[courier-users] vulnerability of courier
Hello! What's about the following vulnerability described at SecurityFocus? http://online.securityfocus.com/bid/4908 with greetings from Germany Jörg Backschues --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ___ courier-users mailing list [EMAIL PROTECTED] Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
Re: [courier-users] vulnerability of courier
On Wed, 17 Jul 2002 05:34:13 +0200 Joerg Backschues [EMAIL PROTECTED] wrote: #Hello! # #What's about the following vulnerability described at SecurityFocus? # #http://online.securityfocus.com/bid/4908 # # From the solution link (http://online.securityfocus.com/bid/4908/solution/): This vulnerability has reportedly been fixed in the Courier CVS tree. -- Jesse Keating j2solutions.net Mondo DevTeam (www.mondorescue.org) Was I helpful? Let others know: http://svcs.affero.net/rm.php?r=jkeating --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ___ courier-users mailing list [EMAIL PROTECTED] Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
[courier-users] Re: vulnerability of courier
Jesse Keating writes: On Wed, 17 Jul 2002 05:34:13 +0200 Joerg Backschues [EMAIL PROTECTED] wrote: #Hello! # #What's about the following vulnerability described at SecurityFocus? # #http://online.securityfocus.com/bid/4908 # # From the solution link (http://online.securityfocus.com/bid/4908/solution/): This vulnerability has reportedly been fixed in the Courier CVS tree. This information is outdated. The fix is in the current released version. -- Sam --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ___ courier-users mailing list [EMAIL PROTECTED] Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
[courier-users] Re: making authdaemon not listen on wildcard address?
john slee writes: hi, i've got it all going nicely now with pgsql auth, on debian's testing tree, using the debian packages. wasn't hard at all. in the interests of security i've made imapd et al. listen on on 127.0.0.1, that's easy enough. apparently not so for authdaemon... any hints? Try to find the port that authdaemon is listening on. Here's the hint: you won't find it. authdaemon listens on a filesystem socket, not a TCP socket. Here's another hint: rather than make life difficult for people, use a separate subpackage that installs the entire IMAP service. People who need IMAP will simply install the subpackage. -- Sam --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ___ courier-users mailing list [EMAIL PROTECTED] Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
Re: [courier-users] Re: imap not detecting MAILDIR setting.
mrsam This is mostly for developers of custom authentication modules. Some of mrsam the stock authentication modules in Courier-IMAP are also capable of mrsam setting MAILDIR: authldap, authmysql, authpgsql, and authuserdb. That is, mrsam when using LDAP, MySQL, Postgres, or userdb authentication a non-default mrsam maildir location may be specified. There is no equivalent information mrsam available in /etc/passwd, hence modules that use the system password file mrsam (authpwd, authshadow, authpam), cannot set MAILDIR. Thank you sir. That is the explanation I needed. Updating the imap manpage with that paragraph above, in my opinion, would be a good thing. Andrew --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ___ courier-users mailing list [EMAIL PROTECTED] Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
[courier-users] setting maildir location for courier-imap
I have maildirs stored in /var/spool/mail (ex: /var/spool/mail/pippo/ for user pippo) How can I configure courier-imap to look in the correct path instead of home directories? --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ___ courier-users mailing list [EMAIL PROTECTED] Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
Re: [courier-users] setting maildir location for courier-imap
I have maildirs stored in /var/spool/mail (ex: /var/spool/mail/pippo/ for user pippo) How can I configure courier-imap to look in the correct path instead of home directories? I miss to say I need to use the PAM authentication module. --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ___ courier-users mailing list [EMAIL PROTECTED] Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
[courier-users] vclose() called too early in auth_vchkpw_pre()
Hi. I got these into my mysql log when users log in using courier-imap (one line for each login): 020717 13:43:57 Aborted connection 1099021 to db: 'vpopmail' user: 'sqladmin' host: `localhost' (Got an error reading communication packets) I use vpopmail to authenticate and authvchkpw as an authmodule. I think that this happens because authlib's auth_vchkpw_pre() calls vclose() too early. It closes after authentication, but still does open_smtp_relay() after that and so db is left open. So I moved call to vclose() few lines forward, after open_smtp_relay() and after that I haven't got Aborted connection ... failures into mysql log. -- / Tuomas Suutari | Mobile: +358 50 3806983 \ E-mail: [EMAIL PROTECTED] --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ___ courier-users mailing list [EMAIL PROTECTED] Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
[courier-users] Logs
Hello, i've just installed courier-imap. first i tried if it's work correctly i tested it from sylpheed-claws setting new account with IMAP. ok, it's work pretty good: My logs shows: Jul 17 11:52:54 wind imapd: Connection, ip=[:::MY_IP] Jul 17 11:52:54 wind imapd: LOGIN, user=pck, ip=[:::MY_IP] Then i tried to access my mails from our company intranet (from WWW): Jul 17 11:53:14 wind imapd: Connection, ip=[:::INTRANET_SERVER_IP] Jul 17 11:53:19 wind imapd: LOGIN FAILED, ip=[:::INTRANET_SERVER_IP] Jul 17 11:53:24 wind imapd: LOGIN FAILED, ip=[:::INTRANET_SERVER_IP] Jul 17 11:53:29 wind imapd: LOGIN FAILED, ip=[:::INTRANET_SERVER_IP] Jul 17 11:53:29 wind imapd: LOGOUT, ip=[:::INTRANET_SERVER_IP] Can i set courier-imap to log more detailed information? I want to see what courier-imap gets on login and password... TIA -- Przemysaw Ciesielski [http://missTCP.net/p] --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ___ courier-users mailing list [EMAIL PROTECTED] Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
Re: [courier-users] Logs
Crazy... did anyone else get this mail message as an enclosure with a generated CORRUPTED MESSAGE text as the actual email? I'm trying to figure out if it was my mail server that did this, or the list-serv mail server, or my email client. I've never before seen a message like this, so... I am baffled as its origin. The message is as follows: +++ CORRUPTED MESSAGE This is the Courier Mail Server 0.39. I received the following message for delivery to your address. Unfortunately, the sender's mail software did not properly format the following message according to Internet mail formatting protocols, and I can only deliver mail which has been properly formatted according to Internet standards. Instead of returning the following message as undeliverable, it is saved, in its original form, in the following attachment, which you can open with any editor or word processor. Please notify the original sender that their message was not properly formatted by their mail software. The specific mail protocol error in the original message is as follows: --- -- The mail headers in the following message contain 8-bit text, which is prohibited by RFC 2047. See URL:ftp://ftp.isi.edu/in-notes/rfc2047.txt for more information. --- -- +++ --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ___ courier-users mailing list [EMAIL PROTECTED] Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
[courier-users] Re: setting maildir location for courier-imap
Marco Polci writes: I have maildirs stored in /var/spool/mail (ex: /var/spool/mail/pippo/ for user pippo) How can I configure courier-imap to look in the correct path instead of home directories? I miss to say I need to use the PAM authentication module. You can't. -- Sam --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ___ courier-users mailing list [EMAIL PROTECTED] Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
RE: [courier-users] STMP authentication
