----- Original Message ----- 
From: "Andrea Riela" <[EMAIL PROTECTED]>

> I've recompiled courier-2.2.1 and qmailadmin-1.2.0-rc2
> Steps for courier (as root):
> ./configure --prefix=/usr/local/courier-imap --disable-root-check
> --without-authpam --without-authldap --without-authpwd --without-authmysql
> --without-authpgsql --without-authshadow --without-authuserdb
> --without-authcustom --without-authcram --without-authdaemon
> --with-authvchkpw --with-ssl --with-piddir=/var/run
> setenv CFLAGS="-DHAVE_OPEN_SMTP_RELAY"
> gmake
> gmake install
> gmake install-configure

> When I try with courier (that uses libvpopmail.a, if
> I've undestood well), in my open-smtp, after pop3-ssl, there isn't my
> external IP with relay allowed.

It is my understanding that
   setenv CFLAGS="-DHAVE_OPEN_SMTP_RELAY"
is not sufficient to enable the roaming user functionality in courier-imap.

Instead you need to edit the file
  authlib/preauthvchkpw.c
and remove the line  :
  #undef HAVE_OPEN_SMTP_RELAY
and then recompile courier-imap

This roaming user functionality was hardcoded off on purpose,
because there is a flaw in the current design. If you enable roaming users
in courier, then any user will be able to relay after performing an auth
attempt, regardless of whether the auth contained a valid username/password.

I have been doing some work on the vpopmail code that comes with
courier. The work fixes many problems including this particular bug.
I have recently submitted this patch to the courier author, and hopefully
they will include these updates in a forthcoming courier release.

ref
<http://sourceforge.net/tracker/index.php?func=detail&aid=796524&group_id=85
937&atid=577801>

Michael.

Reply via email to