Re: [vchkpw] imap before smtp

2009-09-21 Thread Christopher Chan

Tom Collins wrote:
Even if it's possible to set up imap-before-smtp, you'll be much better 
off if you have your clients use SMTP AUTH instead. More reliable, more 
predictable, and supported by almost every email client out there.


If you really want to try it, consider Dovecot instead of Courier. I 
think dovecot uses vchkpw, and is probably going to be easier to configure.



dovecot for smtp-auth. dovecot has vpopmail bindings AND sasl support. 
You won't need courier-auth or courier-imap anymore. postfix has support 
for dovecot-sasl. If you are using something else...I have not tried them.


!DSPAM:4ab8227f32711201751689!



[vchkpw] Re: imap before smtp

2009-09-21 Thread Eric Shubert
I use dovecot with vpopmail as well. Performance is much better than 
courier.


Tom Collins wrote:
Even if it's possible to set up imap-before-smtp, you'll be much better 
off if you have your clients use SMTP AUTH instead. More reliable, more 
predictable, and supported by almost every email client out there.


If you really want to try it, consider Dovecot instead of Courier. I 
think dovecot uses vchkpw, and is probably going to be easier to configure.


-Tom

On Sep 16, 2009, at 11:51 PM, kengheng kengh...@mysql.cc wrote:

Dear All, would like to check if there is anyway to do imap before 
smtp relay ? I'm using courier-authlib-0.60.2 with courier-imap.


Thanks.

--
Best regards,
KengHeng. Chan
Mobile : +6-016-717-0273
SQL Technology Sdn Bhd
http://www.mysql.cc
c...@mysql.cc











--
-Eric 'shubes'


!DSPAM:4ab8277232711705548173!



Re: [vchkpw] Re: imap before smtp

2009-09-21 Thread Trey Nolen
Areed. And it is very easy to make the switch.


Trey Nolen



On Mon, 2009-09-21 at 18:23 -0700, Eric Shubert wrote:
 I use dovecot with vpopmail as well. Performance is much better than 
 courier.
 
 Tom Collins wrote:
  Even if it's possible to set up imap-before-smtp, you'll be much better 
  off if you have your clients use SMTP AUTH instead. More reliable, more 
  predictable, and supported by almost every email client out there.
  
  If you really want to try it, consider Dovecot instead of Courier. I 
  think dovecot uses vchkpw, and is probably going to be easier to configure.
  
  -Tom
  
  On Sep 16, 2009, at 11:51 PM, kengheng kengh...@mysql.cc wrote:
  
  Dear All, would like to check if there is anyway to do imap before 
  smtp relay ? I'm using courier-authlib-0.60.2 with courier-imap.
 
  Thanks.
 
  -- 
  Best regards,
  KengHeng. Chan
  Mobile : +6-016-717-0273
  SQL Technology Sdn Bhd
  http://www.mysql.cc
  c...@mysql.cc
 
 
 
  
  
  
  
 
 


!DSPAM:4ab82b6e32711069471943!



[vchkpw] imap before smtp

2009-09-17 Thread kengheng
Dear All, would like to check if there is anyway to do imap before smtp 
relay ? I'm using courier-authlib-0.60.2 with courier-imap.


Thanks.

--
Best regards,
KengHeng. Chan
Mobile : +6-016-717-0273
SQL Technology Sdn Bhd
http://www.mysql.cc
c...@mysql.cc 



!DSPAM:4ab1dc8f32717245867931!



Re: [vchkpw] imap before smtp

2009-09-17 Thread Juan Enciso
One queston,  Why don't use SMTP-AUTH?
I'm using SMTP-AUTH from SpamControl
http://www.fehcom.de/qmail/spamcontrol.html

http://www.fehcom.de/qmail/spamcontrol.htmlIt works good


On Thu, Sep 17, 2009 at 1:51 AM, kengheng kengh...@mysql.cc wrote:

 Dear All, would like to check if there is anyway to do imap before smtp
 relay ? I'm using courier-authlib-0.60.2 with courier-imap.

 Thanks.

 --
 Best regards,
 KengHeng. Chan
 Mobile : +6-016-717-0273
 SQL Technology Sdn Bhd
 http://www.mysql.cc
 c...@mysql.cc

 




-- 
Juan Enciso Condeña
Teléfono: (511) 3238504
E-mail: juan.enc...@gmail.com
MSN: juan_enc...@hotmail.com


!DSPAM:4ab23e5632715567853773!


Re: [vchkpw] imap before smtp

2009-09-17 Thread Tom Collins
Even if it's possible to set up imap-before-smtp, you'll be much  
better off if you have your clients use SMTP AUTH instead. More  
reliable, more predictable, and supported by almost every email client  
out there.


If you really want to try it, consider Dovecot instead of Courier. I  
think dovecot uses vchkpw, and is probably going to be easier to  
configure.


-Tom

On Sep 16, 2009, at 11:51 PM, kengheng kengh...@mysql.cc wrote:

Dear All, would like to check if there is anyway to do imap before  
smtp relay ? I'm using courier-authlib-0.60.2 with courier-imap.


Thanks.

--
Best regards,
KengHeng. Chan
Mobile : +6-016-717-0273
SQL Technology Sdn Bhd
http://www.mysql.cc
c...@mysql.cc





!DSPAM:4ab244f532711143630341!



[vchkpw] IMAP before SMTP

2005-11-11 Thread Nicklas Bondesson
I'm having a hard time getting IMAP before SMTP to work.

It seems like the remote ip address is not visible to get_remote_ip() in
vpopmail. I'm using qmail, vpopmail with a mysql backend and Courier-IMAP
(v3.0.8). 

Problem:

The remote ip is not inserted into the relay table. If I check the lastauth
table i only get imap in the remote_ip field.

Any ideas?


Thanks,

Nicklas B




Re: [vchkpw] IMAP before SMTP

2005-11-11 Thread Rick Macdougall

Nicklas Bondesson wrote:

I'm having a hard time getting IMAP before SMTP to work.

It seems like the remote ip address is not visible to get_remote_ip() in
vpopmail. I'm using qmail, vpopmail with a mysql backend and Courier-IMAP
(v3.0.8). 


Problem:

The remote ip is not inserted into the relay table. If I check the lastauth
table i only get imap in the remote_ip field.

Any ideas?



Hi,

It is not possible at all with the 4.x series of Courier-imap.  I'm not 
sure about the 3.x series or maybe Binc Imap.


Regards,

Rick



RE: [vchkpw] IMAP before SMTP

2005-11-11 Thread Nicklas Bondesson
I was able to get it working after i recompiled courier-imap.

Thanks,

Nicklas B

 -Original Message-
 From: Rick Macdougall [mailto:[EMAIL PROTECTED] 
 Sent: den 12 november 2005 00:28
 To: vchkpw@inter7.com
 Subject: Re: [vchkpw] IMAP before SMTP
 
 Nicklas Bondesson wrote:
  I'm having a hard time getting IMAP before SMTP to work.
  
  It seems like the remote ip address is not visible to 
 get_remote_ip() 
  in vpopmail. I'm using qmail, vpopmail with a mysql backend and 
  Courier-IMAP (v3.0.8).
  
  Problem:
  
  The remote ip is not inserted into the relay table. If I check the 
  lastauth table i only get imap in the remote_ip field.
  
  Any ideas?
  
 
 Hi,
 
 It is not possible at all with the 4.x series of 
 Courier-imap.  I'm not sure about the 3.x series or maybe Binc Imap.
 
