Re: [vchkpw] How to package up a new release?

[Evren Yurtesen]

I like the way freebsd guys handle this.
http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/cvs-tags.html

They have a current branch which is the latest code, release tags
gives you exact release when they released a new version. Thus you can
chose to upgrade your operating system via binaries they provide from
their ftp site or with the sources, to a release.
Of course releases sometimes have bugs so they have a stable branch

I believe it would be confusing to have vpopmail-5-3-28-release tag which
has different sources than the 5.3.28 release on the web site.

So you should have vpopmail-5-3-28-release tag and perhaps
vpopmail-5-3 tag for updates over vpopmail-5-3-28-release and the
default tag is the current(development) code. (it is represented with a
dot . in freebsd cvs) Then you can do vpopmail-5-4 tag for the
extensive changes and new features added over vpopmail-5-3

So you would automatically have a stable version and a development version
in a few months. The vpopmail-5-3 would become stable when the bugfixes
from users are done and new features goes into vpopmail-5-4 so it will be
the development branch.

What FreeBSD guys do is that they stop adding new features in current
after a while. They only do bug fixes, lets say for 3 months. Then when
they think the source is stable enough, they declare the new version as
stable.

I omitted the last number in tags and maybe you should drop the minor
number because people really dont like to update every week for newer
versions with little changes :) It just cause more trouble for many
people who thinks the biggest number is the best. Then they get cold from
vpopmail :)

Evren

On Wed, 10 Sep 2003, Tom Collins wrote:

> On Wednesday, September 10, 2003, at 04:45  PM, Ken Jones wrote:
> > Untill CVS is up and running, how would I go about
> > packaging up a new release?
> 
> CVS is up now.  Please start with that code, as it includes a few 
> changes to the current tarball.
> 
> I forgot to mention the following in my previous email:
> 
> -
> If you'd like to keep up with changes committed to CVS, you can 
> subscribe to vpopmail-cvs 
> .
> -
> 
> > Would it be as simple as:
> > 1) get the current tarball
> > 2) apply changes to my local copy
> > 3) test test test
> > 4) tar up the package with a new version number
> > 5) upload to source forge?
> 
> With CVS (actual cvs commands in quotes), you should "checkout" the 
> vpopmail module from the vpopmail CVS repository, make your changes to 
> your checked out version, and "commit" those changes (with a note 
> explaining what they're for).  Whenever you start working on the 
> source, be sure to "update" your copy from the repository.  You can 
> "diff" your copy with the current repository copy to see where changes 
> are. Or get the "status" on a file (or all files).
> 
> I look to others with more experience than I for how to build releases. 
>   My understanding is that when we have a stable version of vpopmail in 
> CVS, we'll tag it with a name like "vpopmail-5-3-28-release" (periods 
> aren't allowed in tags).  Then, go to another directory and do a cvs 
> "export" to get the files as of that release tag, and tgz *that* up for 
> distribution.
> 
> Ken, please go into the Admin section of the vpopmail project and take 
> a look at the File Releases section.  Maybe once we're ready for a 
> release, we can get on the phone and I'll talk you though the process.
> 
> --
> Tom Collins
> [EMAIL PROTECTED]
> QmailAdmin: http://qmailadmin.sf.net/  Vpopmail: http://vpopmail.sf.net/
> Info on the Sniffter hand-held Network Tester: http://sniffter.com/
> 
> 
> 

[vchkpw] resetting dir-control

[Flavio Curti]

Hi

I use vpopmail 5.2.1, with activated directory hashing. Now after
several vadddomain's and vdeldomain's i ended up adding new domains to the 
domains/X/ directory. I would like to start it over again (ie, add the
new domains to domains/A/ again). Is there a way to do this? Any
pointers appreciated.

Thank you & greetz

Flavio

--
http://no-way.org/~fcu/

Re: [vchkpw] OT: vpopmail & spamd & user prefs

[Brah Mon]

I have this working with only one quirk..

i run spamd standalone daemon with options -c -d -a -v -d -s local4 -u
vpopmail -D

my /etc/mail/spamassassin/local.cf defines a global AWL path.. in my case:

auto_whitelist_path /etc/mail/spamassassin/whitelist/auto-whitelist
bayes_path  /etc/mail/spamassassin/bayes/
bayes_use_hapaxes   1


i can mail any config files if anyone is interested..

now for the bad news.. vadduser and qmailadmin do NOT create the
$VPOPMAIL/domains/$domain/$user/.spamassassin directory
if you mkdir and chmod it, user_prefs is copied the first email received..

