Re: vpopmail 5.0pre1

2001-09-07 Thread lao nightwolf
Hello Ken,   Thanx it works now, unbelievable ;)) !   We had to fill in "" in 'pw_passwd' and the 'pw_dir' field..  When there was NULL in both fields or in one of them it still crashed or it said authentication failure..   Thanks for all the help you offered us with this feature.   Cheers, lao    - Original Message - From: Ken Jones Sent: Thursday, September 06, 2001 5:03 PM To: lao nightwolf Cc: [EMAIL PROTECTED] Subject: Re: vpopmail 5.0pre1  On Thu, 2001-09-06 at 02:12, lao nightwolf wrote:> Hello,>> We've installed vpopmail 5.0pre1 so that we have the possibility to add no> password.>> However, adding a record with an empty password field returned an error> since the table definition doesn't allow null values by default. We have> changed this so that nulls for the password field can be added, so that we> could succesfully add a new record. However we now receive the following> error during logon: 'ERR aack, child crashed'. Do we need to specify a> specific value for the password field, since it doesn't allow nulls by> default?Please do not modify the table definition.>> Normally, it should ask for a password when first authenticating via pop3> right?Set the password field to a blank string "", not a NULL.with vpopmail-5.0pre3, use the --enable-learn-passwords=yoption.With this option, vchkpw will accept any password for anaccount with a blank password. Then it will update theauthentication data to have this new password. It onlydoes this if the password field is blank. Once the passwordfield is not blank it won't do this. So it only does itthe first time.Also, the vadduser command takes a -n option to set theusers password to blank.Please download and test the vpopmail-5.0pre3 versionand test it to see if you can cause it to crash. Pleasetry it with your modified table (allow NULL), and thentry it with the orignal table definition. I want tosee if you can still crash vchkpw.Ken JonesGet more from the Web.  FREE MSN Explorer download : http://explorer.msn.com


Re: vpopmail 5.0pre1

2001-09-06 Thread Ken Jones

On Thu, 2001-09-06 at 02:12, lao nightwolf wrote:
> Hello,
> 
> We've installed vpopmail 5.0pre1 so that we have the possibility to add no 
> password.
> 
> However, adding a record with an empty password field returned an error 
> since the table definition doesn't allow null values by default. We have 
> changed this so that nulls for the password field can be added, so that we 
> could succesfully add a new record. However we now receive the following 
> error during logon: 'ERR aack, child crashed'. Do we need to specify a 
> specific value for the password field, since it doesn't allow nulls by 
> default?

Please do not modify the table definition.

> 
> Normally, it should ask for a password when first authenticating via pop3 
> right?

Set the password field to a blank string "", not a NULL. 
with vpopmail-5.0pre3, use the --enable-learn-passwords=y
option.

With this option, vchkpw will accept any password for an
account with a blank password. Then it will update the
authentication data to have this new password. It only
does this if the password field is blank. Once the password
field is not blank it won't do this. So it only does it
the first time. 

Also, the vadduser command takes a -n option to set the
users password to blank. 

Please download and test the vpopmail-5.0pre3 version
and test it to see if you can cause it to crash. Please
try it with your modified table (allow NULL), and then
try it with the orignal table definition. I want to
see if you can still crash vchkpw.

Ken Jones






vpopmail 5.0pre1

2001-09-05 Thread lao nightwolf

Hello,

We've installed vpopmail 5.0pre1 so that we have the possibility to add no 
password.

However, adding a record with an empty password field returned an error 
since the table definition doesn't allow null values by default. We have 
changed this so that nulls for the password field can be added, so that we 
could succesfully add a new record. However we now receive the following 
error during logon: 'ERR aack, child crashed'. Do we need to specify a 
specific value for the password field, since it doesn't allow nulls by 
default?

Normally, it should ask for a password when first authenticating via pop3 
right?

cheers,
lao


_
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp




Re: vpopmail-5.0pre1

2001-09-04 Thread Bill Shupp

on 9/4/01 6:27 PM, Vladimir Kabanov at [EMAIL PROTECTED] spake:

> Good day friends!
> 
> of course thats not completing SMTP blocks,
> its just a possibility to disable user from sending to someone else using  our
> protected smtp-server.
> 
> I guess there also could be such possibility as block on vdeliver level...
> but...  dont think its good decision, as we will lost contact with that
> user... or...  maybe enable smtp delivery from admin stuff?
> this a little better.
> 
> to Bill and Ken:
> why cant u contact me for additional info what have been done to vpopmail
> modules
> in order to implement it faster? I guess it will be a little easier way to
> work on  :)
> 
> Waiting for news from you.

Vladimir,

I wasn't intending to merge all of your changes, as I figured Inter7 would
want to do that to be sure of any design issues.  I was just personally
interested in the NO_SMTP gid flag for my system.

