a production system? Steps? Thanks so much.. Christian
RE: [vchkpw] Problems connecting courier-imap to vpopmail
Thanks for the effort. =) It was a missconfiguration in squirrelmail (plus my lack of IMAP knowledge =). Regards // Jerker -Original Message- From: Adam Hooper [mailto:[EMAIL PROTECTED] Sent: den 4 december 2003 16:03 To: Jerker Jörbrand (FP/XCQ) Cc: '[EMAIL PROTECTED]' Subject: Re: [vchkpw] Problems connecting courier-imap to vpopmail First check that courier-imap works. Install it, edit the config files, and turn it on. Then log into your mail server from your mail client through IMAP instead of POP. Once that works, try tackling Squirrelmail. -- Adam Hooper [EMAIL PROTECTED] Jerker Jörbrand (FP/XCQ) wrote: > Hi, > > I cant seem to connect courier-imap to vpopmail. Im using qmailadmin to handle all > users and domains that I have and that works fine. But the problem is when i > installed courier-imap and squirrelmail to get webaccess i cant seem to logon... How > do i connect courier-imap to vpopmail, and verify that it works? Did I miss > something when it comes to configuring the authentification for vpop, or what? > > Glad for help > // Jerker >
Re: [vchkpw] Problems connecting courier-imap to vpopmail
First check that courier-imap works. Install it, edit the config files, and turn it on. Then log into your mail server from your mail client through IMAP instead of POP. Once that works, try tackling Squirrelmail. -- Adam Hooper [EMAIL PROTECTED] Jerker Jörbrand (FP/XCQ) wrote: Hi, I cant seem to connect courier-imap to vpopmail. Im using qmailadmin to handle all users and domains that I have and that works fine. But the problem is when i installed courier-imap and squirrelmail to get webaccess i cant seem to logon... How do i connect courier-imap to vpopmail, and verify that it works? Did I miss something when it comes to configuring the authentification for vpop, or what? Glad for help // Jerker
Re: [vchkpw] Migratinhg Vpopmail account to Vpopmail with Mysql
Il giorno Tuesday 02 December 2003 18:08, Fernando Dias mi scriveva: > My Answer is: How i can import mail accouts of vpopmail normal to vpopmail > + Mysql? > Exists some shell script for it? # ~vpopmail/bin/vconvert vconvert: usage The first option sets which format to convert FROM, the second option sets which format to convert TO. -e = etc format -c = cdb format -m = sql format -S = set sqwebmail passwords -v = version -d = debug info -- Cristiano Deana - FreeCRIS "Ho iniziato a usare FreeBSD perche' m$ usava me. ed e' spiacevole" in irc su: irc.azzurra.org #freebsd-it
Re: [vchkpw] Spam controll ?!
Hi there, > Well you could try configuring Spammassassin so that it does what you > want it to do. You can get it to label it as spam, move it some place > else on the hard drive, and a lot of other cool things. SpamAssassin never "moves [mail] to some place", in fact, SpamAssassin never delivers mail at all. Its only purpose is to give a message a spam score and header lines. Sorting out or deleting mail based on these headers is entirely the MDA's job, not SpamAssassin's. Jonas
Re: [vchkpw] Internal configuration
Hi Matt, > Whilst writing some automated account creation scripts, I created a test > domain and then afterwards manually deleted the domain from > /home/vpopmail/domains/. That's not good. :) > Now adding the same domain, it says > > Error: Domain already exists Yes, because it's still in the qmail configuration. > Then using bin/vdeldomain to try and remove remnants of it (yeah yeah, > should have done that instead of rm, I know!), it says > > Error: Domain does not exist Yes, because it cannot find the domains directory. I admit these error messages are confusing. However, they wouldn't have shown up if you didn't break things manually. ;-) > Confusing, at best. So my question is where does vpopmail store the > internal configuration? There is no "internal configuration". vpopmail creates the domain directory (which you already got used to) and inserts the appropriate lines into the qmail configuration. > I manually removed all references to the domain > from files in /var/qmail/control, but that doesn't seem to be it. You did right; additionally delete the appropriate line from /var/qmail/users/assign and run /var/qmail/bin/qmail-newu. Afterwards you can re-create the domain with vadddomain. Jonas
Re: [vchkpw] Problems connecting courier-imap to vpopmail
Hi Jerker, > I cant seem to connect courier-imap to vpopmail. Im using qmailadmin > to handle all users and domains that I have and that works fine. But > the problem is when i installed courier-imap and squirrelmail to get > webaccess i cant seem to logon... How do i connect courier-imap to > vpopmail, and verify that it works? Regarding the first question: Courier-IMAP has different authentication plugins. Make sure you have the authvchkpw module activated. IIRC, you should also disable authdaemon, as it doesn't work correctly with vpopmail (at least in older versions; I didn't track it). Regarding the second question: Courier-IMAP has good logging capabilities. Check on the console first, using "telnet localhost 143", doing a manual IMAP connect. This will make clear if the problem is with Courier-IMAP and not with a misconfiguration in SquirrelMail. Another option is to use BincIMAP instead of Courier-IMAP, which uses the original vchkpw programm (it has a checkpassword-compatible interface). From my point of view, it's a lot easier to set up. Jonas
Re: [vchkpw] disable_external_relay [PATCH]
Tom,
thanks for your clear explanation.