 Regards,
 
 Rick
 
 
 




Re: [vchkpw] IMAP before SMTP

2005-11-11 Thread Jack Kerouac
 The remote ip is not inserted into the relay table. If I check the
 lastauth
 table i only get imap in the remote_ip field.

 
 It is not possible at all with the 4.x series of Courier-imap.  I'm not
 sure about the 3.x series or maybe Binc Imap.

Works fine with BincIMAP (which, IMHO, is a way saner IMAP than 
Courier).

--
Jack


Re: [vchkpw] IMAP before SMTP

2005-11-11 Thread Rick Macdougall

Nicklas Bondesson wrote:

I was able to get it working after i recompiled courier-imap.



Hi,

Just for my personal info, what version of courier-imap was it ?

Rick



RE: [vchkpw] IMAP before SMTP

2005-11-11 Thread Nicklas Bondesson
Courier-IMAP 3.0.8 (the last one in the 3.x series).

Thanks,

Nicklas B

 -Original Message-
 From: Rick Macdougall [mailto:[EMAIL PROTECTED] 
 Sent: den 12 november 2005 00:59
 To: vchkpw@inter7.com
 Subject: Re: [vchkpw] IMAP before SMTP
 
 Nicklas Bondesson wrote:
  I was able to get it working after i recompiled courier-imap.
  
 
 Hi,
 
 Just for my personal info, what version of courier-imap was it ?
 
 Rick
 
 
 




Re: [vchkpw] IMAP before SMTP

2005-11-11 Thread Michael Bowe
 Original Message - 


From: Rick Macdougall [EMAIL PROTECTED]




Nicklas Bondesson wrote:

I'm having a hard time getting IMAP before SMTP to work.

It seems like the remote ip address is not visible to get_remote_ip() in
vpopmail. I'm using qmail, vpopmail with a mysql backend and Courier-IMAP
(v3.0.8). Problem:

The remote ip is not inserted into the relay table. If I check the 
lastauth

table i only get imap in the remote_ip field.

Any ideas?



Hi,

It is not possible at all with the 4.x series of Courier-imap.  I'm not 
sure about the 3.x series or maybe Binc Imap.



( 
http://www.pipeline.com.au/staff/mbowe/isp/webmail-server.htm#ROAMING_USERS  
)


IMAP-before-SMTP is possible when using Courier-IMAP v3.x. However it only 
works when configured --with-authvchkpw --without-authdaemon. When 
running --without-authdaemon, Courier-IMAP's authvchkpw code is able to make 
use of vpopmail's roaming user functions to allow IMAP-before-SMTP 
functionality. IMAP-before-SMTP is not possible when Courier-IMAP has been 
complied --with-authdaemon, because in this mode the user's IP address is 
not made available to the authvchkpw code (via the TCPREMOTEIP env var). 
Also note that in Courier-IMAP v4.x and later, --without-authdaemon 
functionality is no longer available thus preventing IMAP-before-SMTP from 
working.


Michael.



[vchkpw] RE: imap before smtp

2003-10-01 Thread webmaster
 -Original Message-
 From: Ken Jones [mailto:[EMAIL PROTECTED] 
 Sent: Thursday, September 11, 2003 12:44 PM
 To: [EMAIL PROTECTED]
 Subject: Re: [vchkpw] imap before smtp
 
 
 The preauthvchkpw.c module needs to be modified.
 The problem is, when a user attempts to authenticate,
 if their user name exists on the system then it will
 open up relay. However, at that point in the code the
 user has not been authenticated. I attempted to fix
 this before but became confused on which function
 is called from what file. It's a bit obtuse for me. 
 
 an quick hack could be to verify the password at
 that point, then open up relay on a valid password.
 
 The real fix would be to trace the fucntions and
 open up relay after password verification.
 
 Perhaps someone could figure it out.
 
 Ken Jones
 
 
 On Thursday 11 September 2003 2:35 pm, Charles Sprickman wrote:
  This is a good FAQ item, for when we have a FAQ.
 
  Mr. Sam has disabled the imap-before-smtp function in the 
 authvchkpw 
  code. I've looked at the courier archives, and there's no 
 explanation 
  from him as to what the problem is...  Just lots of questions. :)
 
  Bill's suggestion might not work, as he #undefs the 
 value.  In your 
  courier source dir, go into the authlib dir and open 
  preauthvchkpw.c for editing.  Look for a line like this:
 
  #undef HAVE_OPEN_SMTP_RELAY
 
  Go ahead and change that #undef to #define and it will work 
  properly. I can't comment on what the security concerns 
 are, because I 
  don't know what they are.  It does work however.
 
  Charles
 
  On Thu, 11 Sep 2003, ted wrote:
   I've got a LWQ-style qmail configuration, plus vpopmail 
 5.3.27 and 
   courier-imap-2.1.1.20030902.  I have  roaming users 
 enabled (as well 
   as qmail-ext), and  POP3  before SMTP works perfectly (using  
   qmail-pop3d).
  
   IMAP also seems to work just fine, but it does not update 
 open-smtp. 
   My workaround of creating a separate POP account to POP 
 in without 
   retrieving msgs allows me to send via IMAP, but is 
 obviously not an 
   ideal solution. (I'm using Thunderbird .2).
  
   I've installed courier-imap numerous times (with 
 different releases 
   up to 20030902), both with authdaemon enabled as well as 
 disabled. 
   In both cases, the results are the same (meaning that I can read 
   mail but not relay).
  
   Perhaps my understanding is wrong, but I was under the impression 
   that since these are virtual domains I'm having trouble 
 with (all my 
   domains are virtual), the fact that I am able to read mail at all 
   under IMAP would indicate that vchkpw is being called from 
   courier-imap. Since qmail-pop3d invokes vchkpw and works, I'm 
   puzzled. I'm afraid I don't know where to look log-wise.
  
   thanks for any hints.
  
   -ted




What Ken says is correct.  Simply by turning HAVE_OPEN_SMTP_RELAY on will 
allow IPs to be added to open-smtp REGARDLESS of whether authentication is 
successful.

Here is a patch for preauthvchkpw.c
 use it at your own risk ***
works for me.

==

--- preauthvchkpw.c.orig2003-10-01 20:24:26.0 -0400
+++ preauthvchkpw.c 2003-10-01 20:24:51.0 -0400
@@ -27,8 +27,17 @@
 static const char rcsid[]=$Id: preauthvchkpw.c,v 1.18 2003/03/12 02:45:55
mrsam Exp $;
 
 
-#undef HAVE_OPEN_SMTP_RELAY
+#define HAVE_OPEN_SMTP_RELAY
 /* Disabled, pending fix */
+#ifdef HAVE_OPEN_SMTP_RELAY
+struct callback_info {
+   const char *pass;
+   char *userret;
+   int issession;
+   void (*callback_func)(struct authinfo *, void *);
+   void *callback_arg;
+   };
+#endif
 
 int auth_vchkpw_pre(const char *userid, const char *service,
 int (*callback)(struct authinfo *, void *),
@@ -71,6 +80,10 @@
 free(usercopy);
 vclose();
 
+#ifdef HAVE_OPEN_SMTP_RELAY
+struct callback_info *i=(struct callback_info *)arg;
+#endif
+
 if (!vpw)
 {
 errno=notfound;
@@ -86,7 +99,9 @@
 } else {
 #ifdef HAVE_OPEN_SMTP_RELAY
 /* open the relay to pop users */
+   if (vpw-pw_passwd != 0 
!authcheckpassword(i-pass, vpw-pw_passwd)) {
 open_smtp_relay();
+   }
 #endif
 }
 } else if ( strcmp(imap, service) == 0 ) {
@@ -95,7 +110,9 @@
 } else {
 #ifdef HAVE_OPEN_SMTP_RELAY
 /* open the relay to imap users */
+if (vpw-pw_passwd != 0 
!authcheckpassword(i-pass, vpw-pw_passwd)) {
 open_smtp_relay();
+}
 #endif
 }
 }

==


Lu


 




Re: [vchkpw] imap before smtp

2003-09-15 Thread Tim
On Thu, Sep 11, 2003 at 01:40:02PM -0700, Tom Collins wrote:
 mr. varshavchik addressed this on the sqwebmail mailing list:

 http://www.mail-archive.com/[EMAIL PROTECTED]/msg06068.html
 
 it's a lovely little rant.
 
