Well, I had already fooled around with submit.mc, but on your suggestion I tried it again--but with no success. I added the following line to submit.mc:
define(`confTRUSTED_USER', `johnsig')dnl
then did make, and from my johnsig shell, did the following:
/usr/sbin/sendmail [EMAIL PROTECTED] johnsig <msg
but alas! I {still} get the X-Authentication-Warning message
saying that johnsig used -f.Maybe there's some kind of PAM issue lurking here?
Anyway, to solve the immediate problem, I just installed sudo, added "apache" to the list of sudoers, giving it NOPASSWD:/usr/sbin/sendmail permission, and then edited the CGI script, adding sudo before the sendmail command. It is admittedly less secure, but my CGI can only be run by users who have been authenticated over SSL. But if you think this is a really bad idea, please let me know.
--John Sigerson
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
John Sigerson <[EMAIL PROTECTED]> wrote:
X-Authentication-Warning: eirweb2.chvlva.adelphia.net: apache set sender to [EMAIL PROTECTED] using -f
The docs indicate that "apache" needs to be added as a "trusted user", and so I added "apache" to /etc/mail/trusted-users; added FEATURE(`use_ct_file')dnl to /etc/mail/sendmail.mc, did make, and restarted sendmail. (For testing, I also did not include authwarnings as one of the privacy flags.)
But still, this pesky X-Authentication-Warning will not go away!
You also need to edit submit.mc to add the trusted user feature.
Yours sincerely,
- -- Mark Suter <[EMAIL PROTECTED]> | I have often regretted my Miju Systems - http://www.miju.com.au/ | speech, never my silence. mobile 0411 262 316 gnupg key 2C71D63D | Xenocrates (396-314 B.C.)
--
+-----------------------------------------------------------+
| John Sigerson |
| EIR News Service, Inc. E-mail: [EMAIL PROTECTED] |
| 60 Sycolin Road Voice: 703-777-9451 x543 |
| Leesburg, VA 20175 Fax: 703-771-3099 or 771-9492 |
| USA Web: http://www.larouchepub.com | +-----------------------------------------------------------+

