[vchkpw] Re: vchkpw suid perms..

2003-12-31 Thread Shaun
I dont want to run qmaild as vpopmail user, with the correct permissions
this should work i dont see why it wouldnt.

--
~Shaun

Clayton Weise [EMAIL PROTECTED] wrote in message
news:[EMAIL PROTECTED]
 If it's the same smtp auth patch I use
 (http://members.elysium.pl/brush/qmail-smtpd-auth/) then I had to set my
 qmail-smtpd process to run as the vpopmail user and not qmaild.  It's in
 the FAQ :).

 Shaun wrote:

  I have kind of a custom setup here.  I'm trying to get smtp-auth to work
and
  i noticed that the site says to give suid perms to vchkpw.  I assume
this is
  because vchkpw needs permission to read the vpasswd files.  Mine is
running
  as qmaild, and when i su to qmaild i can cat the vpasswd and vpasswd.cdb
  file so i it has read access to those files.  my question is what could
be
  wrong!  what else does it need read perms too... i must be missing
somthing.
 
  ## My Setup
  The qmail setup is pretty much straight from lwq, qmaild(501) is the
user
  and nofiles(500) is the group for the process below
 
  qmaild4900  0.0  0.0  3148  492 ?S16:38   0:00  |   |
\_
  /usr/local/bin/tcpserver -v -R -H -l0 -x /etc/tcp.smtp.cdb -c 20 -u
501 -g
  500 0 smtp /var/qmail/bin/qmail-smtpd hostname.com
/home/vpopmail/bin/vchkpw
  /bin/true
 
  /home/user1 is 0711 and user1.nofiles
  /home/user1/domains is 0711 and user1.nofiles
  /home/user1/domains/user1.domain.com is 0711 and user1.nofiles
  /home/user1/domains/user1.domain.com/vpasswd is 0640 and user1.nofiles
  /home/user1/domains/user1.domain.com/vpasswd.cdb is 0640 and
user1.nofiles
 
  su to qmaild and i can cat both
/home/user1/domains/user1.domain.com/vpasswd
  and /home/user1/domains/user1.domain.com/vpasswd.cdb
 
  When running vchkpw as qmaild auth always fails, strace doesnt show me
any
  permissions errors...
 
  --
  ~Shaun
 
 
 






[vchkpw] Re: vchkpw suid perms..

2003-12-31 Thread Shaun
run qmail-smtpd as root, if it came down to it i would just suid vchkpw as
that works..  I'm trying to get all this stuff to run with non-suid privs.

--
~Shaun
Ken Jones [EMAIL PROTECTED] wrote in message
news:[EMAIL PROTECTED]
 You can also run the smtp server as root if any of your domains
 are not owned by vpopmail.

 Ken Jones

 On Wednesday 31 December 2003 12:28 pm, Clayton Weise wrote:
  If it's the same smtp auth patch I use
  (http://members.elysium.pl/brush/qmail-smtpd-auth/) then I had to set my
  qmail-smtpd process to run as the vpopmail user and not qmaild.  It's in
  the FAQ :).
 
  Shaun wrote:
   I have kind of a custom setup here.  I'm trying to get smtp-auth to
work
   and i noticed that the site says to give suid perms to vchkpw.  I
assume
   this is because vchkpw needs permission to read the vpasswd files.
Mine
   is running as qmaild, and when i su to qmaild i can cat the vpasswd
and
   vpasswd.cdb file so i it has read access to those files.  my question
is
   what could be wrong!  what else does it need read perms too... i must
be
   missing somthing.
  
   ## My Setup
   The qmail setup is pretty much straight from lwq, qmaild(501) is the
user
   and nofiles(500) is the group for the process below
  
   qmaild4900  0.0  0.0  3148  492 ?S16:38   0:00  |   |
   \_ /usr/local/bin/tcpserver -v -R -H -l0 -x /etc/tcp.smtp.cdb -c 20 -u
   501 -g 500 0 smtp /var/qmail/bin/qmail-smtpd hostname.com
   /home/vpopmail/bin/vchkpw /bin/true
  
   /home/user1 is 0711 and user1.nofiles
   /home/user1/domains is 0711 and user1.nofiles
   /home/user1/domains/user1.domain.com is 0711 and user1.nofiles
   /home/user1/domains/user1.domain.com/vpasswd is 0640 and user1.nofiles
   /home/user1/domains/user1.domain.com/vpasswd.cdb is 0640 and
   user1.nofiles
  
   su to qmaild and i can cat both
   /home/user1/domains/user1.domain.com/vpasswd and
   /home/user1/domains/user1.domain.com/vpasswd.cdb
  
   When running vchkpw as qmaild auth always fails, strace doesnt show me
   any permissions errors...
  
   --
   ~Shaun