But I want to authenticate users, when they send mail through my SMTP. I don't want to have open-relaying or set it per-IP. Why it says '535 Authentication required' when I have enabled authenticated smtp connection in my mail client ? Thanks. Karel - Original Message - From: Bill Michell To: 'Karel Jícha' ; [EMAIL PROTECTED] Sent: Wednesday, June 26, 2002 11:34 PM Subject: RE: [courier-users] STMP authentication Yes. AUTH_REQUIRED does what it says - it requires authorization for all users. Turn it off. --Bill Michell[EMAIL PROTECTED] -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Karel JíchaSent: 26 June 2002 20:24To: [EMAIL PROTECTED]Subject: [courier-users] STMP authentication Hi, I have problem with AUTH_REQUIRED placed in esmtd conf. file. I want to authenticate users, when they want to send mail through my SMTP server. When I set AUTH_REQUIRED=1 and try to send mail through it ( with enabled STMP autentication), it returns : '535 Authentication required'. Does anybody know, how to solve it ? Thanks in advance Karel Jicha Aponia Software CZ
[courier-users] Re: STMP authentication
Karel Jícha writes: But I want to authenticate users, when they send mail through my SMTP. I don't want to have open-relaying or set it per-IP. Why it says '535 Authentication required' when I have enabled authenticated smtp connection in my mail client ? Because you did not read the documentation. -- Sam --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ___ courier-users mailing list [EMAIL PROTECTED] Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
RE: [courier-users] Logs
Your mail server did it. I got the same message with an identification string for my mail server at the top. I think everyone on the list who has a courier mail server (which is probably just about everyone) will have gotten the same thing. Anyone know if there is a way to turn this off and just have Courier deliver the message normally? Bowie -Original Message- From: Randall Shaw [SMTP:[EMAIL PROTECTED]] Sent: Wednesday, July 17, 2002 10:19 AM To: [EMAIL PROTECTED] Subject: Re: [courier-users] Logs Crazy... did anyone else get this mail message as an enclosure with a generated CORRUPTED MESSAGE text as the actual email? I'm trying to figure out if it was my mail server that did this, or the list-serv mail server, or my email client. I've never before seen a message like this, so... I am baffled as its origin. The message is as follows: +++ CORRUPTED MESSAGE This is the Courier Mail Server 0.39. I received the following message for delivery to your address. Unfortunately, the sender's mail software did not properly format the following message according to Internet mail formatting protocols, and I can only deliver mail which has been properly formatted according to Internet standards. Instead of returning the following message as undeliverable, it is saved, in its original form, in the following attachment, which you can open with any editor or word processor. Please notify the original sender that their message was not properly formatted by their mail software. The specific mail protocol error in the original message is as follows: -- - -- The mail headers in the following message contain 8-bit text, which is prohibited by RFC 2047. See URL:ftp://ftp.isi.edu/in-notes/rfc2047.txt for more information. -- - -- +++ --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ___ courier-users mailing list [EMAIL PROTECTED] Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ___ courier-users mailing list [EMAIL PROTECTED] Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
[courier-users] Eurdora-Pop3 Problem (FIXED)
Hi courier-users, i use a courier-imap to pick up my mails from a postfix server. (Please don't hit my:-)). One of my users wants to use pop3 with eudora. I use pop3-ssl of course. But the user can only pickup 3 to 7 mails, after that the connections freez and after 1 minute or 2 eudora tells me the server timedout. plaintext pop3 works great, but no pop3-ssl. the fix, use the eudora Options category advanced Network to double the Network buffer size to 8192 bytes. Thats it. Maybe someone can put that in the FAQ. CU and thanks for courier-imap, maildrop and sqwebmail. Jens P.S.: Can someone explain to me why sqwebmail uses expect? I don't want to install xlibs and tcltk at my webserver! Please direct, no to the list! --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ___ courier-users mailing list [EMAIL PROTECTED] Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
[courier-users] COURIER IMAP UNDER LDAP
Hi all: I use qmail ldap in woody (Debian) and the system goes well, smtp and POP3. I need to install courier imap and I configure the authdaemonrc with authldap module. And in authldaprc file, I configure my ldap settings. When I try to login my email account, the system informs me login incorrect but I revise the syslog and the system says that the user (Id=0) and (Gid=0) nto autenticate. CAn you help me, pleasE? Do you have more information, thx? Thank very much. Ángel --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ___ courier-users mailing list [EMAIL PROTECTED] Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
Re: [courier-users] vulnerability of courier
On Wed, Jul 17, 2002 at 05:34:13AM +0200, Joerg Backschues wrote: Hello! What's about the following vulnerability described at SecurityFocus? http://online.securityfocus.com/bid/4908 this was acknowledged and patched by Sam a while ago.. -- /* Security is a work in progress - dreamwvr */ # # Note: To begin Journey type man afterboot,man help,man hier[.] # // Who's Afraid of Schrodinger's Cat? /var/(.)?mail/me \? ;-] --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ___ courier-users mailing list [EMAIL PROTECTED] Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
RE: [courier-users] STMP authentication
You have misunderstood something. AUTH_REQUIRED means that *all* mail passing through the server must be authenticated. Even stuff people on the outside internet send to your users. In general, this will stop outside people from sending you emails. AUTH_REQUIRED should only be used for certain very specific email configurations. You almost certainly want to turn it off. Don't worry about this turning your mail server into an open relay. By default, courier will not carry messages for anyone, unless something specifically permits it. The following things are examples of things that will permit messages to be carried: 1) Messages destined for users in your locals or hosteddomains file. 2) Messages from machines at IP addresses listed in your smtpaccess file 3) Messages from users who have authenticated. Note that authentication is allowed even if AUTH_REQUIRED is not turned on. If AUTH_REQUIRED is turned on, then the first two tests are ignored - only people who authenticate can use your server at all. Every other email will be blocked with a 535 error. But then you already knew this because you have read the documentation, right? So under what circumstances do you get this 535 error? Which client is not correctly authenticating? Which version of the software? Have you told it the correct username and password? Do you have a log of the problem session? What authentication modules is the daemon using? Do the relevant users have appropriate passwords set? (Just because they have a POP3 or IMAP password, that doesn't necessarily mean that they also have an ESMTP password set on the mail server - it depends on your exact setup and administrative processes). But then you already knew that we would need this information, because you have read the FAQ, haven't you? --Bill Michell[EMAIL PROTECTED] -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Karel JíchaSent: 12 July 2002 11:50To: [EMAIL PROTECTED]Subject: RE: [courier-users] STMP authentication But I want to authenticate users, when they send mail through my SMTP. I don't want to have open-relaying or set it per-IP. Why it says '535 Authentication required' when I have enabled authenticated smtp connection in my mail client ? Thanks. Karel - Original Message - From: Bill Michell To: 'Karel Jícha' ; [EMAIL PROTECTED] Sent: Wednesday, June 26, 2002 11:34 PM Subject: RE: [courier-users] STMP authentication Yes. AUTH_REQUIRED does what it says - it requires authorization for all users. Turn it off. --Bill Michell[EMAIL PROTECTED] -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Karel JíchaSent: 26 June 2002 20:24To: [EMAIL PROTECTED]Subject: [courier-users] STMP authentication Hi, I have problem with AUTH_REQUIRED placed in esmtd conf. file. I want to authenticate users, when they want to send mail through my SMTP server. When I set AUTH_REQUIRED=1 and try to send mail through it ( with enabled STMP autentication), it returns : '535 Authentication required'. Does anybody know, how to solve it ? Thanks in advance Karel Jicha Aponia Software CZ