I'm certainly not against any of your changes.  While can't speak for them,
I think the easiest thing for Inter7 would be for you to provide any
additional info you have on your modifications, as well as a patch against
the current dev release, as your changes seem pretty substantial.

Cheers!

Bill




Re: vpopmail-5.0pre1

2001-09-04 Thread Vladimir Kabanov

> SMTP blocking (via vmoduser) is something I wouldn't mind seeing in 5.0..  I
> just implemented smtp auth in production, and could use that sooner than
> later.  ; )   If I get time today, I'll try to extract those changes from
> Vladimir's code and submit it as a patch to 5.0pre1.
> 
> Cheers,
> 
> Bill Shupp

Good day friends!

of course thats not completing SMTP blocks, 
its just a possibility to disable user from sending to someone else using  our 
protected smtp-server.

I guess there also could be such possibility as block on vdeliver level...
but...  dont think its good decision, as we will lost contact with that user... or...  
maybe enable smtp delivery from admin stuff?
this a little better.

to Bill and Ken:
why cant u contact me for additional info what have been done to vpopmail modules
in order to implement it faster? I guess it will be a little easier way to work on  :)

Waiting for news from you.

Vladimir Kabanov.



Re: vpopmail-5.0pre1

2001-09-04 Thread Bill Shupp

on 9/4/01 12:09 PM, Bill Shupp at [EMAIL PROTECTED] spake:

> SMTP blocking (via vmoduser) is something I wouldn't mind seeing in 5.0..  I
> just implemented smtp auth in production, and could use that sooner than
> later.  ; )   If I get time today, I'll try to extract those changes from
> Vladimir's code and submit it as a patch to 5.0pre1.


Ok, I've been working on this but can't get it right yet.  The
vmoduser/vuserinfo stuff was easy to adapt.  But Vladimir's version uses a
lot of new stuff to determine what service is calling vchkpw.  I ended up
bringing a lot of his code into 5.0.

Anyway, it doesn't work yet, and I can't work on it anymore today.  I've
posted a patch (against 5.0pre1) of where I'm at, if anyone wants to look at
it.  It's pretty close, probably.  ; )

To apply:

cd vpopmail-5.0pre1
lynx --source http://shupp.org/patches/vpopmail-5.0p1-nosmtp.patch.gz |
patch -p0
./configure
make
make install-strip

Cheers,

Bill Shupp




Re: vpopmail-5.0pre1

2001-09-04 Thread Bill Shupp

on 9/4/01 12:08 PM, Ken Jones at [EMAIL PROTECTED] spake:

> On Tue, 2001-09-04 at 11:31, Vladimir Kabanov wrote:
>>> Hi Folks,
>>> 
>>> The summer is over (here in the US) and it's time we have a new
>>> vpopmail-5.0 release to start the year out right.
>>> 
>>> I do not want to add in any new features which require a new
>>> round of testing. Any new features can be added to 5.1 (devel version)
>>> and later released as a production version 5.2.
>>> 
>>> So I would like to release vpopmail-4.10.36 as vpopmail-5.0pre1.
>>> 
>>> The two features I would like to put in the 5.1 devel version
>>> are Vlad's new auth code for
>>> pop3 capa
>>> pop3 auth login & cram-md5
>>> smtp auth login & cram-md5
>>> pop3 APOP.
>>> 
>>> 
>>> What do you folks think?

Sounds like a good plan to me.

What's up with qmailadmin?

>> and SMTP-blocking for certain users?
>> these features already done too  :))
> 
> That sounds like a good feature too.

SMTP blocking (via vmoduser) is something I wouldn't mind seeing in 5.0..  I
just implemented smtp auth in production, and could use that sooner than
later.  ; )   If I get time today, I'll try to extract those changes from
Vladimir's code and submit it as a patch to 5.0pre1.

Cheers,

Bill Shupp




Re: vpopmail-5.0pre1

2001-09-04 Thread Ken Jones

On Tue, 2001-09-04 at 11:07, Einar Bordewich wrote:
> - Original Message -
> From: "Ken Jones" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Tuesday, September 04, 2001 5:42 PM
> Subject: vpopmail-5.0pre1
> 
> 
> > Hi Folks,
> >
> > The summer is over (here in the US) and it's time we have a new
> > vpopmail-5.0 release to start the year out right.
> >
> > I do not want to add in any new features which require a new
> > round of testing. Any new features can be added to 5.1 (devel version)
> > and later released as a production version 5.2.
> >
> > So I would like to release vpopmail-4.10.36 as vpopmail-5.0pre1.
> >
> > The two features I would like to put in the 5.1 devel version
> > are Vlad's new auth code for
> > pop3 capa
> > pop3 auth login & cram-md5
> > smtp auth login & cram-md5
> > pop3 APOP.
> >
> > And Enar's vaddaliasdomain code.
> 
> Ken,
> I'm willing to take the credit for pushing through the handling of
> virtualdomains, but please give Gabriel credit for the acctual and nice
> coding ;-)

Hehe, Sorry about that. 