i have had in the past where mail usernames could not be defined.. i.e.
unknown user.. in this case the mail was being delivered first to
[EMAIL PROTECTED]
so i created a [EMAIL PROTECTED] account and setup .spamassassin for
this user as well.. so far every message in and out gets spam checked no
problem.

preferences can be overridden in the
$VPOPMAIL/domains/$domain/$user/.spamassassin/user_prefs which is perms 666
vpopmail.vpopmail (i have no vchkpw group)
so in theory either group perms or keeping evil permissions will make it
possible to use webtools suth as PHP-SA to setup spam prefs. per user..

note the only real function i see disabled in this environment is per-user
auto whitelists..


Nathan Goodman
Unemployed Network Administrator
Casualty of April 2003 Cutbacks


- Original Message -
From: Bill Shupp <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, September 10, 2003 8:23 PM
Subject: Re: [vchkpw] OT: vpopmail & spamd & user prefs


> On Wednesday, September 10, 2003, at 04:22  PM, Alex Martin wrote:
>
> > Please post this answer to the list!
> > I have been searching for this answer for two days now, and I was
> > about to
> > post to this list. I think a lot of people would like to know this.
> > -Alex
>
> Ok, here's where I'm at now:
>
> I upgraded to spamassassin 2.55, and am starting spamd like so from
> daemontools:
>
> #!/bin/sh
> exec /usr/bin/spamd -c -D -F0 -L -u vpopmail -v
>
> And spamc is called via maildrop with these options:
>
> /usr/bin/spamc -f -u [EMAIL PROTECTED]
>
> It's now working, but spamd seems to create
> ~/.spamassassin/.spamassassin on the first creation attempt, and
> reports and error that it could not create the prefs file.  Upon second
> attempt, it creates it successfully.  Still trying to pinpoint where
> that's breaking, but other than that it works.
>
> I'm using this in the context of WebUserPrefs, a PHP config tool for
> SpamAssassin, plus a new panel that allows for optional deletion of
> spam.  Once I get all this working smoothly, I'll post some docs on how
> it's working for me.  Looks pretty cool, tho.
>
> Cheers,
>
> Bill Shupp
>
>
>

Re: [vchkpw] How to package up a new release?

[Tom Collins]

On Wednesday, September 10, 2003, at 04:45  PM, Ken Jones wrote:
Untill CVS is up and running, how would I go about
packaging up a new release?
CVS is up now.  Please start with that code, as it includes a few 
changes to the current tarball.

I forgot to mention the following in my previous email:

-
If you'd like to keep up with changes committed to CVS, you can 
subscribe to vpopmail-cvs 
.
-

Would it be as simple as:
1) get the current tarball
2) apply changes to my local copy
3) test test test
4) tar up the package with a new version number
5) upload to source forge?
With CVS (actual cvs commands in quotes), you should "checkout" the 
vpopmail module from the vpopmail CVS repository, make your changes to 
your checked out version, and "commit" those changes (with a note 
explaining what they're for).  Whenever you start working on the 
source, be sure to "update" your copy from the repository.  You can 
"diff" your copy with the current repository copy to see where changes 
are. Or get the "status" on a file (or all files).

I look to others with more experience than I for how to build releases. 
 My understanding is that when we have a stable version of vpopmail in 
CVS, we'll tag it with a name like "vpopmail-5-3-28-release" (periods 
aren't allowed in tags).  Then, go to another directory and do a cvs 
"export" to get the files as of that release tag, and tgz *that* up for 
distribution.

Ken, please go into the Admin section of the vpopmail project and take 
a look at the File Releases section.  Maybe once we're ready for a 
release, we can get on the phone and I'll talk you though the process.

--
Tom Collins
[EMAIL PROTECTED]
QmailAdmin: http://qmailadmin.sf.net/  Vpopmail: http://vpopmail.sf.net/
Info on the Sniffter hand-held Network Tester: http://sniffter.com/

[vchkpw] CVS access to vpopmail source

[Tom Collins]

I have uploaded the current (and, as of yet, unreleased 5.3.28 version) of vpopmail to the CVS server on SourceForge.  You probably won't be able to browse it on the web right away, as the CVS browser only syncs with the main distribution point every 24 hours.

All developers on the vpopmail project can commit changes to CVS.  Anyone can pull the source from CVS.  If you have occasional changes but aren't a regular contributor, you can post patches to the Patch Tracker and one of the developers will post them to CVS.