 As of vpopmail 5.3.8, the buffers are cleared properly and the 
 authdaemon has worked just fine.  A beta 5.2.2 release is on 
 SourceForge with the same fix in place.

  Is there any change between 5.3.5 and 5.3.8 that is relevant to this?
It is not obvious from the ChangeLog.  I've been running 5.2.1 and
authdaemon with just the parse_email() patch (I am the author of the
patch) without any problems.  We have a very small installation though.

  Also my patch doesn't clear the buffer, just making sure that the
buffer is always terminated properly.  Let me know if I am missing
something.

  Thanks,

  Tim



Re: [vchkpw] imap before smtp

2003-09-15 Thread Michael Bowe
- Original Message - 
From: Tim [EMAIL PROTECTED]
To: Tom Collins [EMAIL PROTECTED]
Cc: vpopmail list [EMAIL PROTECTED]
Sent: Monday, September 15, 2003 6:09 PM
Subject: Re: [vchkpw] imap before smtp


 On Thu, Sep 11, 2003 at 01:40:02PM -0700, Tom Collins wrote:
  mr. varshavchik addressed this on the sqwebmail mailing list:
 
  http://www.mail-archive.com/[EMAIL PROTECTED]/msg06068.html
  
  it's a lovely little rant.
 
  As of vpopmail 5.3.8, the buffers are cleared properly and the
  authdaemon has worked just fine.  A beta 5.2.2 release is on
  SourceForge with the same fix in place.

   Is there any change between 5.3.5 and 5.3.8 that is relevant to this?
 It is not obvious from the ChangeLog.  I've been running 5.2.1 and
 authdaemon with just the parse_email() patch (I am the author of the
 patch) without any problems.  We have a very small installation though.

   Also my patch doesn't clear the buffer, just making sure that the
 buffer is always terminated properly.  Let me know if I am missing
 something.

Hi Tim

Your updates to parse_email() that were included with vpopmail-5.3.5 is
definitely the solution to the courier problem

As you say, prior to your fix, the username string was not getting null
terminated correctly.

The incorrect null termination resulted in problems for courier-imap when
running --with-authdaemon. This is because authdaemon runs persistently,
rather than running once per auth request.

Typically the vpopmail code isnt run in a persistent fashion. The vpopmail
tools such as vchkpw (or courier-imap --without-authdaemon) only run once
per auth request, so the incorrect termination issue never really caused a
problem because the string buffers would always be created/initialised from
scratch for each auth.

But when you ran courier --with-authdaemon, the same string buffers being
used over and over again, and the incorrectly terminated username field
would result in auth failure as soon as a shorter username came through than
the previous username.

Michael.




[vchkpw] imap before smtp

2003-09-11 Thread ted
I've got a LWQ-style qmail configuration, plus vpopmail 5.3.27 and 
courier-imap-2.1.1.20030902.  I have  roaming users enabled (as well as 
qmail-ext), and  POP3  before SMTP works perfectly (using  qmail-pop3d).

IMAP also seems to work just fine, but it does not update open-smtp. My 
workaround of creating a separate POP account to POP in without 
retrieving msgs allows me to send via IMAP, but is obviously not an 
ideal solution. (I'm using Thunderbird .2).

I've installed courier-imap numerous times (with different releases up 
to 20030902), both with authdaemon enabled as well as disabled. In both 
cases, the results are the same (meaning that I can read mail but not 
relay).

Perhaps my understanding is wrong, but I was under the impression that 
since these are virtual domains I'm having trouble with (all my domains 
are virtual), the fact that I am able to read mail at all under IMAP 
would indicate that vchkpw is being called from courier-imap. Since 
qmail-pop3d invokes vchkpw and works, I'm puzzled. I'm afraid I don't 
know where to look log-wise.

thanks for any hints.

-ted




Re: [vchkpw] imap before smtp

2003-09-11 Thread Bill Shupp
On Thursday, September 11, 2003, at 10:53  AM, ted wrote:

I've got a LWQ-style qmail configuration, plus vpopmail 5.3.27 and 
courier-imap-2.1.1.20030902.  I have  roaming users enabled (as well 
as qmail-ext), and  POP3  before SMTP works perfectly (using  
qmail-pop3d).

IMAP also seems to work just fine, but it does not update open-smtp. 
My workaround of creating a separate POP account to POP in without 
retrieving msgs allows me to send via IMAP, but is obviously not an 
ideal solution. (I'm using Thunderbird .2).

I've installed courier-imap numerous times (with different releases up 
to 20030902), both with authdaemon enabled as well as disabled. In 
both cases, the results are the same (meaning that I can read mail but 
not relay).

Perhaps my understanding is wrong, but I was under the impression that 
since these are virtual domains I'm having trouble with (all my 
domains are virtual), the fact that I am able to read mail at all 
under IMAP would indicate that vchkpw is being called from 
courier-imap. Since qmail-pop3d invokes vchkpw and works, I'm puzzled. 
I'm afraid I don't know where to look log-wise.
Probably the same old problem of courier not detecting roaming users.. 
Try this:

cd (patth to courier)
(cd authlib ; make clean)
export CFLAGS=-DHAVE_OPEN_SMTP_RELAY
make
make install


Regards,

Bill




Re: [vchkpw] imap before smtp

2003-09-11 Thread Charles Sprickman
This is a good FAQ item, for when we have a FAQ.

Mr. Sam has disabled the imap-before-smtp function in the authvchkpw code.
I've looked at the courier archives, and there's no explanation from him
as to what the problem is...  Just lots of questions. :)

Bill's suggestion might not work, as he #undefs the value.  In your
courier source dir, go into the authlib dir and open preauthvchkpw.c
for editing.  Look for a line like this:

#undef HAVE_OPEN_SMTP_RELAY

Go ahead and change that #undef to #define and it will work properly.
I can't comment on what the security concerns are, because I don't know
what they are.  It does work however.

Charles

On Thu, 11 Sep 2003, ted wrote:

 I've got a LWQ-style qmail configuration, plus vpopmail 5.3.27 and
 courier-imap-2.1.1.20030902.  I have  roaming users enabled (as well as
 qmail-ext), and  POP3  before SMTP works perfectly (using  qmail-pop3d).

 IMAP also seems to work just fine, but it does not update open-smtp. My
 workaround of creating a separate POP account to POP in without
 retrieving msgs allows me to send via IMAP, but is obviously not an
 ideal solution. (I'm using Thunderbird .2).

 I've installed courier-imap numerous times (with different releases up
 to 20030902), both with authdaemon enabled as well as disabled. In both
 cases, the results are the same (meaning that I can read mail but not
 relay).

 Perhaps my understanding is wrong, but I was under the impression that
 since these are virtual domains I'm having trouble with (all my domains
 are virtual), the fact that I am able to read mail at all under IMAP
 would indicate that vchkpw is being called from courier-imap. Since
 qmail-pop3d invokes vchkpw and works, I'm puzzled. I'm afraid I don't
 know where to look log-wise.

 thanks for any hints.