However, don't you think that kind of things should be discussed in the
general list instead of development list?
I feel that development list should deal with "implementation", "how to
develop", "how to improve code", while functionalities should be discussed
with end-users (or production users), that are interested in
functionalities, and don't care about implementation.
I'm really amazed when I discover a changed feature and see that it's been
done by developers without talking with end-users.
Ciao,
Tonino
At 03/12/2003 03/12/2003 -0700, you wrote:
On Wednesday, December 3, 2003, at 10:05 AM, tonix (Antonio Nati) wrote:
Tom,
sorry if I may be out of logic, just a fast look at the patch.
Here's how it works.
pw_gid is the user's limits.
if the user has V_OVERRIDE set, that's all they get.
otherwise, the domain limits are IN ADDITION to the user's limits.
For example:
If domain limit says no IMAP and user limit says no SMTP; user doesn't
have access to IMAP or SMTP.
Change domain limit from no IMAP to no POP. Now user limit becomes no POP
or SMTP.
We discussed this on the development list. Perhaps we need to explain it
better in the documentation.
Is it correct to keep using user flags if override is off?
Yes.
+if ((! (pw->pw_gid & V_OVERRIDE))
if user not overriding domain limits
+ && (vget_limits (domain, &limits) == 0)) {
+pw->pw_flags = pw->pw_gid | vlimits_get_flag_mask (&limits);
using mixed limits from user and domain.
Correct.
Would it be more direct to use only domain limits in such a case?
No. If you do it that way, you can't impose additional limits on a single
user in the domain (or, for example, add qmailadmin admin access).
+} else pw->pw_flags = pw->pw_gid;
else use user limits.
Correct. If V_OVERRIDE is set, or the limit lookup fails, it just uses
the user limits.
At 03/12/2003 03/12/2003 -0700, you wrote:
Here's the patch to fix the domain limits problem. It's in CVS now, and
will be in the next release (which I'll make by the end of the
week). Hopefully the email gateways won't totally screw the file up...
[snip]
Thanks for including an entire copy of the patch in your response.
--
Tom Collins - [EMAIL PROTECTED]
QmailAdmin: http://qmailadmin.sf.net/ Vpopmail: http://vpopmail.sf.net/
Info on the Sniffter hand-held Network Tester: http://sniffter.com/
[EMAIL PROTECTED]Interazioni di Antonio Nati
http://www.interazioni.it [EMAIL PROTECTED]
Re: [vchkpw] vget_assign returns only real domain
Hi Tom, > The tricky part is ezmlm (and always has been). If you create a > mailing list, it will typically only work for the domain you created it > in, and none of the aliases. Exactly; that's why I wanted the user to choose in which of his "n" alias domains he wants to create the list instead of forcing him to use his main domain - and the easiest way (from the user's perspective) is to re-use the domain name from the login. Anyway, even if my quick hack in vpopmail.c seems to work for non-MySQL setups, I'll place a feature suggestion on the qmailadmin list. Thanks for all your input, Jonas