For more information on CVS access, please visit:   It includes excellent information on learning to use CVS, including a link to an online book about Open Source Development with CVS.

And note that I'm far from being a CVS expert!  If any of the other vpopmail developers have CVS experience, I'd be more than happy for them to post some helpful hints.

Also, if you commit changes that are related to a tracker item on SF, please mention it in the notes.  Something like "Fix problem with domain limits [Bug #99]".

--
Tom Collins
[EMAIL PROTECTED]
QmailAdmin: http://qmailadmin.sf.net/  Vpopmail: http://vpopmail.sf.net/ 
Info on the Sniffter hand-held Network Tester: http://sniffter.com/

Re: [vchkpw] Unable to access mail using POP and domain issues with vpopmail

[Tom Collins]

On Wednesday, September 10, 2003, at 09:35  PM, Balaji NJL wrote:
i also tried this on my mailserver directly

telnet localhost 110
user [EMAIL PROTECTED]
pass x
-ERR this user has no $HOME/Maildir
this is true because this is a virtual user and this
user doesnt hv Maildir.
What POP server are you using, and does it know about vpopmail?

--
Tom Collins
[EMAIL PROTECTED]
QmailAdmin: http://qmailadmin.sf.net/  Vpopmail: http://vpopmail.sf.net/
Info on the Sniffter hand-held Network Tester: http://sniffter.com/

Re: [vchkpw] Unable to access mail using POP and domain issues with vpopmail

[VeNoMouS]

then why are you trying to login as a virtual user
- Original Message - 
From: "Balaji NJL" <[EMAIL PROTECTED]>
To: "VeNoMouS" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
Sent: Thursday, September 11, 2003 4:35 PM
Subject: Re: [vchkpw] Unable to access mail using POP and domain issues with
vpopmail