 -ted






Re: [vchkpw] imap before smtp

2003-09-11 Thread Ken Jones
The preauthvchkpw.c module needs to be modified.
The problem is, when a user attempts to authenticate,
if their user name exists on the system then it will
open up relay. However, at that point in the code the
user has not been authenticated. I attempted to fix
this before but became confused on which function
is called from what file. It's a bit obtuse for me. 

an quick hack could be to verify the password at
that point, then open up relay on a valid password.

The real fix would be to trace the fucntions and
open up relay after password verification.

Perhaps someone could figure it out.

Ken Jones


On Thursday 11 September 2003 2:35 pm, Charles Sprickman wrote:
 This is a good FAQ item, for when we have a FAQ.

 Mr. Sam has disabled the imap-before-smtp function in the authvchkpw code.
 I've looked at the courier archives, and there's no explanation from him
 as to what the problem is...  Just lots of questions. :)

 Bill's suggestion might not work, as he #undefs the value.  In your
 courier source dir, go into the authlib dir and open preauthvchkpw.c
 for editing.  Look for a line like this:

 #undef HAVE_OPEN_SMTP_RELAY

 Go ahead and change that #undef to #define and it will work properly.
 I can't comment on what the security concerns are, because I don't know
 what they are.  It does work however.

 Charles

 On Thu, 11 Sep 2003, ted wrote:
  I've got a LWQ-style qmail configuration, plus vpopmail 5.3.27 and
  courier-imap-2.1.1.20030902.  I have  roaming users enabled (as well as
  qmail-ext), and  POP3  before SMTP works perfectly (using  qmail-pop3d).
 
  IMAP also seems to work just fine, but it does not update open-smtp. My
  workaround of creating a separate POP account to POP in without
  retrieving msgs allows me to send via IMAP, but is obviously not an
  ideal solution. (I'm using Thunderbird .2).
 
  I've installed courier-imap numerous times (with different releases up
  to 20030902), both with authdaemon enabled as well as disabled. In both
  cases, the results are the same (meaning that I can read mail but not
  relay).
 
  Perhaps my understanding is wrong, but I was under the impression that
  since these are virtual domains I'm having trouble with (all my domains
  are virtual), the fact that I am able to read mail at all under IMAP
  would indicate that vchkpw is being called from courier-imap. Since
  qmail-pop3d invokes vchkpw and works, I'm puzzled. I'm afraid I don't
  know where to look log-wise.
 
  thanks for any hints.
 
  -ted




Re: [vchkpw] imap before smtp

2003-09-11 Thread Paul Theodoropoulos
mr. varshavchik addressed this on the sqwebmail mailing list:

http://www.mail-archive.com/[EMAIL PROTECTED]/msg06068.html

it's a lovely little rant.

At 12:35 PM 9/11/2003, Charles Sprickman wrote:
This is a good FAQ item, for when we have a FAQ.

Mr. Sam has disabled the imap-before-smtp function in the authvchkpw code.
I've looked at the courier archives, and there's no explanation from him
as to what the problem is...  Just lots of questions. :)
Bill's suggestion might not work, as he #undefs the value.  In your
courier source dir, go into the authlib dir and open preauthvchkpw.c
for editing.  Look for a line like this:
#undef HAVE_OPEN_SMTP_RELAY

Go ahead and change that #undef to #define and it will work properly.
I can't comment on what the security concerns are, because I don't know
what they are.  It does work however.
Charles

On Thu, 11 Sep 2003, ted wrote:

 I've got a LWQ-style qmail configuration, plus vpopmail 5.3.27 and
 courier-imap-2.1.1.20030902.  I have  roaming users enabled (as well as
 qmail-ext), and  POP3  before SMTP works perfectly (using  qmail-pop3d).

 IMAP also seems to work just fine, but it does not update open-smtp. My
 workaround of creating a separate POP account to POP in without
 retrieving msgs allows me to send via IMAP, but is obviously not an
 ideal solution. (I'm using Thunderbird .2).

 I've installed courier-imap numerous times (with different releases up
 to 20030902), both with authdaemon enabled as well as disabled. In both
 cases, the results are the same (meaning that I can read mail but not
 relay).

 Perhaps my understanding is wrong, but I was under the impression that
 since these are virtual domains I'm having trouble with (all my domains
 are virtual), the fact that I am able to read mail at all under IMAP
 would indicate that vchkpw is being called from courier-imap. Since
 qmail-pop3d invokes vchkpw and works, I'm puzzled. I'm afraid I don't
 know where to look log-wise.

 thanks for any hints.

 -ted



Paul Theodoropoulos
http://www.anastrophe.com




Re: [vchkpw] imap before smtp

2003-09-11 Thread ted
Charles, Bill, Ken, thanks for the quick responses. Indeed Bill's 
suggestion doesn't do the trick for my configuration. Charles, I'd make 
your suggested change, but am concerned about Ken's further input on the 
topic. I don't suppose an older version of Courier-IMAP is the answer?

-ted

Ken Jones wrote:

The preauthvchkpw.c module needs to be modified.
The problem is, when a user attempts to authenticate,
if their user name exists on the system then it will
open up relay. However, at that point in the code the
user has not been authenticated. I attempted to fix
this before but became confused on which function
is called from what file. It's a bit obtuse for me. 

an quick hack could be to verify the password at
that point, then open up relay on a valid password.
The real fix would be to trace the fucntions and
open up relay after password verification.
Perhaps someone could figure it out.

Ken Jones

On Thursday 11 September 2003 2:35 pm, Charles Sprickman wrote:
 

This is a good FAQ item, for when we have a FAQ.

Mr. Sam has disabled the imap-before-smtp function in the authvchkpw code.
I've looked at the courier archives, and there's no explanation from him
as to what the problem is...  Just lots of questions. :)
Bill's suggestion might not work, as he #undefs the value.  In your
courier source dir, go into the authlib dir and open preauthvchkpw.c
for editing.  Look for a line like this:
#undef HAVE_OPEN_SMTP_RELAY

Go ahead and change that #undef to #define and it will work properly.
I can't comment on what the security concerns are, because I don't know
what they are.  It does work however.
Charles

On Thu, 11 Sep 2003, ted wrote:
   

I've got a LWQ-style qmail configuration, plus vpopmail 5.3.27 and
courier-imap-2.1.1.20030902.  I have  roaming users enabled (as well as
qmail-ext), and  POP3  before SMTP works perfectly (using  qmail-pop3d).
IMAP also seems to work just fine, but it does not update open-smtp. My
workaround of creating a separate POP account to POP in without
retrieving msgs allows me to send via IMAP, but is obviously not an
ideal solution. (I'm using Thunderbird .2).
I've installed courier-imap numerous times (with different releases up
to 20030902), both with authdaemon enabled as well as disabled. In both
cases, the results are the same (meaning that I can read mail but not
relay).
Perhaps my understanding is wrong, but I was under the impression that
since these are virtual domains I'm having trouble with (all my domains
are virtual), the fact that I am able to read mail at all under IMAP
would indicate that vchkpw is being called from courier-imap. Since
qmail-pop3d invokes vchkpw and works, I'm puzzled. I'm afraid I don't
know where to look log-wise.
thanks for any hints.