[courier-users] Re: Logs
Bowie Bailey writes: Your mail server did it. I got the same message with an identification string for my mail server at the top. I think everyone on the list who has a courier mail server (which is probably just about everyone) will have gotten the same thing. Incorrect. Only those who agreed with courier's default settings. Sender's name contains Polish crossed l letter which isn't properly encoded. Anyone know if there is a way to turn this off and just have Courier deliver the message normally? Add opt BOFHBADMIME=accept to the sysconfdir/bofh file. Alexei. --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ___ courier-users mailing list [EMAIL PROTECTED] Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
Re: [courier-users] Re: Can't compile 0.39.1.20020715
Sho' 'nuff. Thanks! Chris -- Chris [EMAIL PROTECTED] Junior Birdman(TM) in training - Original Message - From: Sam Varshavchik [EMAIL PROTECTED] To: courier-users [EMAIL PROTECTED] Sent: Tuesday, July 16, 2002 11:51 PM Subject: [courier-users] Re: Can't compile 0.39.1.20020715 Chris writes: I'm trying this on a Mandrake 7.2 box. (Mostly up to date.) gcc --version: 2.95.3 kgcc --version: egcs-2.91.66 (I've tried with both, editing the Makefile) Running make or make check gives me: Making check in afx make[1]: Entering directory `/home/chris/src/courier-0.39.1.20020715/afx' c++ -DHAVE_CONFIG_H -I. -I. -I. -I.. -I./.. -Wall -g -O2 -c string.C In file included from string.C:6: afx.h:189: `::iostream' undeclared (first use here) Looks like you are missing the C++ development libraries and files. Install the required development packages for your system, and try again. -- Sam --- This sf.net email is sponsored by: Jabber - The world's fastest growing real-time communications platform! Don't just IM. Build it in! http://www.jabber.com/osdn/xim ___ courier-users mailing list [EMAIL PROTECTED] Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ___ courier-users mailing list [EMAIL PROTECTED] Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
RE: [courier-users] STMP authentication
I've gotten ESMTP working with those few clients who have an actual email client that does authentication. However the logs ALWAYS record this BEFORE it finally accepts the outgoing email from an actual user: Jul 17 09:56:34 yellowboi courieresmtpd: error,relay=:::XXX.XXX.XXX.XXX,msg=535 Authentication failed.,cmd: AUTH CRAM-MD5 My only guess is, it fails on it, but then allows it anyhow because it matches something else. My settings are ESMTPAUTH=LOGIN CRAM-MD5 for the file ~/etc/esmtpd. I'm just going to ass-ume that its normal behavior, even though it says its error and failed. The mail goes out... so it MUST be working now ;-) --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ___ courier-users mailing list [EMAIL PROTECTED] Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
[courier-users] Allow relay from any IP if authenticated
Title: Allow relay from any IP if authenticated Anyone know how I can allow courier to relay mail from any IP address as long as the client authenticates successfully? I have tried many configurations to no avail! etc/esmtpd - AUTH_REQUIRED = 0 etc/smtpaccess - 192.168.24.220 allow,RELAYCLIENT (local ip) etc/esmtpacceptmailfor - added all domains we host etc/hosteddomains - added all domains we host Thanks a million!
Re: [courier-users] Allow relay from any IP if authenticated
On Wed, 17 Jul 2002 15:02:37 -0400 Michael Bernardo [EMAIL PROTECTED] wrote: # #Anyone know how I can allow courier to relay mail from any IP address as #long as the client authenticates successfully? I have tried many #configurations to no avail! It does this by default. -- Jesse Keating j2solutions.net Mondo DevTeam (www.mondorescue.org) Was I helpful? Let others know: http://svcs.affero.net/rm.php?r=jkeating --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ___ courier-users mailing list [EMAIL PROTECTED] Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
Re: [courier-users] Allow relay from any IP if authenticated
Jesse Keating wrote: It does this by default. Are you sure it does? I've seen it claim it does in the docs and here on the list many times... but when I did the run-of-the-mill install of 'everything'... one key thing was left out which was the cause of most my grief for user trying to auth through smtp to relay. In the file ~/etc/esmtpd: ##NAME: AUTHMODULES:4 # # To enable authenticated SMTP relaying, uncomment AUTHMODULES, # and set ESMTPAUTH to ESMTP authentication mechanisms we support. Currently # LOGIN and CRAM-MD5 are available: # # AUTHMODULES=authdaemon # ESMTPAUTH=LOGIN CRAM-MD5 # # AUTHMODULES_WEBADMIN and ESMTPAUTH_WEBADMIN is used by the webadmin module Thats how my initial file was. It wasnt until I uncommented the two lines did it all work normally for me: AUTHMODULES=authdaemon ESMTPAUTH=LOGIN CRAM-MD5 Having those two things above, like that, works on my end now. --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ___ courier-users mailing list [EMAIL PROTECTED] Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
Re: [courier-users] Re: giving makeuserdb a little flexibility
On Tue, Jul 16, 2002 at 05:04:56PM -0400, Sam Varshavchik wrote: Ben Rosengart writes: The destination directory can currently be set at compile time. I am proposing making this configurable at run-time too. What is the down-side? Who could possibly be harmed by making the software slightly more flexible? It reminds me of a quote I've heard a long time ago, regarding the federal budget appropriations process in Washington, DC: A billion here, a billion there, and pretty soon you'll be talking real money. This is a five-line patch, not counting whitespace. The feature is easy to test; I can supply a test program suitable for a regression suite if you like. Existing facilities already handle the situation adequately. How? Unless I misunderstand the directory mechanism, neither of the methods you've suggested is adequate. I do not really remember your particular details. Simple: we generate a userdb on host A, in /export/foo. We read it on host B, in /foo. Please do not suggest that we maintain two builds of courier-imap. I don't think you would appreciate it if someone treated you as if your time had no value, so please don't do the same to me. -- Ben Rosengart (212) 741-4400 x215 Microsoft has argued that open source is bad for business, but you have to ask, Whose business? Theirs, or yours?--Tim O'Reilly --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ___ courier-users mailing list [EMAIL PROTECTED] Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
Re: [courier-users] Allow relay from any IP if authenticated
On Wed, 17 Jul 2002 13:12:11 -0700 Randall Shaw [EMAIL PROTECTED] wrote: # #Are you sure it does? I've seen it claim it does in the docs and here on #the list many times... but when I did the run-of-the-mill install of #'everything'... one key thing was left out which was the cause of most my #grief for user trying to auth through smtp to relay. I touched nothing, did an rpm install, and esmtp was working perfectly. Even was auth'n through mysql, due to my setting of authdaemon. -- Jesse Keating j2solutions.net Mondo DevTeam (www.mondorescue.org) Was I helpful? Let others know: http://svcs.affero.net/rm.php?r=jkeating --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ___ courier-users mailing list [EMAIL PROTECTED] Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
Re: [courier-users] Re: giving makeuserdb a little flexibility
On Wed, 2002-07-17 at 13:16, Ben Rosengart wrote: Simple: we generate a userdb on host A, in /export/foo. We read it on host B, in /foo. Please do not suggest that we maintain two builds of courier-imap. I don't think you would appreciate it if someone treated you as if your time had no value, so please don't do the same to me. Didn't you say that you needed that feature because you had multiple installs of courier? If you only have one, why is it not sufficient to symlink your additional userdb files into /etc/courier/userdb/? --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ___ courier-users mailing list [EMAIL PROTECTED] Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
[courier-users] courier SMTP relay problem
I get 2 errors from the esmtp daemon when I connect to the SMTP daemon
from a remote host
For example if I connect locally
[vmail@spiderman etc]$ telnet localhost 25
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
220 mail.ipcc.ca ESMTP
EHLO me
250-mail.ipcc.ca Ok.
