> Paul Lesniewski wrote:
>
>>On 4/20/06, Geoff Soper <[EMAIL PROTECTED]> wrote:
>>
>>
>>>I'm in the process of setting up a web server with Squirrelmail. This
>>>server is a virtualised server running FC3 and Plesk. I have a number of
>>>domains hosted on the server and have set it up so that a directory on
>>>each domain actually serves up the same Squirrelmail installation. As
>>>each domain has what appears to be a unique mail server I want each
>>>domain's Squirrelmail to use that domain's mail server. I understand the
>>>Vlogin and Multilogin plugins are the way to achieve this. I've
>>>installed Vlogin and have installed the patch in Multilogin (but not
>>>installed the plugin). In the Vlogin config.php I've added the array
>>>below as well as setting   $useSessionBased = 1;
>>>
>>> $virtualDomains = array(
>>>
>>>
>>>       'toussaintclarke' => array(
>>>           'domain'                 => 'toussaintclarke.co.uk',
>>>           'imapServerAddress'      => 'mail.toussaintclarke.co.uk',
>>>           'imapPort'               => '143',
>>>       ),
>>>
>>>       'alliemills' => array(
>>>           'domain'                 => 'alliemills.me.uk',
>>>           'imapServerAddress'      => 'mail.alliemills.me.uk',
>>>           'imapPort'               => '143',
>>>       )
>>>
>>>
>>
>>Looks like you're on track.  What version of SM are you using?
>>
>>
>>
> 1.4.6, fresh install with no other plugins
>
>>
>>
>>>However now each domain's Squirrelmail now serves two completely blank
>>>pages in the left and right frames after logging in.
>>>
>>>I can't see what I've done wrong and don't have any idea how to best go
>>>about diagnosing this problem.
>>>
>>>
>>
>>Blank pages mean PHP errors.  See posting guidelines, section three
>>for this mailing list for info about how to increase PHP verbosity or
>>get what you need from your web logs.
>>
>> -paul
>>
>>
> Right, sorry for not doing that already! Looking in the error logs I see:
>
> [client 212.183.136.192] PHP Warning:  main(): SAFE MODE Restriction in
> effect.  The script whose uid is 1000 is not allowed to access
> ../plugins/multilogin/functions.php owned by uid 0 in
> /var/www/vhosts/alliemills.me.uk/httpsdocs/squirrelmail-1.4.6/include/validate.php
> on line 55, referer:
> https://alliemills.me.uk/squirrelmail-1.4.6/src/webmail.php
> [client 212.183.136.192] PHP Warning:
> main(../plugins/multilogin/functions.php): failed to open stream:
> Success in
> /var/www/vhosts/alliemills.me.uk/httpsdocs/squirrelmail-1.4.6/include/validate.php
> on line 55, referer:
> https://alliemills.me.uk/squirrelmail-1.4.6/src/webmail.php
> [client 212.183.136.192] PHP Warning:  main(): Failed opening
> '../plugins/multilogin/functions.php' for inclusion
> (include_path='.:/usr/share/pear') in
> /var/www/vhosts/alliemills.me.uk/httpsdocs/squirrelmail-1.4.6/include/validate.php
> on line 55, referer:
> https://alliemills.me.uk/squirrelmail-1.4.6/src/webmail.php
> [client 212.183.136.192] PHP Fatal error:  Call to undefined function:
> multilogin_sqoverride_config_do() in
> /var/www/vhosts/alliemills.me.uk/httpsdocs/squirrelmail-1.4.6/include/validate.php
> on line 56, referer:
> https://alliemills.me.uk/squirrelmail-1.4.6/src/webmail.php
>
> It looks like the issue is one of which user the script is running as. I
> can make it work by turning off PHP's safe mode. However I'd rather fix
> this properly. At the moment Squirrelmail is installed as root. Grepping
> /etc/passwd for 1000 I don't see any users with the UID of 1000:
>
> [EMAIL PROTECTED] etc]# grep 1000 /etc/passwd
> allie:x:10001:10001::/var/www/vhosts/alliemills.me.uk:/bin/sh
> toussaint:x:10002:10001::/var/www/vhosts/toussaintclarke.co.uk:/bin/false
>
> Also, if I put getmyuid() and get_current_user() in a PHP file in the
> same directory I get 0 and root respectively which suggests the script
> runs as the same user (root) as I installed SM and the plugins as.
>
> Can anyone explain what is going on here and what I should do to install
> SM in the 'best' way possible?

When you have PHP safe_mode turned on, interpreter checks owner of all
opened files and owner of executed script. If owners do not match and even
directory owner does not match executed script owner, access to file is
denied.

You have mixed setup. Some files are installed by root and some are
installed by unprivileged user. If you unpack plugin as root, add
--no-same-owner option to tar call or chown files after unpacking them. If
SquirrelMail is installed not by root user, install plugins as same user
or chown plugin files after installing them as root.

If you have to work with PHP safe mode, you must read PHP manual chapter
about safe mode (http://www.php.net/features.safe-mode).

-- 
Tomas


-------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
--
squirrelmail-users mailing list
Posting Guidelines: 
http://www.squirrelmail.org/wiki/MailingListPostingGuidelines
List Address: [email protected]
List Archives: 
http://news.gmane.org/thread.php?group=gmane.mail.squirrelmail.user
List Archives:  http://sourceforge.net/mailarchive/forum.php?forum_id=2995
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-users

Reply via email to