Package: uw-imapd
Version: 7:2002edebian1-6
Severity: serious
Justification: Policy 10.7.3
Ref also bug 190314 . Sorry if the Justification tag is wrong, but I
suspect it's related to that section. uw-imapd-ssl.postinst under sarge
clobbers my sysadmin's /etc/inetd.conf line:
#imaps stream tcp nowait root /usr/sbin/tcpd /usr/sbin/imapd
# Removed tcpd from imaps so I can limit imapd to localhost for webmail
imaps stream tcp nowait root /usr/sbin/imapd
This last upgrade changed the imaps line to:
imaps stream tcp nowait root /usr/sbin/tcpd /usr/sbin/imapd
possibly as a result of DEBIAN/postinst:
in `echo "$RET" | sed 's/,/ /g'`; do
...
elif [ "$i" = "imaps" ]; then
update-inetd --group mail --add "imaps stream tcp nowait root
/usr/sbin/tcpd /usr/sbin/imapd";
fi
done
and screwed up local imaps access (via pine and squirrelmail) to the SSL imapd
server. I suspect upgrades aren't supposed to clobber existing lines in
the inetd.conf, so I'm not sure what happened here.
Thanks,
Krishna Sethuraman
P.S. He enables imapd (non-SSL) in /etc/hosts.allow for localhost clients
(squirrelmail, in this case) to connect localhost's imapd, but needs to have
imaps available to the outside world. Since imapd and imaps run through
the same daemon, one protocol needs to be run from inetd via tcpd and the
other one not.
If you think this should be set up in a different way let me know, but I
still suspect the postinst script should catch this case and deal with
it properly -- since I think it would be a fairly standard setup (imapd
for outside mail clients, imapd for squirrelmail).
-- System Information:
Debian Release: 3.1
APT prefers testing
APT policy: (500, 'testing')
Architecture: i386 (i586)
Kernel: Linux 2.4.18-bf2.4
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968) (ignored: LC_ALL set to C)
Versions of packages uw-imapd depends on:
ii debconf 1.4.30.11 Debian configuration management sy
ii libc-client2002edebian 7:2002edebian1-6 UW c-client library for mail proto
ii libc6 2.3.2.ds1-20 GNU C Library: Shared libraries an
ii libcomerr2 1.35-6 The Common Error Description libra
ii libkrb53 1.3.6-1 MIT Kerberos runtime libraries
ii libpam-runtime 0.76-22 Runtime support for the PAM librar
ii libpam0g 0.76-22 Pluggable Authentication Modules l
ii libssl0.9.7 0.9.7e-2 SSL shared libraries
ii openssl 0.9.7e-2 Secure Socket Layer (SSL) binary a
-- debconf information:
* uw-imapd/protocol: imap2, imaps
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
