We are doing just that using the alias feature discussed in the
knowledgebase at Ipswitch (Document ID IM-19991019-DM01). Our ASP sends an
email to the alias which in turn creates the new user (the alias is an
obscure name). We have tested this extensively and it works. We have noted
that the server takes about two minutes to complete the process. We are
currently working to resolve another related issue. This issue is we want to
have the same ASP send a welcome email to the new user. So far we've found
that the ASP action is to fast and we get an unknown user error. We're
looking for a way to delay the message delivery so the server can catch up.
Any body got any ideas?

Terry


-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Norman J. Nolasco
Sent: Wednesday, April 10, 2002 9:25 AM
To: [EMAIL PROTECTED]
Subject: RE: [IMail Forum] asp pages

If you're running SQL for your user database, it's pretty easy.  Just
add a user to the user table.  If you're using the registry for your
user database, you can either write a COM object to add the user into
the registry or you can use the ASP WSScript object to run the adduser.exe
command line exec.  If you don't want to mess with your registry (I would
probably mess something up), then the WSScript object might be your best
bet.  I'm just not sure how secure your application would be if one of
your ASP pages opened up an object that could potentially run any .exe
or .bat on your server.

Here's another problem that I just found out about yesterday.  If your
login screen is also on that other server, you may have a few security
holes.  Your username and password are stored in a cookie whenever you
log out (regardless of what checkboxes you check on the login screen).
These are written from, say, mail.domain.com where IMAIL resides.  If
you use the default templates, the login.html page DELETES the cookies
BEFORE you log in.  This assumes that your login page is at mail.domain.com.

If your login page is on www.domain.com, those cookies don't get deleted.
Script on www.domain.com doesn't have permissions to touch cookies on
mail.domain.com!!! Why is this significant?

Because when you view email messages using the
IMail web interface, any javascript included in any email messages is
executed in your browser.  This javascript can easy take the UNDELETED
cookies with your username and password and send them to another web
site.  Essentially, the cookie delete functions on the login page need
to be moved to the menu.html page if you're going to have your login
page on a different domain.

-Norm

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of
[EMAIL PROTECTED]
Sent: Wednesday, April 10, 2002 7:03 AM
To: [EMAIL PROTECTED]
Subject: [IMail Forum] asp pages


I want to know if there is a way to create a asp page and have it
running on a website independent of the imail server and have it create
new email address through the imail server?

Thank you,
Brian Mason
[EMAIL PROTECTED]
www.abbeycomputers.com



Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/

Please visit the Knowledge Base for answers to frequently asked
questions:  http://www.ipswitch.com/support/IMail/


Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/

Please visit the Knowledge Base for answers to frequently asked
questions:  http://www.ipswitch.com/support/IMail/


Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/

Please visit the Knowledge Base for answers to frequently asked
questions:  http://www.ipswitch.com/support/IMail/

Reply via email to