-ted
 



 






Re: [vchkpw] imap before smtp

2003-09-11 Thread Tom Collins
On Thursday, September 11, 2003, at 01:06  PM, Paul Theodoropoulos 
wrote:
mr. varshavchik addressed this on the sqwebmail mailing list:

http://www.mail-archive.com/[EMAIL PROTECTED]/msg06068.html

it's a lovely little rant.
Does someone have an email address for him?  I'm trying 
[EMAIL PROTECTED], hopefully it will get to him.

It would be nice to let him know that the current dev version of 
vpopmail addresses both of his concerns.

As of vpopmail 5.3.8, the buffers are cleared properly and the 
authdaemon has worked just fine.  A beta 5.2.2 release is on 
SourceForge with the same fix in place.

As of vpopmail 5.3.27, mysql login information is stored in an external 
file and libvpopmail has 644 permissions, making it possible to link it 
into courier-imap without having to run as root.

If there are any further problems that prevent courier-imap from 
working with vpopmail, we'd love to hear about them (either here or via 
bug reports to the SourceForge project).

--
Tom Collins
[EMAIL PROTECTED]
QmailAdmin: http://qmailadmin.sf.net/  Vpopmail: http://vpopmail.sf.net/
Info on the Sniffter hand-held Network Tester: http://sniffter.com/



Re: [vchkpw] imap before smtp

2003-09-11 Thread Bill Shupp
On Thursday, September 11, 2003, at 01:14  PM, ted wrote:

Charles, Bill, Ken, thanks for the quick responses. Indeed Bill's 
suggestion doesn't do the trick for my configuration. Charles, I'd 
make your suggested change, but am concerned about Ken's further input 
on the topic. I don't suppose an older version of Courier-IMAP is the 
answer?
I'm curious.. if you have clients capable of IMAP, are they not capable 
of SMTP-AUTH?  IMO, this is a better solution than roaming users.

Regards,

Bill




IMAP before SMTP

2001-08-31 Thread Chris Keating


PLEASE note that I am not a subscriber to this list, if you need to ask me
any questions about this, remember to cc me.

Quoted from mail-archive.com:
on 8/29/01 11:50 AM, [EMAIL PROTECTED] at [EMAIL PROTECTED] spake:

 Latest CourierIMAP works with the latest development of
 vpopmail which has authentication structure changes.

Except for IMAP before SMTP (roaming users).

My previous posts:

http://www.mail-archive.com/vchkpw@inter7.com/msg06208.html
http://www.mail-archive.com/vchkpw@inter7.com/msg06246.html

No one has responded to these posts, so either I'm the only one using this
feature with these versions, or the only one that is having the problem.
I'd love to know if someone else has it working successfully with
4.10.35/1.3.10.

Cheers,

Bill Shupp


Bill, I took a crack at your roaming users problem last night and I came
up with a solution that I'm happy with.

The basic problem is that the newer version of courierIMAP has seperated
the authentication process from the couriertcp process by using
authdaemond. So when vpopmail's open_smtp_relay function get's called it's
unable to retreive the remote user's IP address from the environment
variables. To fix this I've written a program that can be dropped in
between imaplogin and imapd. This program will only be called if the user
has been authenticated. It will call open_smtp_relay with the proper
environment variables set, then it will call whatever program is passed
into it's argv[1] parameter.

Run sh ./build to build open_relay, if the compile fails with complaints
about crypt add -lcrypt to your ~vpopmail/etc/lib_deps. Install open_relay
whereever you like, I put mine in /usr/local/bin. Modify imapd.rc, or use
the one I attached. The important line is this one:

$PORT ${exec_prefix}/sbin/imaplogin $LIBAUTHMODULES \
 ${exec_prefix}/bin/open_relay \ #This will setup open_relay for roaming users
 ${exec_prefix}/bin/imapd Maildir

Don't forget to put ~vpopmail/bin/clearopensmtp into your cron!

Enjoy,
Chris


#include stdio.h
#include sys/types.h
#include pwd.h
#include vpopmail.h

int main(int argc, char *argv[])
{
fprintf(stderr, INFO:Opening smtp relay for ip [%s]\n, getenv(TCPREMOTEIP));
open_smtp_relay();
/*fprintf(stderr, INFO:Executing %s\n, argv[1]);*/
execv(argv[1], argv+1);
fprintf(stderr, INFO:Should never get here.\n);
return 0;
}


#! /bin/sh
# $Id: imapd.rc.in,v 1.18 2001/07/30 00:02:32 mrsam Exp $
#
# Copyright 1998 - 2000 Double Precision, Inc.
# See COPYING for distribution information.


prefix=/usr/local
exec_prefix=/usr/local
bindir=${exec_prefix}/bin
libexecdir=/usr/local/libexec

. ${prefix}/etc/imapd-ssl
. ${prefix}/etc/imapd

case $1 in
start)
LIBAUTHMODULES=
for f in `echo $AUTHMODULES`
do
LIBAUTHMODULES=$LIBAUTHMODULES /usr/local/libexec/authlib/$f
done

if test -x ${libexecdir}/authlib/authdaemond
then
/usr/bin/env - ${libexecdir}/authlib/authdaemond start
fi

ulimit -d $IMAP_ULIMITD
/usr/bin/env - /bin/sh -c  . ${prefix}/etc/imapd ; \
. ${prefix}/etc/imapd-ssl ; \
IMAP_STARTTLS=$IMAPDSTARTTLS ; export IMAP_STARTTLS ; \
TLS_PROTOCOL=$TLS_STARTTLS_PROTOCOL ; \
`sed -n '/^#/d;/=/p' ${prefix}/etc/imapd | \
sed 's/=.*//;s/^/export /;s/$/;/'`
`sed -n '/^#/d;/=/p' ${prefix}/etc/imapd-ssl | \
sed 's/=.*//;s/^/export /;s/$/;/'`
/usr/local/libexec/couriertcpd -address=$ADDRESS \
-stderrlogger=/usr/local/libexec/logger \
-stderrloggername=imapd \
-maxprocs=$MAXDAEMONS -maxperip=$MAXPERIP \
-pid=$PIDFILE $TCPDOPTS \
$PORT ${exec_prefix}/sbin/imaplogin $LIBAUTHMODULES \
${exec_prefix}/bin/open_relay \
${exec_prefix}/bin/imapd Maildir
;;
stop)
/usr/local/libexec/couriertcpd -pid=$PIDFILE -stop
if test -x ${libexecdir}/authlib/authdaemond
then
${libexecdir}/authlib/authdaemond stop
fi
;;
esac
exit 0


gcc -o open_relay open_relay.c `cat ~vpopmail/etc/*deps`



Re: IMAP before SMTP

2001-08-31 Thread Bill Shupp

on 8/31/01 11:14 AM, Chris Keating at [EMAIL PROTECTED] spake:

 
 PLEASE note that I am not a subscriber to this list, if you need to ask me
 any questions about this, remember to cc me.
 
 Quoted from mail-archive.com:
 on 8/29/01 11:50 AM, [EMAIL PROTECTED] at [EMAIL PROTECTED] spake:
 
 Latest CourierIMAP works with the latest development of
 vpopmail which has authentication structure changes.
 
 Except for IMAP before SMTP (roaming users).
 
 My previous posts:
 
 http://www.mail-archive.com/vchkpw@inter7.com/msg06208.html
 http://www.mail-archive.com/vchkpw@inter7.com/msg06246.html
 
 No one has responded to these posts, so either I'm the only one using this
 feature with these versions, or the only one that is having the problem.
 I'd love to know if someone else has it working successfully with
 4.10.35/1.3.10.
 
 Cheers,
 
 Bill Shupp
 
 
 Bill, I took a crack at your roaming users problem last night and I came
 up with a solution that I'm happy with.
 
