On Thu, Jan 31, 2002 at 04:55:06PM -0800, Roger Thomas wrote:
> 
> --- Claudio Jeker <[EMAIL PROTECTED]> wrote:
>  
> > Just to be sure: you would like to fetch mail from different servers and
> > inject them into your local qmail-ldap system?
> 
> yes. yes.
> 
> when roger fetches his yahoo or whatever mail, those mails should be injected
> (by qmail) into /var/qmail/maildirs/roger/Maildir
> when bill fetches his msn mail, those mails should be injected into
> /var/qmail/maildirs/bill/Maildir
> ...
> ...
> 
OK, then we are talking about the same...

> > 
> > Is this on a per (virtual) user basis or done in an other way?
> 
> if it's on a per (virtual) basis, does it mean that roger's fetchmailrc resides
> in /var/qmail/maildirs/roger/.fetchmailrc? and bill's fetchmailrc in
> /var/qmail/maildirs/bill/.fetchmailrc ?
> 
This is up to you. I would use a special fetchmail user so that users can
not access the fetchmailrc directly (via cat or vi).
To modify the settings you need a special user interface which is setuid
fetchmail user. But as said this is just MHO.

> 
> > Next problem: to suck mails you need a cleartext password for every
> > session. IMHO to store cleartext password in a virtual user setup (all
> > user have the same UID) is ... let's say dangerous.
> > 
> > Here an example fetchmail rc file:
> > set syslog
> > poll mail.yahoo.com proto pop3 uidl timeout 30 user test1 pass "XXXX" forcecr
> > poll mail.blabla.com proto pop3 uidl timeout 30 user roger pass "blabla"
> > forcecr
> > poll mail.microsoft.com proto pop3 uidl timeout 30 user bill pass "gates"
> > forcecr
> > 
> > 
> 
> emmm, that looks very insecure. and surely this fetchmailrc resides in
> /var/qmail/maildirs/.fetchmailrc (vmail's home) wouldn't it? does this mean,
> it's *NOT* on per (virtual) user basis?
> 
As said befor it is up to you how to run fetchmail (just as a side note,
AFAIK you can only run one fetchmail concurrently per user, especially in
deamon mode).
The security problem comes also from the fact that every user needs to
store the password in cleartext so a pop3 or imap coonnection is
successful.

> 
> is/are there any *good* howto in doing this?

I always used the fetchmail manpage and did a lot of testing.
Until now there is no solution for your problem so you have to find one.

> i am bloody sure many have successfully implemented what i intend to do.
> 
> i have been spending more than 10 days to get this fetchmail thingy running. if
> conversing off the list (on this topic) is more appropriate, please let m know.
> i am waiting.
> 
I think is up to you now. You have to find out which sollution you like
best. (one rcfile or multiple ones, which user, ...)

good luck

-- 
:wq Claudio

Reply via email to