Just my 5 ITL contribute.
Reading README file of checkpasswordnt (from tar downloaded from qmail
site), I see:
> MSNT Auth v1.1
> Squid web proxy Authentication module
> Antonino Iannella, Stellar-X Pty Ltd
> Mon Apr 10 22:47:33 CST 2000
> _____________________________________
>
> This is a simple authentication module for the Squid proxy server to
> authenticate users on an NT domain.
>
> It originates from the Samba and SMB packages by Andrew Tridgell
> and Richard Sharpe. This version is sourced from the Pike
> authentication module by William Welliver ([EMAIL PROTECTED]).
>
> Usage is simple. It accepts a username and password on standard input
> and will return OK if the username/password is valid for the domain,
> or ERR if there was some problem.
>
What I read in www.qmail.org about checkpassword is different:
>
> qmail-popup and qmail-pop3d are glued together by a program called
checkpassword.
> It's run by qmail-popup, reads the username and password handed to the
POP3 daemon,
> looks them up in /etc/passwd, verifies them, switches to the
username/home directory,
> and runs pop3d. At least that's what the standard one does. Some
alternatives are listed below.
>
If what I read it true, checkpasswordnt is not good for qmail-pop3d.
Tonino
At 11/05/2001 11/05/2001 +0200, you wrote:
>Hi there,
>
>I've posted some messages concerning this strange "pop3 connection reset
>after 1 minute". I just discovered the reason for the problem, but I still
>don't have a solution.
>
>I'm using "checkpasswordnt" for my authentication issues (so that all users
>can be authenticated with our NT PDC). I just changed this back to the
>normal checkpassword program and tried again with an appropriate account.
>Now it works. No connection reset, nothing. So checkpasswordnt seems to make
>problems.
>
>But, as I understand, checkpassword is only used to authenticate the
>connection in the first place. After that it's not accessed again? There
>seems to be some kind of timeout after one minute, but where?
>
>This is the ps aux output while running a pop3 session:
>
>root 6176 0.0 0.2 1224 344 pts/0 S 11:43 0:00
>/var/qmail/bin/qmail-popup wetzel-office.com /bin/checkpasswordnt
>/var/qmail/bin/qmail-pop3d Maildir
>jhassler 6177 0.0 0.3 1236 396 pts/0 S 11:43 0:00
>/var/qmail/bin/qmail-pop3d Maildir
>
>
>One thing to mention: I certainly don't like this NT authentication stuff,
>but in this environment its needed at the moment (can't change it).
>
>Sorry for not mentioning checkpasswordnt in the first place, but I thought
>this would be the last place the problem could occur.
>
>I tried several things. tcpdump output is not very helpful. After the
>initial authentication packets there is a "NBT Session Keepalive" packet
>after 20 seconds. After this packet there is no other traffic to or from the
>NT server. I thought there would be something after exactly 60 seconds, but
>there is nothing. I'm also confused about this Keepalive packet, because the
>session should end after the first authentication transfers, shouldn't it?
>
>Strange, again: I use this "Mrs. Brisby" version of qmail-smtpd together
>with checkpasswordnt to implement "SMTP AUTH". This works without any
>problems. The same packets are travelling through the cable, there is also
>this Keepalive packet, but the connection is not reset after 60 seconds.
>
>So there seems to be something about checkpasswordnt qmail-pop3d or
>qmail-popup don't like. Maybe an Anti-M$-check :-)
>
>If anyone on this list is also using checkpasswordnt and doesn't have this
>problem then the NT server is the "evil box". That's nothing new, indeed,
>but this would be off-topic for this list.
>
>I'll further try finding a solution, maybe someone of you has a clue where
>the problem might be.
>
>Some day... I'll throw these NT things out. Certainly.
>
>
>Thanks again for your help, I really appreciate it.
>Jens