250-AUTH PLAIN LOGIN
250-AUTH=PLAIN LOGIN X-NETSCAPE-HAS-BUGS
250-XVERP=Courier
250-XEXDATA
250-XSECURITY=NONE,STARTTLS
250-PIPELINING
250-8BITMIME
250-SIZE
250 DSN
AUTH PLAIN
535 Authentication failed.
this is odd, but because I am local I can still go ahead and send a MAIL
FROM: and RCPT TO: commands and the mail is relayed out. From our
remote site:
[apple1:~] davida% telnet mail.ipcc.ca 25
Trying 207.219.210.156...
Connected to mail.ipcc.ca.
Escape character is '^]'.
220 **
EHLO www.ticoon.com
502 ESMTP command error
HELO www.ticoon.com
250-mail.ipcc.ca Ok.
250-AUTH PLAIN LOGIN CRAM-MD5
250-AUTH=PLAIN LOGIN CRAM-MD5 X-NETSCAPE-HAS-BUGS
250-XVERP=Courier
250-XEXDATA
250-XSECURITY=NONE,STARTTLS
250-PIPELINING
250-8BITMIME
250-SIZE
250 DSN
AUTH PLAIN
502 ESMTP command error
AUTH LOGIn
502 ESMTP command error
MAIL FROM:[EMAIL PROTECTED]
250 Ok.
RCPT TO:[EMAIL PROTECTED]
513 Relaying denied.
I don't understand why the EHLO fails on the remote connection, why the
220 response is * and why the error from AUTH is now 502 instead of
535 (not that that made more sense). Here I cannot do anything, MAIL
FROM: or ok, but RCPT TO: all generate 513 Relay Denied but it wont
let me AUTH
In the maillog the errors for the local user show as
Jul 17 16:20:28 spiderman courieresmtpd:
error,relay=:::127.0.0.1,msg=535 Authentication failed.,cmd: AUTH
PLAIN
but the remote commands show as
Jul 17 16:38:27 spiderman courieresmtpd:
error,relay=:::209.82.14.99,msg=502 ESMTP command error,cmd:
apple1
Jul 17 16:38:35 spiderman courieresmtpd:
error,relay=:::209.82.14.99,from=[EMAIL PROTECTED],to=davida@ticoon.
com: 513 Relaying denied.
currently the smtpaccess file is configured as
# By default, enable relaying for localhost.
127.0.0.1 allow,RELAYCLIENT
# allow for this host internal IP
192.168.24.220 allow,RELAYCLIENT
# allow for this host www IP
207.219.210.156 allow,RELAYCLIENT
# ticoon.com
# 209.82.14.99 allow,RELAYCLIENT
# Allow relaying for all.
0 allow,RELAYCLIENT
I commented out the Ticoon IP address because I wanted to test the
access my clients will using to connect from various dialup addresses so
I need to have them SMTP AUTH.
the important parts of esmtpd are;
AUTH_REQUIRED=0
MAILUSER=vmail
MAILGROUP=vmail
PORT=smtp
ACCESSFILE=${sysconfdir}/smtpaccess
AUTHMODULES=authdaemon
ESMTPAUTH=PLAIN LOGIN CRAM-MD5
ESMTPAUTH_TLS=
ESMTPDSTART=YES
I don't know what else to include here. SMTP connections with
recipients to local users works fine, it is only the authenticated relay
outbound that does not work.
Please do not tell me it should work, I know it should work, but it does
not!
---
[EMAIL PROTECTED]
(416) 513-9524 x263
www.ticoon.com
Ticoon Technology Inc.
67 Yonge Street, Suite 602
Toronto, ON M5E 1J8
---
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
___
courier-users mailing list
[EMAIL PROTECTED]
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
[courier-users] Failed make
Dear all, I am running: Darwin localhost 5.5 Darwin Kernel Version 5.5: Thu May 30 14:51:26 PDT 2002; root:xnu/xnu-201.42.3.obj~1/RELEASE_PPC Power Macintosh powerpc After running: ./configure --with-waitfunc=wait3 --enable-mimetypes=/private/etc/httpd/mime.types successfully, I run make, and it builds most things, but stops at: Making all in rfc1035 gcc -g -O2 -Wall -I./.. -I.. -o testlookup testlookup.o librfc1035.a ../soxwrap/libsoxwrap.a ../md5/libmd5.a ../random128/librandom128.a `cat ../soxwrap/soxlibs.dep` ld: Undefined symbols: _rfc1035_default_resolver Any ideas? Thanks. - Adam Stern --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ___ courier-users mailing list [EMAIL PROTECTED] Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
[courier-users] domain being removed from esmtp/postgresql auth query?
