Re: [vchkpw] courier imap vpopmail authentification problem withsmtp

2005-03-07 Thread Jesús Arnáiz
The vchkpw program from vpopmail touch the tcp.smtp.cdb file. But new 
versions of courier doesn't call to it. This versions uses it'w own 
vchkpw so it can authenticate users but not touch the tcp.smtp.cdb (at 
least, at the moment)


Rakotomandimby (R12y) Mihamina wrote:
On Mon, 2005-03-07 at 08:26 +0100, [EMAIL PROTECTED] wrote:
i think it s the vpopmail who should write into it when a user log to
imap no ?

i think too. i think it's
courrier-imap -> vpopmail -> tcp.smtp.cdb  and then qmail  needs to
update the cdb.
but as you said, nothing touched the tcp.smtp.cdb file... so... 



Re: [vchkpw] courier imap vpopmail authentification problem withsmtp

2005-03-07 Thread Jesús Arnáiz
The problem is the version of courier. New versions doesn't support 
pop-before-smtp


Rakotomandimby (R12y) Mihamina wrote:
On Sun, 2005-03-06 at 20:53 +0100, master wrote:
there is no log message i connect to imap (it work) but my ip isn t
add in 
the tcp.smtp.cdb file so i can t send any mail.

What user the imap process run as ? 
What are the permissions of the tcp.smtp.cdb file ?
Who should write something into it ? I guess it the imap process...



Re: [vchkpw] courier imap vpopmail authentification problem with smtp

2005-03-06 Thread Jesús Arnáiz
New versions of Courier Imap do not use Auth-before SMTP. It means that 
you have to use another way to authenticate IMAP users for SMTP, like 
auth-smtp for example


master wrote:
- Original Message - From: "Michael Bowe" <[EMAIL PROTECTED]>
To: 
Sent: Sunday, March 06, 2005 11:34 AM
Subject: Re: [vchkpw] courier imap vpopmail authentification problem 
with smtp


- Original Message - From: "master" <[EMAIL PROTECTED]>
- Original Message - From: "Michael Bowe" 
<[EMAIL PROTECTED]>

> I have written some information on that subject
>
http://www.pipeline.com.au/staff/mbowe/isp/webmail-server.htm#ROAMING_USERS 


>
> Michael.
>
>
yes i have already see that page but i don t make it work, i have do 
the :

What version of vpopmail ?
What version of Courier-IMAP ?
Michael.
courier-imap-3.0.8  (i have read on some link on internet that there is 
some problem on 4.x with the imap before smtp)
and vpopmail 5.4.9



vpopmail and qmail installed outside /var/qmail

2001-03-13 Thread Jesús Arnáiz

Hi!

I have installed qmail outside /var/qmail and I see vpopmail don't work, if I create a
symbolic link from /var/qmail to it, the program works.

Can anybody tell me how to install vpopmail if qmail is in a different directory of
/var/qmail?

Thanks in advance.


--
Jesús Arnáiz
0z0ne Inc I+D/IT Manager
http://www.0z0ne.com
mailto:[EMAIL PROTECTED]




QmailAdmin in spanish?

2001-03-13 Thread Jesús Arnáiz

Hi everyone!

Is there any qmailadmin version translated to spanish? How can I get it (if it exist)?

Thanks in advance


--
Jesús Arnáiz
0z0ne Inc I+D/IT Manager
http://www.0z0ne.com
mailto:[EMAIL PROTECTED]




Re: vchkpw lacking authentication security

2001-01-17 Thread Jesús Arnáiz




- Original Message -
From: "Matt Simerson" <[EMAIL PROTECTED]>
To: "'Tim Hassan'" <[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>
Sent: Tuesday, January 16, 2001 9:18 PM
Subject: RE: vchkpw lacking authentication security


> I can't see how that could possibly be construed as a security drawback. POP
> is inherently insecure in the first place (sending clear text passwords
> across the net) and password sniffing is much more of a problem (and the
> easiest way to collect passwords) than people cracking passwords.
>

All right.

> So, unless you're exclusively using a) POP3-SSL or POP over SSH to prevent
> password sniffing,

If I use it, should the client change some in the pop configuration?. Is it difficult 
to set on a
system?.


>b)  shadow passwords (who isn't?), c) MD5 (or blowfish)
> passwords on your current system (to utilize more than 8 char passwords),
> and d) forcing users to actually USE long passwords it's quite silly to say
> that using DES is a security drawback to using vpopmail.
>
> The risk of having a password cracked is minimal on a userless system.
>
> Matt
>
> > -Original Message-
> > From: Tim Hassan [mailto:[EMAIL PROTECTED]]
> > Sent: Monday, January 15, 2001 10:09 PM
> > To: [EMAIL PROTECTED]; [EMAIL PROTECTED]
> > Subject: vchkpw lacking authentication security
> >
> >
> >
> > Dear Inter7 Developer:
> >
> > I recently discovered the following security drawback in
> > vpopmail with vchkpw authentication:
> >
> > No matter how long you set the password to when adding a new
> > user, only the
> > first 8 characters of the password are used. So for example, if I do:
> >
> > ./vadduser [EMAIL PROTECTED] this-is-hard-to-guess-234234235-23423
> >
> > and then I try to login to my email as user "test" and
> > password "this-is-", it would let me in.
> > As you may already know, any password below 8 characters is
> > considered insecure, even if it was a combination of letters, numbers,
> > and special characters. In other words, Standard DES crypto is used :(
> >
> >
> > Best Regards,
> > Tamer Hassan
>
>


Thanks in advance

--
Jesús Arnáiz <[EMAIL PROTECTED]>
Departamento de Sistemas - ARCOMEDIA.COM
http://www.arcomedia.com/




Re: about perm

2001-01-14 Thread Jesús Arnáiz

Hi!

