[sqwebmail] Re: Proposal to make the SqWebMail highly user configurable and extensible

2003-10-27 Thread Paul L. Allen
Brian Candler writes: OK, well I think you are saying that the single tag [#L#] expands into a lot of HTML - indeed it does - and you want to be able to modify parts of it without modifying the C source. I agree with the proposal that this would generally be a good thing. Designing a

[sqwebmail] Re: SqWebMail Setuid Root question

2003-10-24 Thread Paul L. Allen
Petri Riihikallio writes: IIRC: In classic Unix the mode of the socket doesn't matter. You have to control the access to the directory where the socket is. Linux obeys the mode of the socket itself. So it depends on what you are running. The directory is 700 owned by root. But I have

[sqwebmail] Re: SqWebMail Setuid Root question

2003-10-24 Thread Paul L. Allen
Sagara Wijetunga writes: [templates] This used to work earlier when the SqWebMail run under setuid-root. The template directory pointed by SQWEBMAIL_TEMPLATEDIR owns by the mailuser and group mailgroup with drwxr-xr-x permission. Html files are also same user/group with -rw-r--r--.

[sqwebmail] Re: SqWebMail Setuid Root question

2003-10-23 Thread Paul L. Allen
Sagara Wijetunga writes: I have a predicament. I have installed the SqWebMail as a setuid root program Not a good idea. A hole in sqwebmail could allow somebody to execute arbitrary code as root. Sqwebmail is big and complicated. Mr Sam is a good coder, but it's always possible to miss

[sqwebmail] Re: SqWebMail Setuid Root question

2003-10-23 Thread Paul L. Allen
Petri Riihikallio writes: And you need to set --with-chacheowner=vmail or whatever. If it's a new installation or you're re-installing for some other reason. Otherwise it's easier to just chown the cache directory. -- Paul Allen Softflare Support

Re: AW: Re: [sqwebmail] LDAP Adressbook with special characters

2003-10-21 Thread Paul L. Allen
[EMAIL PROTECTED] writes: One problem remains: As some of you pointed out, the characters are utf-8 encoded, which are not displayed correctly. They should be if you tell sqwebmail to use utf-8 and you're using a relatively recent browser. I switched the characterset of sqwebmail to utf-8

[sqwebmail] Re: password login problem

2003-10-15 Thread Paul L. Allen
Jay Lepore writes: I am running 5.2.1 which appears to be the latest version outside of the 'development version' From the FAQ which does not exist, or from any day's worth of messages on this list in the past month: there is a bug in 5.2.1 (and earlier) which means it doesn't like being

[sqwebmail] Re: CHARSET

2003-10-14 Thread Paul L. Allen
Brian Candler writes: I know very little about unicode either, but the document does explain what to do to get support for additional character sets in sqwebmail What puzzles me is why 8859-1 is not good enough for him in the first place, since it has all the German umlauted characters and

[sqwebmail] Re: Configure feature requests

2003-10-09 Thread Paul L. Allen
Petri Riihikallio writes: Sqwebmail does not support any mode of operation other than suid CGIs with suexec DISabled. Good I hadn't read your post before I tried. It took me about an hour: rebuilding Apache once and sqwebmail twice. If you had read my post first it might have taken two

[sqwebmail] Re: Configure feature requests

2003-10-08 Thread Paul L. Allen
Petri Riihikallio writes: I think I found a track! I have not used to running suid CGIs. I started thinking that maybe sqwebmail isn't executing under the privs I am expecting. I don't know any way to test this. Researching Apache docs revealed that I need suexec enabled, which I didn't

[sqwebmail] Re: disable HTTP/allow only HTTPS

2003-10-07 Thread Paul L. Allen
Jason Murray writes: Is there a way to get sqwebmail to ignore HTTP requests but answer HTTPS requests? The Apache VirtualHost directive springs to mind... -- Paul Allen Softflare Support

[sqwebmail] Re: customizing sqwebmail, nwe look

2003-10-01 Thread Paul L. Allen
Brian Candler writes: As told to me off-list by matti, if you go to the demo page https://karhula.taivassalo.fi/cgi-bin/demo and login explicitly then you get the usual sqwebmail-in-frames. If you tried it and it works then the thing is actually secure after all and the apparent

[sqwebmail] Re: customizing sqwebmail, nwe look

2003-09-30 Thread Paul L. Allen
matti writes: [...] Comments are welcome. One of the points you seem proud of is that you have eliminated frames. Yet a cursory inspection of the SECURITY readme shows why frames are used. The fact that you blithely eliminate a security feature without apparently understanding why it is

[sqwebmail] Re: customizing sqwebmail, nwe look

2003-09-30 Thread Paul L. Allen
Brian Candler writes: On Tue, Sep 30, 2003 at 09:27:00AM +, Paul L. Allen wrote: Not only that, most of the new functionality, which is in demand, is missing from your implementation. When you say something like that, perhaps you could reference an explicit list of those things

[sqwebmail] Re: customizing sqwebmail, nwe look

2003-09-30 Thread Paul L. Allen
Brian Candler writes: Oh I see what you mean: new functionality already in sqwebmail is missing from riwos. I originally read it as there are new functions which are missing from sqwebmail which are also missing from riwos Sorry if my statement was ambiguous. The new functionality in

[sqwebmail] Re: customizing sqwebmail, nwe look

2003-09-30 Thread Paul L. Allen
matti writes: One of the points you seem proud of is that you have eliminated frames. proud ? So it appeared from your readme, which complained about sqwebmail's use of frames. Yet a cursory inspection of the SECURITY readme shows why frames are used. The I have not changed this.