 The basic problem is that the newer version of courierIMAP has seperated
 the authentication process from the couriertcp process by using
 authdaemond. So when vpopmail's open_smtp_relay function get's called it's
 unable to retreive the remote user's IP address from the environment
 variables. To fix this I've written a program that can be dropped in
 between imaplogin and imapd. This program will only be called if the user
 has been authenticated. It will call open_smtp_relay with the proper
 environment variables set, then it will call whatever program is passed
 into it's argv[1] parameter.
 
 Run sh ./build to build open_relay, if the compile fails with complaints
 about crypt add -lcrypt to your ~vpopmail/etc/lib_deps. Install open_relay
 whereever you like, I put mine in /usr/local/bin. Modify imapd.rc, or use
 the one I attached. The important line is this one:
 
 $PORT ${exec_prefix}/sbin/imaplogin $LIBAUTHMODULES \
 ${exec_prefix}/bin/open_relay \ #This will setup open_relay for roaming users
 ${exec_prefix}/bin/imapd Maildir
 
 Don't forget to put ~vpopmail/bin/clearopensmtp into your cron!
 
 Enjoy,
 Chris


Chris,

Thanks for your efforts.  This works for me.  However, this workaround has a
few drawbacks that you may already be aware of:

1. If imap access is turned off (via vmoduser -i), then imap access is not
granted, but open_relay still tries to run and just leaves the open_smtp
file owned by root.root, making roaming break until permissions are changed
back.

2. If roaming is disabled for that user (via vmoduser -r), open_relay has no
way of knowing since it's separate from authvchkpw now.  So they get to roam
anyway.

3. For people using multiple authentication modules (not me), anyone who is
authenticated will get roaming access.

Since we are now forced to use authdaemon (as far as I can tell, anyway),
seems like the best solution would be for imaplogin to pass the environment
to authdaemond.  This would fix everything mentioned above, I think, and
perhaps similar issues for other authentication modules.

Thanks again, Chris!

Regards,

Bill Shupp




Re: IMAP before SMTP

2001-08-31 Thread Chris Keating


 Chris,

 Thanks for your efforts.  This works for me.  However, this workaround has a
 few drawbacks that you may already be aware of:

 1. If imap access is turned off (via vmoduser -i), then imap access is not
 granted, but open_relay still tries to run and just leaves the open_smtp
 file owned by root.root, making roaming break until permissions are changed
 back.

 2. If roaming is disabled for that user (via vmoduser -r), open_relay has no
 way of knowing since it's separate from authvchkpw now.  So they get to roam
 anyway.

 3. For people using multiple authentication modules (not me), anyone who is
 authenticated will get roaming access.

 Since we are now forced to use authdaemon (as far as I can tell, anyway),
 seems like the best solution would be for imaplogin to pass the environment
 to authdaemond.  This would fix everything mentioned above, I think, and
 perhaps similar issues for other authentication modules.


1. This is a problem with the vpopmail.c code, IMHO it doesn't recover
from hiccups as well as it should.

2,3. The real problem here is that a side effect (SMTP relay authentication)
is being piggy-backed onto authentication. authdaemond is soley concerned
with checking the validity of username/passwd pairs against various
sources. In this sense smtp_open_relay is a bit of a hack. And I've just
whipped together a hack to fix a broken hack. I'm currently looking into
patching/adding SMTP AUTH over TLS/SSL with an authdaemon backend into
qmail-smtp. This would be a more pragmatic solution that could fall back
on smtp_open_relay for roaming users who can't do SMTP AUTH over SSL. Of
course falling back on smtp_open_relay entails the weaknesses that you've
described above.

For imaplogin to pass all of the environment information to authdaemond
would break the abstraction, and force specialized code into both
imaplogin and parts of authdaemond. Now that I think about the problem
some more, it would be possible to fix problems 1-3 from open_relay.c,
since imaplogin sets an environment variable with the user's
username/email address. I'm pretty sure this could be used to check and
see if the user should have roaming access.

Chris




Re: IMAP before SMTP

2001-08-31 Thread Sam Varshavchik

Chris Keating writes: 

  
 Chris, 

 Thanks for your efforts.  This works for me.  However, this workaround has a
 few drawbacks that you may already be aware of: 

 1. If imap access is turned off (via vmoduser -i), then imap access is not
 granted, but open_relay still tries to run and just leaves the open_smtp
 file owned by root.root, making roaming break until permissions are changed
 back. 

 2. If roaming is disabled for that user (via vmoduser -r), open_relay has no
 way of knowing since it's separate from authvchkpw now.  So they get to roam
 anyway. 

 3. For people using multiple authentication modules (not me), anyone who is
 authenticated will get roaming access. 

 Since we are now forced to use authdaemon (as far as I can tell, anyway),
 seems like the best solution would be for imaplogin to pass the environment
 to authdaemond.  This would fix everything mentioned above, I think, and
 perhaps similar issues for other authentication modules. 

  
 1. This is a problem with the vpopmail.c code, IMHO it doesn't recover
 from hiccups as well as it should.
  
 2,3. The real problem here is that a side effect (SMTP relay authentication)
 is being piggy-backed onto authentication. authdaemond is soley concerned

Correct. 

I have said many times before that my opinion is that POP-before-SMTP and 
IMAP-before-SMTP approach is a hack, nothing more.  This approach might have 
made sense 2-3 years ago, but not any more.  Pretty much every mail client 
out there supports authenticated SMTP, and that's the right solution for 
this particular problem.  That's what people should be doing.  Authenticated 
SMTP is a much more reliable, and a technically sane approach. 

FWIW, you can still get the old authentication configuration by specifying 
 --without-authdaemon to Courier-IMAP's configuration script.  It's just that 
the default setting now builds authdaemon, because it's simply easier for me 
with everyone on the same playing field, and everyone using authdaemon. 


-- 
Sam



IMAP before SMTP [was Re: multiple setup]

2001-08-29 Thread Bill Shupp

on 8/29/01 11:50 AM, [EMAIL PROTECTED] at [EMAIL PROTECTED] spake:

 Latest CourierIMAP works with the latest development of
 vpopmail which has authentication structure changes.

Except for IMAP before SMTP (roaming users).

My previous posts:

http://www.mail-archive.com/vchkpw@inter7.com/msg06208.html
http://www.mail-archive.com/vchkpw@inter7.com/msg06246.html

No one has responded to these posts, so either I'm the only one using this
feature with these versions, or the only one that is having the problem.
I'd love to know if someone else has it working successfully with
4.10.35/1.3.10.

Cheers,

Bill Shupp




Re: IMAP before SMTP [was Re: multiple setup]

2001-08-29 Thread Tren Blackburn

I've done the upgrade this morning and it _seems_ to be working fine for
me...none of my imap customers have complained...yet...

Regards,

Tren.

On Wed, 29 Aug 2001, Bill Shupp wrote:

 on 8/29/01 11:50 AM, [EMAIL PROTECTED] at [EMAIL PROTECTED] spake:

  Latest CourierIMAP works with the latest development of
  vpopmail which has authentication structure changes.

 Except for IMAP before SMTP (roaming users).

 My previous posts:

 http://www.mail-archive.com/vchkpw@inter7.com/msg06208.html
 http://www.mail-archive.com/vchkpw@inter7.com/msg06246.html

 No one has responded to these posts, so either I'm the only one using this
 feature with these versions, or the only one that is having the problem.
 I'd love to know if someone else has it working successfully with
 4.10.35/1.3.10.