> i am able to check the mails
> using sqwebmail. but i am still unable to check it via
> outlook express by POP. this is the error i am getting
>
> There was a problem logging onto your mail server.
> Your Password was rejected. Account: '192.168.0.3',
> Server: '192.168.0.3', Protocol: POP3, Server
> Response: '-ERR this user has no $HOME/Maildir', Port:
> 110, Secure(SSL): No, Server Error: 0x800CCC90, Error
> Number: 0x800CCC92
>
> i also tried this on my mailserver directly
>
> telnet localhost 110
> user [EMAIL PROTECTED]
> pass x
> -ERR this user has no $HOME/Maildir
>
> this is true because this is a virtual user and this
> user doesnt hv Maildir.
>
> thanks
> --- VeNoMouS <[EMAIL PROTECTED]> wrote:
> > what is the actal problem again, as we fixed so many
> > for you.
> >
> >
> > - Original Message - 
> > From: "Balaji NJL" <[EMAIL PROTECTED]>
> > To: <[EMAIL PROTECTED]>
> > Sent: Thursday, September 11, 2003 10:25 AM
> > Subject: RE: [vchkpw] Unable to access mail using
> > POP and domain issues with
> > vpopmail
> >
> >
> > > resending this. i think this got drowned in the
> > flood
> > > of other mails. can some one help me on this pl. i
> > > appreciate it.
> > >
> > > -B
> > > --- Balaji NJL <[EMAIL PROTECTED]> wrote:
> > > > domain: ojoobala.com
> > > > uid:89
> > > > gid:89
> > > > dir:/home/vpopmail/domains/ojoobala.com
> > > > users:  3
> > > >
> > > > --- Shane Chrisp <[EMAIL PROTECTED]> wrote:
> > > > > If you type vdominfo ojoobala.com what output
> > does
> > > > > it
> > > > > show for dir?
> > > > >
> > > > > >-Original Message-
> > > > > >From: Balaji NJL [mailto:[EMAIL PROTECTED]
> > > > > >Sent: Tuesday, 9 September 2003 11:03 PM
> > > > > >To: [EMAIL PROTECTED]; [EMAIL PROTECTED]
> > > > > >Subject: RE: [vchkpw] Unable to access mail
> > using
> > > > > POP and
> > > > > >domain issues with vpopmail
> > > > > >
> > > > > >
> > > > > >yes it does hv Maildir under
> > > > > >/home/vpopmail/domains/ojoobala.com/balaji
> > > > > >
> > > > > >the permissions are vpopmail/vchkpw. Maildir
> > has
> > > > > the
> > > > > >following dir cur, new and tmp. it also
> > contains
> > > > > sqweb
> > > > > >configuration details. All the directories hv
> > > > 700.
> > > > > >
> > > > > >i feel vpop is looking for Maildir under
> > > > > >/home/balaji/Maildir but not under
> > > > > >/home/vpopmail/domains/balaji/maildir. How to
> > > > check
> > > > > >where its looking for the maildir.
> > > > > >
> > > > > >Sqwebmail is working fine. it authenticates
> > me
> > > > > >correctly and i am able to send and receive
> > mail.
> > > > > >
> > > > > >-B
> > > > > >--- Shane Chrisp <[EMAIL PROTECTED]> wrote:
> > > > > >> The user should have a maildir under
> > > > > >> ~/vpopmail/domains/ojoobala.com/myname/
> > > > > >> and it should be owned vpopmail.vchkpw with
> > > > > >> permissions 700.
> > > > > >>
> > > > > >> Check that this is the case.
> > > > > >>
> > > > > >> Shane
> > > > > >>
> > > > > >>
> > > > > >> >-Original Message-
> > > > > >> >From: Balaji NJL
> > [mailto:[EMAIL PROTECTED]
> > > > > >> >Sent: Monday, 8 September 2003 12:53 PM
> > > > > >> >To: Tom Collins; vpopmail list
> > > > > >> >Subject: Re: [vchkpw] Unable to access
> > mail
> > > > > using
> > > > > >> POP and
> > > > > >> >domain issues with vpopmail
> > > > > >> >
> > > > > >> >
> > > > > >> >i did that.
> > > > > >> >
> > > > > >> >now i am getting [EMAIL PROTECTED] and
> > > > > >> >[EMAIL PROTECTED]  both delivered
> > to my
> > > > > >> >ojoobala.com account. i am able to check
> > the
> > > > > mails
> > > > > >> >using sqwebmail. but i am still unable to
> > > > check
> > > > > it
> > > > > >> via
> > > > > >> >outlook express by POP. this is the error
> > i am
> > > > > >> getting
> > > > > >> >
> > > > > >> >There was a problem logging onto your mail
> > > > > server.
> > > > > >> >Your Password was rejected. Account:
> > > > > '192.168.0.3',
> > > > > >> >Server: '192.168.0.3', Protocol: POP3,
> > Server
> > > > > >> >Response: '-ERR this user has no
> > > > $HOME/Maildir',
> > > > > >> Port:
> > > > > >> >110, Secure(SSL): No, Server Error:
> > > > 0x800CCC90,
> > > > > >> Error
> > > > > >> >Number: 0x800CCC92
> > > > > >> >
> > > > > >> >i also tried this on my mailserver
> > directly
> > > > > >> >
> > > > > >> >telnet localhost 110
> > > > > >> >user [EMAIL PROTECTED]
> > > > > >> >pass x
> > > > > >> >-ERR this user has no $HOME/Maildir
> > > > > >> >
> > > > > >> >this is true because this is a virtual
> > user
> > > > and
> > > > > >> this
> > > > > >> >user doesnt hv Maildir.
> > > > > >> >
> > > > > >> >Any ideas whats happening...thanks,
> > > > > 

[vchkpw] I must have missed your answers, vpopmail .quotawarn.msg

[Shai Ben-Naphtali]

Hi all,

I'm afraid I was told that some people replied to my msg.. but I MUST have
missed it somehow and so I'm making this email again, in HOPE that I'll get
help in this issue and not miss it this time around.

I made /home/vpopmail/domains/.quotawarn.msg

I placed this inside:

From: Mail Delivery System <[EMAIL PROTECTED]>
Reply-To: [EMAIL PROTECTED]
To: Valued Customer:;
Subject: Mail quota warning
Mime-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 7bit

