RE: [vchkpw] Re: Ucspi-ssl? -- test

2004-01-15 Thread Andrea Riela
Peter Palmreuther wrote: What we need is why 'vchkpw' fails to write 'open-smtp' (or if it even tries to). My notes are as follows: 16072 ktrace RET ktrace 0 16072 ktrace CALL execve(0xcfbfd8f2,0xcfbfd898,0xcfbfd8a8) 16072 ktrace NAMI /home/vpopmail/bin/vchkpw 16072 vchkpw

Re: [vchkpw] Re: Ucspi-ssl? -- test

2004-01-15 Thread Tom Collins
On Jan 15, 2004, at 8:21 AM, Andrea Riela wrote: 16072 vchkpw NAMI /home/vpopmail/etc/open-smtp.lock 16072 vchkpw RET open -1 errno 13 Permission denied probably the problem is here? -rw-r--r-- 1 vpopmail vchkpw 0 Jan 15 15:40 open-smtp -rw-r--r-- 1 root wheel 0 Jan 15

RE: [vchkpw] Re: Ucspi-ssl? -- test

2004-01-15 Thread Andrea Riela
Tom Collins wrote: Yep, delete the lock file. ok Is /home/vpopmail/domains/nesys.it/test a valid directory? If not, why not? What are its permissions. drwx-- 3 vpopmail vchkpw 512 Jan 14 11:36 test It's right? In the vpopmail source directory, type `make fix-priv` to set the

RE: [vchkpw] Re: Ucspi-ssl? -- test

2004-01-15 Thread Andrea Riela
Peter Palmreuther wrote: Not 'probably', for sure. vchpw ain't able to open a lock file and therefore refuses to continue writing IP to open-smtp. -rw-r--r-- 1 vpopmail vchkpw 0 Jan 15 15:40 open-smtp -rw-r--r-- 1 root wheel 0 Jan 15 01:22 open-smtp.lock Returning to your

RE: [vchkpw] Re: Ucspi-ssl? -- test

2004-01-15 Thread Andrea Riela
Peter Palmreuther wrote: Execute chown vpopmail.vchkpw /home/vpopmail/etc and test again. If this succeeds you /can/ further search for the cause of 'setuid' vchkpw is run as, or you can live with the fact you need 'write permissions for vpopmail on ~vpopmail/etc'. Now the etc dir is

RE: [vchkpw] Re: Ucspi-ssl? -- test

2004-01-14 Thread Andrea Riela
This is my test: The runscript - #!/bin/sh CAFILE=/usr/local/ssl/certs/pop3s.cert CERTFILE=/usr/local/ssl/certs/pop3s.cert KEYFILE=/usr/local/ssl/certs/pop3s.key DHFILE=/usr/local/ssl/certs/dh1024.pem export CAFILE CERTFILE KEYFILE DHFILE exec /usr/local/bin/softlimit -m 380 \

RE: [vchkpw] Re: Ucspi-ssl? -- test [2]

2004-01-14 Thread Andrea Riela
Another test, with: exec /usr/local/bin/softlimit -m 380 \ /usr/local/bin/sslserver -u 89 -g 89 -v -R -H -l 0 0 995 ktrace -f /tmp/ktrace.out /var/qmail/bin/qmail-popup \ nesys.it /home/vpopmail/bin/vchkpw /var/qmail/bin/qmail-pop3d Maildir 21 Now I've resolved the .tmp files problem. Now I