I'm setting up the domain insidecinema.net. I've gone the path of least resistance, and set most of the system up through the webadmin. I've got a working schema for virtual users in postgres, and now I'm seeing the following: When I authenticate using smtp, the query that gets sent to the authdaemon is getting the domain (everything after the @) stripped from the query to the database. I.e. when I run authtest, strace'ing the authdaemon shows that my query looks like the following: # ./authtest [EMAIL PROTECTED] write(4, UID=100\nGID=101\nHOME=/home/vmail/insidecinema/mark\[EMAIL PROTECTED]\nNAME=Mark Gallay\nMAILDIR=/home/vmail/insidecinema/mark/Maildir\nPASSWD=.IZR1DVmCpyd2\nPASSWD2=test123\n.\n, 183) = 183 But when I authenticate using esmtp, I see: send(6, QSELECT mail_id, mail_crypt, mail_clear, uid, gid, home, maildir, \'\', name FROM mail_passwd WHERE mail_id = \'mark\'\0, 115, 0) = 115 Notice that [EMAIL PROTECTED] has become just mark. This isn't happening in the pop3d, and so I'm wondering where in the config courier is getting the idea that I want it to alter the data it sends to the database. TIA, -Peter -- The 5 year plan: In five years we'll make up another plan. Or just re-use this one. --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ___ courier-users mailing list [EMAIL PROTECTED] Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
Re: [courier-users] Allow relay from any IP if authenticated
Jesse Keating wrote: I touched nothing, did an rpm install, and esmtp was working perfectly. Even was auth'n through mysql, due to my setting of authdaemon. Might be it... I dont use RPMs, I do the compile and install methods of virtually everything. But I didnt do any 'withouts' or 'withs' that would conflict with default settings of authorization processes. So, it may be an RPM thing its set, but for the source code it isnt? --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ___ courier-users mailing list [EMAIL PROTECTED] Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
[courier-users] Re: STMP authentication
Randall Shaw writes: I've gotten ESMTP working with those few clients who have an actual email client that does authentication. However the logs ALWAYS record this BEFORE it finally accepts the outgoing email from an actual user: Jul 17 09:56:34 yellowboi courieresmtpd: error,relay=:::XXX.XXX.XXX.XXX,msg=535 Authentication failed.,cmd: AUTH CRAM-MD5 My only guess is, it fails on it, but then allows it anyhow because it matches something else. My settings are ESMTPAUTH=LOGIN CRAM-MD5 for the file ~/etc/esmtpd. And did you actually read the documentation concerning configuration of CRAM-MD5 authentication? I'm just going to ass-ume that its normal behavior, even though it says its error and failed. The mail goes out... so it MUST be working now ;-) It is; after CRAM-MD5 fails the client probably tries PLAIN or LOGIN, and succeeds. This is actually a security hole in the mail client; the mail client should not automatically retry with PLAIN or LOGIN without prompting the user. -- Sam --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ___ courier-users mailing list [EMAIL PROTECTED] Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
[courier-users] Re: Failed make
Adam Stern writes: Dear all, I am running: Darwin localhost 5.5 Darwin Kernel Version 5.5: Thu May 30 14:51:26 PDT 2002; root:xnu/xnu-201.42.3.obj~1/RELEASE_PPC Power Macintosh powerpc After running: ./configure --with-waitfunc=wait3 --enable-mimetypes=/private/etc/httpd/mime.types successfully, I run make, and it builds most things, but stops at: Making all in rfc1035 gcc -g -O2 -Wall -I./.. -I.. -o testlookup testlookup.o librfc1035.a ../soxwrap/libsoxwrap.a ../md5/libmd5.a ../random128/librandom128.a `cat ../soxwrap/soxlibs.dep` ld: Undefined symbols: _rfc1035_default_resolver Any ideas? Thanks. http://www.courier-mta.org/FAQ.html#osx -- Sam --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ___ courier-users mailing list [EMAIL PROTECTED] Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
Re: [courier-users] Allow relay from any IP if authenticated
On Wed, 17 Jul 2002 14:52:19 -0700 Randall Shaw [EMAIL PROTECTED] wrote: #Might be it... I dont use RPMs, I do the compile and install methods of #virtually everything. But I didnt do any 'withouts' or 'withs' that would #conflict with default settings of authorization processes. So, it may be #an RPM thing its set, but for the source code it isnt? Not according to Mr. Sam. -- Jesse Keating j2solutions.net Mondo DevTeam (www.mondorescue.org) Was I helpful? Let others know: http://svcs.affero.net/rm.php?r=jkeating --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ___ courier-users mailing list [EMAIL PROTECTED] Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
Re: [courier-users] Allow relay from any IP if authenticated
Juha Saarinen wrote: Despite what you might have been told, RPM packages are not evil, especially when you can build them yourself very easily. They cut down the amount of troubleshooting and system admin time required a lot. I dont think they are evil... its just the machine I chose to install courier on doesn't (or hasn't yet) do well with RPMs... its the trouble with yellowdog linux on a mac. I dont want to run an email server on our RH box, so its the YDL box for courier. I would PREFER to use rpms. Coming from a background of easy installers and life on macs... I would love to do easy installs on linux ;-) Hehehe. --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ___ courier-users mailing list [EMAIL PROTECTED] Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
Re: [courier-users] Re: STMP authentication
Sam Varshavchik wrote: And did you actually read the documentation concerning configuration of CRAM-MD5 authentication? Yup and yuppers! Took time finding the actual docs concerning it, but I did read it. Comprehend? may be a valid question to ask next time ;-) hehehehe. This is actually a security hole in the mail client; the mail client should not automatically retry with PLAIN or LOGIN without prompting the user. Gotta love the imperfect world... unfortunately we all have to live in it... --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ___ courier-users mailing list [EMAIL PROTECTED] Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
Re: [courier-users] Re: giving makeuserdb a little flexibility
On Wed, Jul 17, 2002 at 05:55:13PM -0400, Sam Varshavchik wrote: Ben Rosengart writes: Simple: we generate a userdb on host A, in /export/foo. We read it on host B, in /foo. Please do not suggest that we maintain two builds of courier-imap. I don't think you would appreciate it if someone treated you as if your time had no value, so please don't do the same to me. And you cannot symlink /foo/userdb.dat and /foo/userdbshadow.dat to /export because... No reason, as long as I only have one set of users. As soon as I build host C, with a different set of users, I'm screwed. -- Ben Rosengart (212) 741-4400 x215 Microsoft has argued that open source is bad for business, but you have to ask, Whose business? Theirs, or yours?--Tim O'Reilly --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ___ courier-users mailing list [EMAIL PROTECTED] Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
[courier-users] Re: domain being removed from esmtp/postgresql auth query?
