The preauthvchkpw.c module needs to be modified. The problem is, when a user attempts to authenticate, if their user name exists on the system then it will open up relay. However, at that point in the code the user has not been authenticated. I attempted to fix this before but became confused on which function is called from what file. It's a bit obtuse for me.
an quick hack could be to verify the password at that point, then open up relay on a valid password. The real fix would be to trace the fucntions and open up relay after password verification. Perhaps someone could figure it out. Ken Jones On Thursday 11 September 2003 2:35 pm, Charles Sprickman wrote: > This is a good FAQ item, for when we have a FAQ. > > Mr. Sam has disabled the imap-before-smtp function in the authvchkpw code. > I've looked at the courier archives, and there's no explanation from him > as to what the problem is... Just lots of questions. :) > > Bill's suggestion might not work, as he "#undef"s the value. In your > courier source dir, go into the "authlib" dir and open "preauthvchkpw.c" > for editing. Look for a line like this: > > #undef HAVE_OPEN_SMTP_RELAY > > Go ahead and change that "#undef" to "#define" and it will work properly. > I can't comment on what the security concerns are, because I don't know > what they are. It does work however. > > Charles > > On Thu, 11 Sep 2003, ted wrote: > > I've got a LWQ-style qmail configuration, plus vpopmail 5.3.27 and > > courier-imap-2.1.1.20030902. I have roaming users enabled (as well as > > qmail-ext), and POP3 before SMTP works perfectly (using qmail-pop3d). > > > > IMAP also seems to work just fine, but it does not update open-smtp. My > > workaround of creating a separate POP account to POP in without > > retrieving msgs allows me to send via IMAP, but is obviously not an > > ideal solution. (I'm using Thunderbird .2). > > > > I've installed courier-imap numerous times (with different releases up > > to 20030902), both with authdaemon enabled as well as disabled. In both > > cases, the results are the same (meaning that I can read mail but not > > relay). > > > > Perhaps my understanding is wrong, but I was under the impression that > > since these are virtual domains I'm having trouble with (all my domains > > are virtual), the fact that I am able to read mail at all under IMAP > > would indicate that vchkpw is being called from courier-imap. Since > > qmail-pop3d invokes vchkpw and works, I'm puzzled. I'm afraid I don't > > know where to look log-wise. > > > > thanks for any hints. > > > > -ted