I find the problem. The config.cache file saves data about UID and GID (¿?) and 
vpopmail store this
data in the binary file (¿?). I change the UID and GID of vpopmail in /etc/passwd 
thinking it read
it each time. And when I see it don't work I recompile and reinstall it but this fail 
because I let
the config.cache. I delete it, recompile and reinstall and then all work fine.

Regards!.


--
Jesús Arnáiz <[EMAIL PROTECTED]>
Departamento de Sistemas - ARCOMEDIA.COM
http://www.arcomedia.com/



- Original Message -----
From: "Jesús Arnáiz" <[EMAIL PROTECTED]>
To: "vpopmail" <[EMAIL PROTECTED]>
Sent: Tuesday, January 09, 2001 2:01 PM
Subject: about perm


> Hi!
>
> in response to your e-mail
>
> On Tue, Jan 09, 2001 at 01:26:49PM +0100, Jesús Arnáiz wrote:
> >> I use qmail and vpopmail. I install a new system and I put all domains
> >> there, it works fine, but when I create a new one (with vadddomain) this
> >> don't work. It creates it with an extrange owner and group (different
> >> from vpopmail.vchkpw), and even if I change this it don't work.
> >>
> >> I get this in the maillog if I try to send an e-mail to [EMAIL PROTECTED]
> >> Jan  9 11:58:34 main qmail: 979037914.190687 delivery 5299: deferral:
> >> Unable_to_switch_to_/home/vpopmail/domains/dominio.com:_access_denied._(#4.3.0)/
>
> >Which user are you when you create the new domain?
>
> I'm root when I create the new domain.
>
> >Which user does the
> >domain directory belong to?
>
> The directory belongs to a normal user and a normal group,  not to root, not to 
>vpopmail...
> I try to chown it to vpopmail.vchkpw, but it fails again. I left the same perm as 
>another domains
> that works
>
> >What userid does vpopmail have?
>
> 760 and 760 the vchkpw group.
>
>
>
> >-Johan
> >--
> >Johan Almqvist
> >http://www.almqvist.net/johan/qmail/
>
>
>
> Thanks in advance
>
> --
> Jesús Arnáiz
> Departamento de Sistemas - ARCOMEDIA.COM
>
>
>




about perm

2001-01-09 Thread Jesús Arnáiz

Hi!

in response to your e-mail

On Tue, Jan 09, 2001 at 01:26:49PM +0100, Jesús Arnáiz wrote:
>> I use qmail and vpopmail. I install a new system and I put all domains
>> there, it works fine, but when I create a new one (with vadddomain) this
>> don't work. It creates it with an extrange owner and group (different
>> from vpopmail.vchkpw), and even if I change this it don't work.
>>
>> I get this in the maillog if I try to send an e-mail to [EMAIL PROTECTED]
>> Jan  9 11:58:34 main qmail: 979037914.190687 delivery 5299: deferral:
>> Unable_to_switch_to_/home/vpopmail/domains/dominio.com:_access_denied._(#4.3.0)/

>Which user are you when you create the new domain?

I'm root when I create the new domain.

>Which user does the
>domain directory belong to?

The directory belongs to a normal user and a normal group,  not to root, not to 
vpopmail...
I try to chown it to vpopmail.vchkpw, but it fails again. I left the same perm as 
another domains
that works

>What userid does vpopmail have?

760 and 760 the vchkpw group.



>-Johan
>--
>Johan Almqvist
>http://www.almqvist.net/johan/qmail/



Thanks in advance

--
Jesús Arnáiz
Departamento de Sistemas - ARCOMEDIA.COM





Fw: strange problems with qmail and vpopmail.

2001-01-09 Thread Jesús Arnáiz



--
Jesús Arnáiz
Departamento de Sistemas - ARCOMEDIA.COM

- Original Message -
From: "Jesús Arnáiz" <[EMAIL PROTECTED]>
To: "qmail" <[EMAIL PROTECTED]>
Sent: Tuesday, January 09, 2001 12:00 PM
Subject: strange problems with qmail and vpopmail.


> Hi everyone!
>
> I use qmail and vpopmail. I install a new system and I put all domains there, it 
>works fine, but
> when I create a new one (with vadddomain) this don't work. It creates it with an 
>extrange owner
and
> group (different from vpopmail.vchkpw), and even if I change this it don't work.
>
> I get this in the maillog if I try to send an e-mail to [EMAIL PROTECTED]
>
> Jan  9 11:58:34 main qmail: 979037914.190687 delivery 5299: deferral:
> Unable_to_switch_to_/home/vpopmail/domains/dominio.com:_access_denied._(#4.3.0)/
>
> I use Debian GNU/Linux 2.2 (Potato).
>
> Can anybody help me?.
>
> Thanks in advance
>
> --
> Jesús Arnáiz
> Departamento de Sistemas - ARCOMEDIA.COM
>
>