Peter C. Norton writes: But when I authenticate using esmtp, I see: send(6, QSELECT mail_id, mail_crypt, mail_clear, uid, gid, home, maildir, \'\', name FROM mail_passwd WHERE mail_id = \'mark\'\0, 115, 0) = 115 Notice that [EMAIL PROTECTED] has become just mark. This isn't happening in the pop3d, and so I'm wondering where in the config courier is getting the idea that I want it to alter the data it sends to the database. Run a quick little test: echo 'user@domain' | tr -d '\012' | makemime -c auto -e base64 - echo 'password' | tr -d '\012' | makemime -c auto -e base64 - This is the most convenient way to get base64-encoded strings. telnet localhost smtp EHLO default AUTH LOGIN [[base64-encoded login id]] [[base64-encoded password]] -- Sam --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ___ courier-users mailing list [EMAIL PROTECTED] Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
Building RPMs again (was RE: [courier-users] Allow relay from any IP if authenticated)
Not evil, perhaps, but not trivial. I'm trying to build the rpms for the latest courier release version, on a SUSE 7.2 system, following all the instructions I have managed to track down so far... I need to modify the install directories by editing the spec file because, for example, the apache home directory is actually at /usr/local/httpd Then I start to hit problems - the faq doesn't make clear exactly how you use that spec file to build your RPMs - I have successfully overwritten my changes now several times. Should I be using the -ta option to rpm, or -tb, or something else? Oh - and there was a message on the mailing list suggests using ~ in the .rpmmacros file; this doesn't work too well (on SuSE at least) - you need to use either $HOME, or hard-code the value. Otherwise you see odd messages about inability to copy locale files to courier.spec, which is obviously nonsense. Second, if I try and build the RPMs as non-root, I can't actually complete the process because /sbin/chkconfig is in the sbin directory, and ordinary users don't have access to that directory, which is reasonable, since stuff goes in the sbin directory, rather than bin, for a reason. So; if building RPMs is the recommended way to install courier, but anyone not building for RedHat will have to use a custom .spec file in addition to xflags, could the FAQ (or even INSTALL) be updated with simple instructions on how to do this, instructions that actually work? -- Bill Michell [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Randall Shaw Sent: 17 July 2002 23:23 Cc: [EMAIL PROTECTED] Subject: Re: [courier-users] Allow relay from any IP if authenticated Juha Saarinen wrote: Despite what you might have been told, RPM packages are not evil, especially when you can build them yourself very easily. They cut down the amount of troubleshooting and system admin time required a lot. I dont think they are evil... its just the machine I chose to install courier on doesn't (or hasn't yet) do well with RPMs... its the trouble with yellowdog linux on a mac. I dont want to run an email server on our RH box, so its the YDL box for courier. I would PREFER to use rpms. Coming from a background of easy installers and life on macs... I would love to do easy installs on linux ;-) Hehehe. --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ___ courier-users mailing list [EMAIL PROTECTED] Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ___ courier-users mailing list [EMAIL PROTECTED] Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
Re: Building RPMs again (was RE: [courier-users] Allow relay fromany IP if authenticated)
On Thu, 18 Jul 2002, Bill Michell wrote: Not evil, perhaps, but not trivial. I'm trying to build the rpms for the latest courier release version, on a SUSE 7.2 system, following all the instructions I have managed to track down so far... I need to modify the install directories by editing the spec file because, for example, the apache home directory is actually at /usr/local/httpd Then I start to hit problems - the faq doesn't make clear exactly how you use that spec file to build your RPMs - I have successfully overwritten my changes now several times. Should I be using the -ta option to rpm, or -tb, or something else? Oh - and there was a message on the mailing list suggests using ~ in the .rpmmacros file; this doesn't work too well (on SuSE at least) - you need to use either $HOME, or hard-code the value. Otherwise you see odd messages about inability to copy locale files to courier.spec, which is obviously nonsense. Second, if I try and build the RPMs as non-root, I can't actually complete the process because /sbin/chkconfig is in the sbin directory, and ordinary users don't have access to that directory, which is reasonable, since stuff goes in the sbin directory, rather than bin, for a reason. So; if building RPMs is the recommended way to install courier, but anyone not building for RedHat will have to use a custom .spec file in addition to xflags, could the FAQ (or even INSTALL) be updated with simple instructions on how to do this, instructions that actually work? http://www.courier-mta.org/install.html should probably make it more clear that the SPEC file in the tarball is for Red Hat only. SuSE uses a different file system layout, as you've noticed, ditto Mandrake as others have pointed out. 'rpm -ta source.tar.gz' builds both the binary and source packages, whereas 'rpm -tb' builds just the binary ones. Either one will work. You could always make life easy for yourself, and switch to Red Hack. ;-) -- Juha Saarinen --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ___ courier-users mailing list [EMAIL PROTECTED] Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
Re: Building RPMs again (was RE: [courier-users] Allow relay from any IP if authenticated)
On Thu, 18 Jul 2002 00:21:25 +0100 Bill Michell [EMAIL PROTECTED] wrote: #Then I start to hit problems - the faq doesn't make clear exactly how you #use that spec file to build your RPMs - I have successfully overwritten my #changes now several times. Should I be using the -ta option to rpm, or -tb, #or something else? Oh - and there was a message on the mailing list suggests #using ~ in the .rpmmacros file; this doesn't work too well (on SuSE at #least) - you need to use either $HOME, or hard-code the value. Otherwise you #see odd messages about inability to copy locale files to courier.spec, which #is obviously nonsense. You use rpm -ba file.spec As far as ~ is concerned, that is a bash thing. If bash isn't your shell *shrug* #Second, if I try and build the RPMs as non-root, I can't actually complete #the process because /sbin/chkconfig is in the sbin directory, and ordinary #users don't have access to that directory, which is reasonable, since stuff #goes in the sbin directory, rather than bin, for a reason. Add /sbin:/usr/sbin to your $PATH. The only reason users don't have access is because it isn't in their $PATH. A lot of the apps in that directory can be ran as normal users. -- Jesse Keating j2solutions.net Mondo DevTeam (www.mondorescue.org) Was I helpful? Let others know: http://svcs.affero.net/rm.php?r=jkeating --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ___ courier-users mailing list [EMAIL PROTECTED] Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
RE: Building RPMs again (was RE: [courier-users] Allow relay from any IP if authenticated)