Ken





Re: vpopmail-5.0pre1

2001-09-04 Thread Ken Jones

On Tue, 2001-09-04 at 11:55, sec wrote:
> Hello ,
> 
> It will be great if you will add spam blocking for certain users.
> 
> I mean black-lists for certain users.
> 

we are working on a new filtering project
http://www.inter7.com/eps/
That should be the building block for
filtering on a site/domain and user basis.

Ken





Re: vpopmail-5.0pre1

2001-09-04 Thread Ken Jones

On Tue, 2001-09-04 at 11:31, Vladimir Kabanov wrote:
> > Hi Folks,
> >
> > The summer is over (here in the US) and it's time we have a new
> > vpopmail-5.0 release to start the year out right.
> >
> > I do not want to add in any new features which require a new
> > round of testing. Any new features can be added to 5.1 (devel version)
> > and later released as a production version 5.2.
> >
> > So I would like to release vpopmail-4.10.36 as vpopmail-5.0pre1.
> >
> > The two features I would like to put in the 5.1 devel version
> > are Vlad's new auth code for
> > pop3 capa
> > pop3 auth login & cram-md5
> > smtp auth login & cram-md5
> > pop3 APOP.
> >
> >
> > What do you folks think?
> >
> > Ken Jones
> 
> 
> 
> Ken, sounds fine!
> 
> but what about alternative way of password hashes storing, I mean SHA-1 (i
> guess almost all LDIF exports use this format)?
> and SMTP-blocking for certain users?
> these features already done too  :))

That sounds like a good feature too.

Ken





Re: vpopmail-5.0pre1

2001-09-04 Thread sec

Hello ,

It will be great if you will add spam blocking for certain users.

I mean black-lists for certain users.



  

-- 
Best regards,
 Yuri  mailto:[EMAIL PROTECTED]




Re: vpopmail-5.0pre1

2001-09-04 Thread Vladimir Kabanov

> Hi Folks,
>
> The summer is over (here in the US) and it's time we have a new
> vpopmail-5.0 release to start the year out right.
>
> I do not want to add in any new features which require a new
> round of testing. Any new features can be added to 5.1 (devel version)
> and later released as a production version 5.2.
>
> So I would like to release vpopmail-4.10.36 as vpopmail-5.0pre1.
>
> The two features I would like to put in the 5.1 devel version
> are Vlad's new auth code for
> pop3 capa
> pop3 auth login & cram-md5
> smtp auth login & cram-md5
> pop3 APOP.
>
> And Enar's vaddaliasdomain code.
>
> What do you folks think?
>
> Ken Jones



Ken, sounds fine!

but what about alternative way of password hashes storing, I mean SHA-1 (i
guess almost all LDIF exports use this format)?
and SMTP-blocking for certain users?
these features already done too  :))

Best wishes!
Vladimir Kabanov.




Re: vpopmail-5.0pre1

2001-09-04 Thread Einar Bordewich

- Original Message -
From: "Ken Jones" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, September 04, 2001 5:42 PM
Subject: vpopmail-5.0pre1


> Hi Folks,
>
> The summer is over (here in the US) and it's time we have a new
> vpopmail-5.0 release to start the year out right.
>
> I do not want to add in any new features which require a new
> round of testing. Any new features can be added to 5.1 (devel version)
> and later released as a production version 5.2.
>
> So I would like to release vpopmail-4.10.36 as vpopmail-5.0pre1.
>
> The two features I would like to put in the 5.1 devel version
> are Vlad's new auth code for
> pop3 capa
> pop3 auth login & cram-md5
> smtp auth login & cram-md5
> pop3 APOP.
>
> And Enar's vaddaliasdomain code.

Ken,
I'm willing to take the credit for pushing through the handling of
virtualdomains, but please give Gabriel credit for the acctual and nice
coding ;-)

Sounds like a plan.
--

IDG New MediaEinar Bordewich
Development Manager  Phone: +47 2336 1420
E-Mail:  eibo(at)newmedia.no
Lat: 59.91144 N  Lon: 10.76097 E






vpopmail-5.0pre1

2001-09-04 Thread Ken Jones

Hi Folks,

The summer is over (here in the US) and it's time we have a new
vpopmail-5.0 release to start the year out right.

I do not want to add in any new features which require a new
round of testing. Any new features can be added to 5.1 (devel version)
and later released as a production version 5.2.

So I would like to release vpopmail-4.10.36 as vpopmail-5.0pre1.

The two features I would like to put in the 5.1 devel version
are Vlad's new auth code for
pop3 capa
pop3 auth login & cram-md5
smtp auth login & cram-md5
pop3 APOP.

And Enar's vaddaliasdomain code.

What do you folks think?

Ken Jones