[sqwebmail] Re: customizing sqwebmail, nwe look

2003-09-30 Thread Paul L. Allen
matti writes: The word frames is used once in the readme: The riwos implementation does not use frames. In the sqwebmail source you will find a file called SECURITY (or SECURITY.html if you prefer that). I suggest you read one or other of them. I've added does not use frames to

[sqwebmail] Re: customizing sqwebmail, nwe look

2003-09-30 Thread Paul L. Allen
Paul L. Allen writes: In the sqwebmail source you will find a file called SECURITY (or SECURITY.html if you prefer that). I suggest you read one or other of them. Matti has since contacted me directly to explain that Riwos does use frames to maintain security but does not use ADDITIONAL

[sqwebmail] Re: customizing sqwebmail, nwe look

2003-09-30 Thread Paul L. Allen
Brian Candler writes: [sound for incoming mail] It would be hard to arrange anyway - server push? Client auto-refresh every 60 seconds? Our standard mod is a meta refresh on the folder list so people can see when stuff arrives. Yes, it also means that it defeats the soft timeout, making it

[sqwebmail] Re: Attachment name

2003-09-26 Thread Paul L. Allen
Martin Kos writes: i remember in some other cases (perhaps an earlier version of sqwebmail?) i have had the same problem as you that showed the filenames with .dat instead the right file extension... okay the whole filename is still wrong :-( The problem with the extension may be that the

[sqwebmail] Re: Install rights question...

2003-09-16 Thread Paul L. Allen
Tom Lisjac writes: I'm new to the list and apologize if this question has been asked before. I'm trying to get sqwebmail going on a remote v-host running apache and courier. Everything compiles ok but make install trips on the chown root for the sqwebmail executable. I will never have root

[sqwebmail] Re: Problems accessing sqwebmail

2003-09-15 Thread Paul L. Allen
Wolfgang Ebneter writes: When I try to access it from the internet the webserver's log shows an 303 error. 303 is not an error, it is a redirect and exist primarily to allow the output from a POST request to redirect the browser elsewhere. All access attempts to the machine where sqwebmail

[sqwebmail] Re: extension's attachment changes

2003-09-12 Thread Paul L. Allen
Davide Salerno writes: Thank you very much Jab Your explanation for my issue was very good. But another strange thing is that sometimes certain attachments, such as .doc, are changed in .dat by sqwebmail indeed if I use Outlook Express as mail client to download and open them it works! How

[sqwebmail] Re: logindomainlist

2003-08-28 Thread Paul L. Allen
Adam Webb - Network Manager writes: If I create a logindomainlist file, authentication stops working. Is there something obvious I'm forgetting? Without seeing the contents and knowing what substitutions you're trying to make it's impossible to guess. But since you always get to see how it

[sqwebmail] Re: TIMEZONELIST

2003-08-27 Thread Paul L. Allen
Francisco Morales writes: Somebody knows how to put Europe / Spain in the TIMEZONELIST file I try with GMT , CET but it does not work. As you ought to be able to see by looking at the timezone list that comes with sqwebmail, you specify timezones by using the conventions of the Olsen

[sqwebmail] Re: default domain

2003-08-27 Thread Paul L. Allen
Tanmaya Anand writes: I want that user should only type his user name, he should be logged in. For example, [EMAIL PROTECTED] , when opens mail.abc.com/cgi-bin/sqwebmail or abc.con/cgi-bin/sqwebmail, he should only supply his username user1 not complete [EMAIL PROTECTED] In recent

[sqwebmail] Re: default domain

2003-08-27 Thread Paul L. Allen
Trevor Astrope writes: This is how I did it. Using the logindomainlist was not an option for me, since I have 5000 virtual domains already configured with unique usernames, so having them all listed in logindomainlist was not practical and seems like a spammer's honeypot to me. If each of

[sqwebmail] Re: Sqwebmail not sending mail

2003-08-21 Thread Paul L. Allen
[EMAIL PROTECTED] writes: This is prehaps ambiguous, more accurately I should have said The users who go to the web interface can check mail and take advantage of all of the functionality of sqwebmail except for sending email That is an entirely different matter. I beg your pardon for

[sqwebmail] Re: Sqwebmail not sending mail

2003-08-20 Thread Paul L. Allen
[EMAIL PROTECTED] writes: 4) Mail is NOT being sent for users who login via SQWEBMAIL and try to send email: NOT OK Why would you expect that to work? Users collecting by pop3 or imap have a local mail client which is capable of sending mail out by smtp and they have a requirement to do so.

[sqwebmail] Re: Sqwebmail not sending mail

2003-08-20 Thread Paul L. Allen
[EMAIL PROTECTED] writes: - Original Message - From: Paul L. Allen [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, August 20, 2003 2:51 PM Subject: [sqwebmail] Re: Sqwebmail not sending [EMAIL PROTECTED] writes: 4) Mail is NOT being sent for users who login via

[sqwebmail] Wish-list: login page (domain name and timezones)

2003-08-14 Thread Paul L. Allen
Having played with sqwebmail 3.5.3 I have a few items on my wish-list (if I were a good enough C programmer I'd try to create and submit a patch, but I'm not). The first is the timezone drop-down on the login page. Although most of our clients are based in the UK, some of them are either based

[sqwebmail] Re: Templates

2003-08-14 Thread Paul L. Allen
On the subject of template design, might I suggest potential authors consider what happens when people set their preferences to 50 messages/page. Having the previous/next icons at the top of the folder display is useful if you know that you're looking for an old message with a specific date, no