Actually, both INSTALL and the .spec file itself were clear that it was designed for RH. My point was that the information on how to build RPMs with both custom paths *and* custom configure options was scattered around INSTALL, the FAQ and the mailing list, and that some of the information I found there is not completely correct. Also, when it is recommended that building from RPMs should be done as non-root, it is strange that a file in /sbin should be referenced at all. -- Bill Michell [EMAIL PROTECTED] -Original Message- From: Juha Saarinen [mailto:[EMAIL PROTECTED]] Sent: 18 July 2002 00:41 To: Bill Michell Cc: [EMAIL PROTECTED] Subject: Re: Building RPMs again (was RE: [courier-users] Allow relay from any IP if authenticated) On Thu, 18 Jul 2002, Bill Michell wrote: Not evil, perhaps, but not trivial. I'm trying to build the rpms for the latest courier release version, on a SUSE 7.2 system, following all the instructions I have managed to track down so far... I need to modify the install directories by editing the spec file because, for example, the apache home directory is actually at /usr/local/httpd Then I start to hit problems - the faq doesn't make clear exactly how you use that spec file to build your RPMs - I have successfully overwritten my changes now several times. Should I be using the -ta option to rpm, or -tb, or something else? Oh - and there was a message on the mailing list suggests using ~ in the .rpmmacros file; this doesn't work too well (on SuSE at least) - you need to use either $HOME, or hard-code the value. Otherwise you see odd messages about inability to copy locale files to courier.spec, which is obviously nonsense. Second, if I try and build the RPMs as non-root, I can't actually complete the process because /sbin/chkconfig is in the sbin directory, and ordinary users don't have access to that directory, which is reasonable, since stuff goes in the sbin directory, rather than bin, for a reason. So; if building RPMs is the recommended way to install courier, but anyone not building for RedHat will have to use a custom .spec file in addition to xflags, could the FAQ (or even INSTALL) be updated with simple instructions on how to do this, instructions that actually work? http://www.courier-mta.org/install.html should probably make it more clear that the SPEC file in the tarball is for Red Hat only. SuSE uses a different file system layout, as you've noticed, ditto Mandrake as others have pointed out. 'rpm -ta source.tar.gz' builds both the binary and source packages, whereas 'rpm -tb' builds just the binary ones. Either one will work. You could always make life easy for yourself, and switch to Red Hack. ;-) -- Juha Saarinen --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ___ courier-users mailing list [EMAIL PROTECTED] Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
RE: Building RPMs again (was RE: [courier-users] Allow relay fromany IP if authenticated)
On Thu, 18 Jul 2002, Bill Michell wrote: Actually, both INSTALL and the .spec file itself were clear that it was designed for RH. OK, so that would seem to be a fair warning of trouble ahead, when building for different RPM-based systems. I've seen RPMs of Courier-IMAP at least floating around on the Internet, so you could probably snag the SPEC file used to build those, and use it as a template. My point was that the information on how to build RPMs with both custom paths *and* custom configure options was scattered around INSTALL, the FAQ and the mailing list, and that some of the information I found there is not completely correct. Send Sam a patch? Also, when it is recommended that building from RPMs should be done as non-root, it is strange that a file in /sbin should be referenced at all. I can build the RPMs as non-root, even though chkconfig is in /sbin, which isn't in my users' path. pts/3 juha@vim2:~$ which chkconfig /usr/bin/which: no chkconfig in (/usr/lib/courier-imap/bin:/usr/local/bin:/bin:/usr/bin:/usr/X11R6/bin:/home/juha/bin) pts/3 juha@vim2:~$ ls /sbin/chkconfig /sbin/chkconfig Please trim unnecessary quotes and don't top-post. -- Juha Saarinen --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ___ courier-users mailing list [EMAIL PROTECTED] Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
[courier-users] Re: Building RPMs again
At 11:40 AM +1200 7/18/02, Juha Saarinen wrote: On Thu, 18 Jul 2002, Bill Michell wrote: ...snip... I'm trying to build the rpms for the latest courier release version, on a SUSE 7.2 system, following all the instructions I have managed to track down so far... I need to modify the install directories by editing the spec file because, for example, the apache home directory is actually at /usr/local/httpd Then I start to hit problems - the faq doesn't make clear exactly how you use that spec file to build your RPMs - I have successfully overwritten my changes now several times. ...snip... http://www.courier-mta.org/install.html should probably make it more clear that the SPEC file in the tarball is for Red Hat only. SuSE uses a different file system layout, as you've noticed, ditto Mandrake as others have pointed out. 'rpm -ta source.tar.gz' builds both the binary and source packages, whereas 'rpm -tb' builds just the binary ones. Either one will work. You could always make life easy for yourself, and switch to Red Hack. ;-) It would be really NICE if the (RH) rpm could be available along WITH the tarball. (hint!) Newbie that I am, I think that I trust Sam (or whomever creates the Red Hat RPM) more than I trust myself to determine where the various files should go. Patrick Beart -- Web ArchitectureiWeb4Biz 503-774-8280 Portland, OR Internet Consulting, Intelligent Web site Development Secure site Hosting. http://www.WebArchitecture.com/ This is an era when nonsense has become acceptable and sanity is controversial. - Thomas Sowell --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ___ courier-users mailing list [EMAIL PROTECTED] Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
Re: Building RPMs again (was RE: [courier-users] Allow relay from any IP if authenticated)
On Thu, 18 Jul 2002 00:48:59 +0100 Bill Michell [EMAIL PROTECTED] wrote: # #Also, when it is recommended that building from RPMs should be done as #non-root, it is strange that a file in /sbin should be referenced at all. When does it mention /sbin? /sbin/chkconfig should only be done as a %post install section, not before. Can you provide a snippit of where you are seeing this? -- Jesse Keating j2solutions.net Mondo DevTeam (www.mondorescue.org) Was I helpful? Let others know: http://svcs.affero.net/rm.php?r=jkeating --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ___ courier-users mailing list [EMAIL PROTECTED] Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
Re: [courier-users] Re: Building RPMs again
On Wed, 17 Jul 2002 17:10:01 -0700 Patrick Beart [EMAIL PROTECTED] wrote: # It would be really NICE if the (RH) rpm could be available #along WITH the tarball. (hint!) # # Newbie that I am, I think that I trust Sam (or whomever #creates the Red Hat RPM) more than I trust myself to determine where #the various files should go. HUH? Sam provides a courier tarball, that has a rpm spec file in it. _YOU_ build the rpm. -- Jesse Keating j2solutions.net Mondo DevTeam (www.mondorescue.org) Was I helpful? Let others know: http://svcs.affero.net/rm.php?r=jkeating --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ___ courier-users mailing list [EMAIL PROTECTED] Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
RE: Building RPMs again (was RE: [courier-users] Allow relay from any IP if authenticated)
-- Bill Michell [EMAIL PROTECTED] -Original Message- From: Juha Saarinen [mailto:[EMAIL PROTECTED]] Sent: 18 July 2002 01:04 To: Bill Michell Cc: [EMAIL PROTECTED] Subject: RE: Building RPMs again (was RE: [courier-users] Allow relay from any IP if authenticated) [snip] Please trim unnecessary quotes and don't top-post. OK. But when I do this, Outlook makes a bit of a mess of the message. Next problem; the spec file appears to require RPM version 4.0.2 or greater, while SuSE are still on 3.0.6-96, which doesn't seem to support Requires(post) - which is what the real problem with the /sbin/chkconfig line appears to have been... Rather than mess up the distro completely, I think I'll revert to manual compilation, which I know works (as I have done it before). Yes, I could upgrade to RedHat, but I happen to like SuSE for pretty much everything else! -- Juha Saarinen --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ___ courier-users mailing list [EMAIL PROTECTED] Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