 Cheers,

 Bill Shupp



-- 
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
- Tren Blackburn - Ownermailto:[EMAIL PROTECTED]  =
= End of Time Networks  http://www.eotnetworks.com   -
- (403) 269-2122 =
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-




Re: IMAP before SMTP [was Re: multiple setup]

2001-08-29 Thread Bill Shupp

on 8/29/01 12:14 PM, Tren Blackburn at [EMAIL PROTECTED] spake:

 I've done the upgrade this morning and it _seems_ to be working fine for
 me...none of my imap customers have complained...yet...

Wow... you upgraded without testing that?  You're bolder than I.  Many of my
customers rely on it, as I'm not using SMTP-AUTH in production yet.  Things
would be ugly for me, as it's not yet working.   ; )

Cheers,

Bill Shupp




Re: IMAP before SMTP [was Re: multiple setup]

2001-08-29 Thread Tren Blackburn

On Wed, 29 Aug 2001, Bill Shupp wrote:

 on 8/29/01 12:14 PM, Tren Blackburn at [EMAIL PROTECTED] spake:

  I've done the upgrade this morning and it _seems_ to be working fine for
  me...none of my imap customers have complained...yet...

 Wow... you upgraded without testing that?  You're bolder than I.  Many of my
 customers rely on it, as I'm not using SMTP-AUTH in production yet.  Things
 would be ugly for me, as it's not yet working.   ; )

WellI'd be willing to bet money I have FAR less IMAP customers than
you do.  Plus I keep all software I install from source in a tar file so I
can re-install at a moments notice.  Trust me, I made sure I had a way to
go back.

Cheers,

Tren.


 Cheers,

 Bill Shupp



-- 
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
- Tren Blackburn - Ownermailto:[EMAIL PROTECTED]  =
= End of Time Networks  http://www.eotnetworks.com   -
- (403) 269-2122 =
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-




Re: IMAP before SMTP [was Re: multiple setup]

2001-08-29 Thread vol

vpopmail 4.10.35, although in development, is considered unofficially
stable.  We're putting it through it's final patches and testing,
before we go stable with a new version.

Tren Blackburn wrote:
 
 On Wed, 29 Aug 2001, Bill Shupp wrote:
 
  on 8/29/01 12:14 PM, Tren Blackburn at [EMAIL PROTECTED] spake:
 
   I've done the upgrade this morning and it _seems_ to be working fine for
   me...none of my imap customers have complained...yet...
 
  Wow... you upgraded without testing that?  You're bolder than I.  Many of my
  customers rely on it, as I'm not using SMTP-AUTH in production yet.  Things
  would be ugly for me, as it's not yet working.   ; )
 
 WellI'd be willing to bet money I have FAR less IMAP customers than
 you do.  Plus I keep all software I install from source in a tar file so I
 can re-install at a moments notice.  Trust me, I made sure I had a way to
 go back.
 
 Cheers,
 
 Tren.
 
 
  Cheers,
 
  Bill Shupp
 
 
 
 --
 =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
 - Tren Blackburn - Ownermailto:[EMAIL PROTECTED]  =
 = End of Time Networks  http://www.eotnetworks.com   -
 - (403) 269-2122 =
 =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

-- 
[EMAIL PROTECTED]
Inter7 Internet Technologies, Inc.
www.inter7.coom - 847-492-0470
Prices at http://www.inter7.com/prices



Re: Is there a way to make imap before smtp just like pop before smtp?

2001-02-28 Thread inter7

Yes it's there, but it doesn't update the relay table, at least not for me.

I am using qmail 1.03, vpopmail-4.9.8-1, courier-imap-1.3.4.

My vpopmail is configured to allow roaming users and I use mysql as the
userdb. My tcp.smtp lives in ~vpopmail/etc

I also use qmail's pop3d

Pop3 before smtp does infact update the relay table and the user is able to
use the smtp for relay.
IMAP before smtp doesn't update the relay table, so the user is not able to
use the smtp for relay...

Any suggestions/help is really appreciated.

Thanks!

__
Kris Mach.

- Original Message -
From: "Ken Jones" [EMAIL PROTECTED]
To: "Kris von Mach" [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Sent: Monday, February 26, 2001 11:46 AM
Subject: Re: Is there a way to make imap before smtp just like pop before
smtp?


 Kris von Mach wrote:
 
  Hi,
 
  I was wondering if there is a patch or something to allow imap before
smtp
  authentication for roaming access, just like the pop before smtp.
 
  Currently I am using qmail, vpopmail, courier-imap.
 
  Thanks!
 
  __
  Kris Mach.

 It already supports it. If you look in courier-imaps
 authlib/preauthvchkpw.c code, you'll see a section that
 checks if it is the imap service then checks if the
 user is allowed to do imap. If both are true then
 it calls the vpopmail roaming users code.

 Ken Jones





Re: Is there a way to make imap before smtp just like pop beforesmtp?

2001-02-28 Thread Bill Shupp

on 2/28/01 11:18 AM, Matt Simerson at [EMAIL PROTECTED] wrote:

 I noticed this behaviour yesterday with Courier IMAP. When you run configure
 on courier, it attempts to see if the open_smtp_relay function is present in
 the vpopmail library. On my system it is. I hack up vpopmail so that I still
 use .cdb files for authentication but I stuff the open_smtp_relay
 information into a MySQL table. So, I DO in fact have the open_smtp_relay
 functions in the vpopmail lib. Courier's authlib/configure scripts does not
 detect it correctly.
 
 I fixed it by, after running configure, editing the authlib/preauthvchkpw.c
 and commenting out the if HAVE_OPEN_SMTP_RELAY so that it will update the
 relay table after any successful authentication. Works like a charm.

I had been using Courier IMAP 1.3.1 with cdb just fine (w/ vpopmail 4.9.9).
I upgraded to Courier IMAP 1.3.5 today, and IMAP before SMTP stopped
working.  I commented out:

 #ifdef HAVE_OPEN_SMTP_RELAY
AND
#endif

from preauthvchkpw.c, and now it works with cdb format...  so this is not
just a problem for MySQL users.

-Bill




Re: Is there a way to make imap before smtp just like pop beforesmtp?

2001-02-26 Thread fox

Must be it, because I use MySQL as well.  Hrm.

Thanks,

Tren.

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
- Tren Blackburn - Ownermailto:[EMAIL PROTECTED]  =
= End of Time Networks  http://www.theendoftime.net  -
- (403) 269-2122 =
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

On Mon, 26 Feb 2001, Bill Shupp wrote:

 on 2/25/01 10:57 PM, [EMAIL PROTECTED] at [EMAIL PROTECTED] wrote:

  I've got the exact same problem, and I can't make it work either.
 
  Vpopmail 4.9.7
  Courier IMAP 1.3.1
 
  Any suggestions?
 
  Cheers,
 
  Tren.


 Must be just with MySQL auth.  It works great for me with cdb.

 -Bill






Re: Is there a way to make imap before smtp just like pop before smtp?

2001-02-26 Thread Kris von Mach

Yes it's there, but it doesn't update the relay table, at least not for me.

I am using qmail 1.03, vpopmail-4.9.8-1, courier-imap-1.3.4.

My vpopmail is configured to allow roaming users and I use mysql as the
userdb. My tcp.smtp lives in ~vpopmail/etc

I also use qmail's pop3d

Pop3 before smtp does infact update the relay table and the user is able to
use the smtp for relay.
IMAP before smtp doesn't update the relay table, so the user is not able to
use the smtp for relay...

Any suggestions/help is really appreciated.

Thanks!

__
Kris Mach.

- Original Message -
From: "Ken Jones" [EMAIL PROTECTED]
To: "Kris von Mach" [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Sent: Monday, February 26, 2001 11:46 AM
Subject: Re: Is there a way to make imap before smtp just like pop before
smtp?