Your mailbox on the server is now more than 90% full. So that you can
continue
to receive mail you need to remove some messages from your mailbox.

~~~

I can't seem to understand why this message isn't arriving into the mailbox
I made for testing that is now over 90% and standing on 93%.

Can anyone give me a hand in figuring this out?
Thanks in advance for ANY help on this issue.

Cheers,
Shai

Re: [vchkpw] Unable to access mail using POP and domain issues with vpopmail

[Balaji NJL]

i am able to check the mails
using sqwebmail. but i am still unable to check it via
outlook express by POP. this is the error i am getting

There was a problem logging onto your mail server.
Your Password was rejected. Account: '192.168.0.3',
Server: '192.168.0.3', Protocol: POP3, Server
Response: '-ERR this user has no $HOME/Maildir', Port:
110, Secure(SSL): No, Server Error: 0x800CCC90, Error
Number: 0x800CCC92

i also tried this on my mailserver directly

telnet localhost 110
user [EMAIL PROTECTED]
pass x
-ERR this user has no $HOME/Maildir

this is true because this is a virtual user and this
user doesnt hv Maildir.

thanks
--- VeNoMouS <[EMAIL PROTECTED]> wrote:
> what is the actal problem again, as we fixed so many
> for you.
> 
> 
> - Original Message - 
> From: "Balaji NJL" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Thursday, September 11, 2003 10:25 AM
> Subject: RE: [vchkpw] Unable to access mail using
> POP and domain issues with
> vpopmail
> 
> 
> > resending this. i think this got drowned in the
> flood
> > of other mails. can some one help me on this pl. i
> > appreciate it.
> >
> > -B
> > --- Balaji NJL <[EMAIL PROTECTED]> wrote:
> > > domain: ojoobala.com
> > > uid:89
> > > gid:89
> > > dir:/home/vpopmail/domains/ojoobala.com
> > > users:  3
> > >
> > > --- Shane Chrisp <[EMAIL PROTECTED]> wrote:
> > > > If you type vdominfo ojoobala.com what output
> does
> > > > it
> > > > show for dir?
> > > >
> > > > >-Original Message-
> > > > >From: Balaji NJL [mailto:[EMAIL PROTECTED]
> > > > >Sent: Tuesday, 9 September 2003 11:03 PM
> > > > >To: [EMAIL PROTECTED]; [EMAIL PROTECTED]
> > > > >Subject: RE: [vchkpw] Unable to access mail
> using
> > > > POP and
> > > > >domain issues with vpopmail
> > > > >
> > > > >
> > > > >yes it does hv Maildir under
> > > > >/home/vpopmail/domains/ojoobala.com/balaji
> > > > >
> > > > >the permissions are vpopmail/vchkpw. Maildir
> has
> > > > the
> > > > >following dir cur, new and tmp. it also
> contains
> > > > sqweb
> > > > >configuration details. All the directories hv
> > > 700.
> > > > >
> > > > >i feel vpop is looking for Maildir under
> > > > >/home/balaji/Maildir but not under
> > > > >/home/vpopmail/domains/balaji/maildir. How to
> > > check
> > > > >where its looking for the maildir.
> > > > >
> > > > >Sqwebmail is working fine. it authenticates
> me
> > > > >correctly and i am able to send and receive
> mail.
> > > > >
> > > > >-B
> > > > >--- Shane Chrisp <[EMAIL PROTECTED]> wrote:
> > > > >> The user should have a maildir under
> > > > >> ~/vpopmail/domains/ojoobala.com/myname/
> > > > >> and it should be owned vpopmail.vchkpw with
> > > > >> permissions 700.
> > > > >>
> > > > >> Check that this is the case.
> > > > >>
> > > > >> Shane
> > > > >>
> > > > >>
> > > > >> >-Original Message-
> > > > >> >From: Balaji NJL
> [mailto:[EMAIL PROTECTED]
> > > > >> >Sent: Monday, 8 September 2003 12:53 PM
> > > > >> >To: Tom Collins; vpopmail list
> > > > >> >Subject: Re: [vchkpw] Unable to access
> mail
> > > > using
> > > > >> POP and
> > > > >> >domain issues with vpopmail
> > > > >> >
> > > > >> >
> > > > >> >i did that.
> > > > >> >
> > > > >> >now i am getting [EMAIL PROTECTED] and
> > > > >> >[EMAIL PROTECTED]  both delivered
> to my
> > > > >> >ojoobala.com account. i am able to check
> the
> > > > mails
> > > > >> >using sqwebmail. but i am still unable to
> > > check
> > > > it
> > > > >> via
> > > > >> >outlook express by POP. this is the error
> i am
> > > > >> getting
> > > > >> >
> > > > >> >There was a problem logging onto your mail
> > > > server.
> > > > >> >Your Password was rejected. Account:
> > > > '192.168.0.3',
> > > > >> >Server: '192.168.0.3', Protocol: POP3,
> Server
> > > > >> >Response: '-ERR this user has no