Re: [courier-users] Re: Building RPMs again
On Wed, 17 Jul 2002, Patrick Beart wrote: It would be really NICE if the (RH) rpm could be available along WITH the tarball. (hint!) Newbie that I am, I think that I trust Sam (or whomever creates the Red Hat RPM) more than I trust myself to determine where the various files should go. Sam can confirm if this is correct or not, but I believe the tarball method is the best one, as building it picks up on various authentication and database libraries that your system has (or hasn't) installed. The only justification I can see for Sam providing an RPM package is for systems without compilers/development tools/libraries. -- Juha Saarinen --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ___ courier-users mailing list [EMAIL PROTECTED] Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
RE: Building RPMs again (was RE: [courier-users] Allow relay fromany IP if authenticated)
On Thu, 18 Jul 2002, Bill Michell wrote: OK. But when I do this, Outlook makes a bit of a mess of the message. There's a fix for that too! Go to http://jump.to/oblivion (no, not being rude here ;-)) and download the OE QuoteFix plug in. Works a treat. Next problem; the spec file appears to require RPM version 4.0.2 or greater, while SuSE are still on 3.0.6-96, which doesn't seem to support Requires(post) - which is what the real problem with the /sbin/chkconfig line appears to have been... Can't help you with that though. No idea why SuSE ships such an old version of RPM. Rather than mess up the distro completely, I think I'll revert to manual compilation, which I know works (as I have done it before). Yes, I could upgrade to RedHat, but I happen to like SuSE for pretty much everything else! Despite all the headaches it gives you? ;-) -- Juha Saarinen --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ___ courier-users mailing list [EMAIL PROTECTED] Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
Re: Building RPMs again (was RE: [courier-users] Allow relay from any IP if authenticated)
On Thu, 18 Jul 2002 01:23:38 +0100 Bill Michell [EMAIL PROTECTED] wrote: # #[Bill Michell] It is in the Requires(post) lines scattered liberally through #the spec file. Actually, it seems to have been the first part of the line #that was causing RPM to choke, not the second... I see from your other message that it's because of a RPM version problem. We can't help that SuSe ships an old as dirt RPM version. As to your email client, Outlook is quite brain dead as to how it should handle quotes and replies. If at all possible, I urge you to try another client, like Eudora, Mozilla Mail, Mullberry, or something. Perhaps you can change the way that Outlook does it's silly replies, and use carrots or something instead of just expecting the user to rudely reply on the top of the message. -- Jesse Keating j2solutions.net Mondo DevTeam (www.mondorescue.org) Was I helpful? Let others know: http://svcs.affero.net/rm.php?r=jkeating --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ___ courier-users mailing list [EMAIL PROTECTED] Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
Re: [courier-users] Re: Building RPMs again
On Thu, 18 Jul 2002, Juha Saarinen wrote: Sam can confirm if this is correct or not, but I believe the tarball method is the best one, as building it picks up on various authentication and database libraries that your system has (or hasn't) installed. Hmmm just to clarify what I wrote above, I meant of course that building RPMs from the tarball is the best method, instead of providing ready-built RPMs that may or may not fit your system. -- Juha Saarinen --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ___ courier-users mailing list [EMAIL PROTECTED] Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
[courier-users] pop3d not authenticating (pam)
Hi, I'm upgrading to a new server (Redhat/courier) and have installed a newer version of Courier and i'm using pam to authenticate against NT. I have webmail working fine (sending and receiving) but pop3 won't authenticate. I've copied my old /etc/pam.d/pop3, and still it disconnects me after I enter the password. (I'm telneting to port 110 and entering user/pass manually - this works on the old system). Any advice would be greatly appreciated. Thanks, Adrian. --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ___ courier-users mailing list [EMAIL PROTECTED] Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
[courier-users] courier-imap and vmailmgr
Hi, Do we have any documents about courier-imap. I have just installed the courier-imap in order to receive email through IMAP on qmail others than using pop. However, IMAP doesn't work after running the courier-imap run-script. First, I try to setup and IMAP account on the mail-client (evolution), but it doesn't work. When I look at the maillog, it shows that: Jul 15 17:48:33 mars imapd: Connection, ip=[:::192.168.0.8] Jul 15 17:49:00 mars imapd: LOGIN FAILED, ip=[:::192.168.0.8] Also, I try telnet localhost 143, it displays the followings: Trying 127.0.0.1... telnet: Unable to connect to remote host: Connection refused Although I have tried to edit the IMAP configuration file /usr/lib/courier-imap/etc/imapd. I make the following changes: ADDRESS=my ip address AUTHMODULES=authvmailmgr IMAP_CHECK_ALL_FOLDERS=1 IMAP_MOVE_EXPUNGE_TO_TRASH=1 Therefore, I want to ask do anybody have any ideas on this problem. Thanks, Sky. -- __ Sign-up for your own FREE Personalized E-mail at Mail.com http://www.mail.com/?sr=signup Save up to $160 by signing up for NetZero Platinum Internet service. http://www.netzero.net/?refcd=N2P0602NEP8 --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ___ courier-users mailing list [EMAIL PROTECTED] Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
[courier-users] from header at sqwebmail
sorry if my quetion look dummy. In my sqwebmail, when i try to create new message, the from headers is always set to user@my-computer-name (e.g : my computer name = box.nusindo.com, then the from headers set to : [EMAIL PROTECTED]), i want to set automatically [EMAIL PROTECTED] (my domain = nusindo.com), not my box name. I've already set the defaultdomain and locals to nusindo.com , but it's doesnt change . What else should i change so i can't make it ?. Thx for your help and answer ::aprian - Yang Mudah dan Menghibur Hosting menjadi mudah dan murah hanya di PlasaCom. Klik http://idc.plasa.com F1 Mania!! Ikuti F1 Game di Obelix Game Corner di http://www.plasa.com/infotel/f1.html --- --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ___ courier-users mailing list [EMAIL PROTECTED] Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
Re: [courier-users] Re: domain being removed from esmtp/postgresql auth query?
On Wed, Jul 17, 2002 at 07:09:32PM -0400, Sam Varshavchik wrote: Run a quick little test: echo 'user@domain' | tr -d '\012' | makemime -c auto -e base64 - echo 'password' | tr -d '\012' | makemime -c auto -e base64 - This is the most convenient way to get base64-encoded strings. telnet localhost smtp EHLO default AUTH LOGIN [[base64-encoded login id]] [[base64-encoded password]] That... worked! After entering the base64 encoded username and password, I got a: 235 Ok So what am I doing wrong with the plain ascii-encoded username, such that the esmtpd won't deliver to the user? After that test above, the following still happens: rset 250 Ok ehlo default 250-insidecinema.net Ok. 250-AUTH LOGIN CRAM-MD5 250-AUTH=LOGIN CRAM-MD5 X-NETSCAPE-HAS-BUGS 250-XVERP=Courier 250-XEXDATA 250-XSECURITY=NONE,STARTTLS 250-PIPELINING 250-8BITMIME 250-SIZE 250 DSN mail from: [EMAIL PROTECTED] 250 Ok. rcpt to: [EMAIL PROTECTED] 550 User unknown. quit 221 Bye. -Peter -- The 5 year plan: In five years we'll make up another plan. Or just re-use this one. --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ___ courier-users mailing list [EMAIL PROTECTED] Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