 Kris von Mach wrote:
 
  Hi,
 
  I was wondering if there is a patch or something to allow imap before
smtp
  authentication for roaming access, just like the pop before smtp.
 
  Currently I am using qmail, vpopmail, courier-imap.
 
  Thanks!
 
  __
  Kris Mach.

 It already supports it. If you look in courier-imaps
 authlib/preauthvchkpw.c code, you'll see a section that
 checks if it is the imap service then checks if the
 user is allowed to do imap. If both are true then
 it calls the vpopmail roaming users code.

 Ken Jones





Is there a way to make imap before smtp just like pop before smtp?

2001-02-25 Thread Kris von Mach

Hi,

I was wondering if there is a patch or something to allow imap before smtp
authentication for roaming access, just like the pop before smtp.

Currently I am using qmail, vpopmail, courier-imap.

Thanks!

__
Kris Mach.




Re: Is there a way to make imap before smtp just like pop beforesmtp?

2001-02-25 Thread Kris von Mach

Hrm, it is not working for me, am I missing some switch somewhere?

I am running vpopmail 4.9.8-1 and courier-imap 1.3.4 and qmail 1.03.

I am using qmail's pop3d and pop3 before smtp works just fine. But imap
before smtp doesn't work. I did follow the vpopmail's FAQ and pop3 works
great, and I just assumed imap worked as well, until I checked it, and found
out that it doesn't work.

__
Kris Mach

- Original Message -
From: "Bill Shupp" [EMAIL PROTECTED]
To: "Kris von Mach" [EMAIL PROTECTED]
Sent: Sunday, February 25, 2001 5:00 PM
Subject: Re: Is there a way to make imap before smtp just like pop
beforesmtp?


 This has been in place for a few versions.  Make sure that you're running
 the latest stable releases of vpopmail and courier-imap.

 -Bill

 on 2/25/01 3:43 PM, Kris von Mach at [EMAIL PROTECTED] wrote:

  Hi,
 
  I was wondering if there is a patch or something to allow imap before
smtp
  authentication for roaming access, just like the pop before smtp.
 
  Currently I am using qmail, vpopmail, courier-imap.
 
  Thanks!
 
  __
  Kris Mach.
 
 






Re: Is there a way to make imap before smtp just like popbeforesmtp?

2001-02-25 Thread Bill Shupp

on 2/25/01 6:13 PM, Kris von Mach at [EMAIL PROTECTED] wrote:

 Hrm, it is not working for me, am I missing some switch somewhere?
 
 I am running vpopmail 4.9.8-1 and courier-imap 1.3.4 and qmail 1.03.
 
 I am using qmail's pop3d and pop3 before smtp works just fine. But imap
 before smtp doesn't work. I did follow the vpopmail's FAQ and pop3 works
 great, and I just assumed imap worked as well, until I checked it, and found
 out that it doesn't work.
 
 __
 Kris Mach

I've only used this with the tcp.smtp and open-smtp files in ~vpopmail/etc,
although it really shouldn't matter.  As long as your tcpserver and
couriertcpd have write privileges for the open-smtp file, it should work.

I also run couriertcpd as vpopmail.vchkpw now so that it doesn't change the
ownership of open-smtp to root.root.  Might try that too.. (you'll need to
edit the rc file that calls couriertcpd).

-Bill




Re: Is there a way to make imap before smtp just like popbeforesmtp?

2001-02-25 Thread Kris von Mach

My tcp.smtp file is in ~vpopmail/etc, but I use mysql as the userdb, so I
also have a relay table which stores the current allowable ip's for smtp
relay. I am not sure if couriertcpd being run under vpopmail.vchkpw would
solve the problem, since it's ran under root and if root can't update the
file/table/whatever, than under vpopmail.vchkpw it wouldn't be able to
either...

Pop3 before smtp does infact update the relay table and the user is able to
use the smtp for relay.
IMAP before smtp doesn't update the relay table, so the user is not able to
use the smtp for relay...

Any suggestions are really appriciated.

Thanks!

__
Kris Mach.

- Original Message -
From: "Bill Shupp" [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Sunday, February 25, 2001 7:36 PM
Subject: Re: Is there a way to make imap before smtp just like
popbeforesmtp?


 on 2/25/01 6:13 PM, Kris von Mach at [EMAIL PROTECTED] wrote:

  Hrm, it is not working for me, am I missing some switch somewhere?
 
  I am running vpopmail 4.9.8-1 and courier-imap 1.3.4 and qmail 1.03.
 
  I am using qmail's pop3d and pop3 before smtp works just fine. But imap
  before smtp doesn't work. I did follow the vpopmail's FAQ and pop3 works
  great, and I just assumed imap worked as well, until I checked it, and
found
  out that it doesn't work.
 
  __
  Kris Mach

 I've only used this with the tcp.smtp and open-smtp files in
~vpopmail/etc,
 although it really shouldn't matter.  As long as your tcpserver and
 couriertcpd have write privileges for the open-smtp file, it should work.

 I also run couriertcpd as vpopmail.vchkpw now so that it doesn't change
the
 ownership of open-smtp to root.root.  Might try that too.. (you'll need to
 edit the rc file that calls couriertcpd).

 -Bill






Re: Is there a way to make imap before smtp just like pop beforesmtp?

2001-02-25 Thread fox

I've got the exact same problem, and I can't make it work either.

Vpopmail 4.9.7
Courier IMAP 1.3.1

Any suggestions?

Cheers,

Tren.

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
- Tren Blackburn - Ownermailto:[EMAIL PROTECTED]  =
= End of Time Networks  http://www.theendoftime.net  -
- (403) 269-2122 =
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-

On Sun, 25 Feb 2001, Kris von Mach wrote:

 Hrm, it is not working for me, am I missing some switch somewhere?

 I am running vpopmail 4.9.8-1 and courier-imap 1.3.4 and qmail 1.03.

 I am using qmail's pop3d and pop3 before smtp works just fine. But imap
 before smtp doesn't work. I did follow the vpopmail's FAQ and pop3 works
 great, and I just assumed imap worked as well, until I checked it, and found
 out that it doesn't work.

 __
 Kris Mach

 - Original Message -
 From: "Bill Shupp" [EMAIL PROTECTED]
 To: "Kris von Mach" [EMAIL PROTECTED]
 Sent: Sunday, February 25, 2001 5:00 PM
 Subject: Re: Is there a way to make imap before smtp just like pop
 beforesmtp?


  This has been in place for a few versions.  Make sure that you're running
  the latest stable releases of vpopmail and courier-imap.
 
  -Bill
 
  on 2/25/01 3:43 PM, Kris von Mach at [EMAIL PROTECTED] wrote:
 
   Hi,
  
   I was wondering if there is a patch or something to allow imap before
 smtp
   authentication for roaming access, just like the pop before smtp.
  
   Currently I am using qmail, vpopmail, courier-imap.
  
   Thanks!
  
   __
   Kris Mach.
  
  
 
 






Re: Is there a way to make imap before smtp just like popbeforesmtp?

2001-02-25 Thread Bill Shupp

on 2/25/01 10:57 PM, [EMAIL PROTECTED] at [EMAIL PROTECTED] wrote:

 I've got the exact same problem, and I can't make it work either.
 
 Vpopmail 4.9.7
 Courier IMAP 1.3.1
 
 Any suggestions?
 
 Cheers,
 
 Tren.


Must be just with MySQL auth.  It works great for me with cdb.

-Bill