RE: [courier-users] Webmail only works SUID root????

2003-01-22 Thread Bowie Bailey
From: Brian Candler [mailto:[EMAIL PROTECTED]] You need to be root for PAM to be able to read your shadow password file. If you are running a separate authdaemond then you can make sqwebmail suid to some other user, and chown the authdaemon socket to that uid. However, all your

Re: [courier-users] Webmail only works SUID root????

2003-01-22 Thread Brian Candler
On Wed, Jan 22, 2003 at 09:02:51AM -0500, Bowie Bailey wrote: From: Brian Candler [mailto:[EMAIL PROTECTED]] You need to be root for PAM to be able to read your shadow password file. If you are running a separate authdaemond then you can make sqwebmail suid to some other user, and

RE: [courier-users] Webmail only works SUID root????

2003-01-22 Thread Bowie Bailey
From: Brian Candler [mailto:[EMAIL PROTECTED]] Sent: Wednesday, January 22, 2003 12:56 PM I don't quite follow what you mean by chown the authdaemon socket. What/where is the authdaemon socket? It's a Unix domain socket, in the filesystem, which authdaemon clients use to talk to

Re: [courier-users] Webmail only works SUID root????

2003-01-22 Thread Brian Candler
On Wed, Jan 22, 2003 at 01:15:44PM -0500, Bowie Bailey wrote: # ls -ld /var/courier-imap/authdaemon drwx-- 2 exim exim 512 Jan 21 15:38 /var/courier-imap/authdaemon # ls -l /var/courier-imap/authdaemon total 2 -rw--- 1 root exim 0 Aug 8 09:47 lock -rw-r--r-- 1 root

Re: [courier-users] Webmail only works SUID root????

2003-01-21 Thread Andrew Burnette
- Original Message - From: Eric Livingston [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, January 21, 2003 11:48 AM Subject: [courier-users] Webmail only works SUID root I'm trying to get Webmail working, but I find that it denies any logins at all (claiming invalid user ID

Re: [courier-users] Webmail only works SUID root????

2003-01-21 Thread Brian Candler
On Tue, Jan 21, 2003 at 11:48:10AM -0500, Eric Livingston wrote: I'm trying to get Webmail working, but I find that it denies any logins at all (claiming invalid user ID or password) unless I make the webmail executable suid root. This is clearly not agreeable - clearly there's something that