> > > $HOME/Maildir',
> > > > >> Port:
> > > > >> >110, Secure(SSL): No, Server Error:
> > > 0x800CCC90,
> > > > >> Error
> > > > >> >Number: 0x800CCC92
> > > > >> >
> > > > >> >i also tried this on my mailserver
> directly
> > > > >> >
> > > > >> >telnet localhost 110
> > > > >> >user [EMAIL PROTECTED]
> > > > >> >pass x
> > > > >> >-ERR this user has no $HOME/Maildir
> > > > >> >
> > > > >> >this is true because this is a virtual
> user
> > > and
> > > > >> this
> > > > >> >user doesnt hv Maildir.
> > > > >> >
> > > > >> >Any ideas whats happening...thanks,
> > > > >> >-B
> > > > >> >--- Balaji NJL <[EMAIL PROTECTED]> wrote:
> > > > >> >> you mean...
> > > > >> >> ./vdeldomain mail.ojoobala.com
> > > > >> >> and
> > > > >> >> ./vadddomain ojoobala.com
> > > > >> >> and
> > > > >> >> ./vaddaliasdomain mail.ojoobala.com
> > > > ojoobala.com
> > > > >> >>   
> > > > >> >> Would this also solve my POP access
> problem.
> > > > >> >>
> > > > >> >> thanks,
> > > > >> >> -B
> > > > >> >>
> > > > >> >>
> > > > >> >> --- Tom Collins <[EMAIL PROTECTED]>
> wrote:
> > > > >> >> > On Thursday, September 4, 2003, at
> 08:08
> > > > AM,
> > > > >> >> Balaji
> > > > >

Re: [vchkpw] UPGRADE to MD5 encryption

[Jeremy Kitchen]

On Wed, 2003-09-10 at 13:30, Charles Sprickman wrote:
> This is also somewhat OS dependant.  The *BSDs for example have a crypt()
> that can handle DES, MD5, and Blowfish.  I'm successfully using Blowfish
> (accounts were system account users from OpenBSD) after making the
> pw_passwd field larger in mysql.
> 
> Some OSes have a config file for crypt() that will set the default
> encryption method.  "man 3 crypt" should give some indication of how your
> OS will behave.

good info :)  Thanks.  Learn somethin new every day!

-- 
Jeremy Kitchen
Systems Administrator
.
Inter7 Internet Technologies, Inc.
www.inter7.com
866.528.3530 toll free
847.492.0470 int'l
847.492.0632 fax
GNUPG key ID: 93BDD6CE

Re: [vchkpw] vipmap - help

[Urban -]

You can use --enable-default-domain to allow one domain to login without 
@domain.  But if you need more than one, you'll have to implement 
ip-alias-domains.  I haven't checked though to see if it's still restricted 
to vchkpw (pop) as Ken suggested.  I vaguely remember it getting moved to 
the vpopmail library to that all protocols could use it.  But that was a 
while ago.  You'll have to check that...

FWIW, it really doesn't take long for users to get used to using their full 
email address as their login name (in my experience).  And it's really in 
everyone's best interest not to waste IPs.  : )

Regards,

Bill

Hi,

I have enabled --enable-default-domain & --enable-ip-alias-domains ... from 
the very begining. Yet it does not work. But thanks for the info anyway, i 
appreciate the input.

Best regards,

Urban

_
Use custom emotions -- try MSN Messenger 6.0! 
http://www.msnmessenger-download.com/tracking/reach_emoticon

Re: [vchkpw] vipmap - help

[Ken Jones]

On Wednesday 10 September 2003 8:29 pm, Vladimir Kabanov wrote:
> - Original Message -
> From: "Ken Jones" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Thursday, September 11, 2003 12:19 PM
> Subject: Re: [vchkpw] vipmap - help
>
> > username instead of [EMAIL PROTECTED] The ip mapping
> > figures out which domain is on the IP and automatically
> > fills in the domain for authentication. It also only applies
> > to pop authentication.
> >
> > Ken Jones
>
> Ken, if u remember, i send you modified vchkpw,
> so note of you "It also only applies to pop authentication."  may be
> skipped if that corrections be integrated.
> ip-mapping perfectly works for us with pop3, imap & smtp.
>
> sincerelly,
> Vladimir Kabanov.

Would it be possible to make your changes to the 
current devel vchkpw and post a patch? I think you
can post a patch on sourceforge and add a feature request so we 
can track it.

Ken Jones

Re: [vchkpw] This List.

[Paul Theodoropoulos]

ahem.
At 06:07 PM 9/10/2003, Richard A. Secor wrote:
In all the time I've been subscribed to this list (around 2 years or 
more), I've been lucky to see even one USEFUL message.
that's a shame. i've found very useful info on this list from time to time. 
there is always *noise* associated with any *signal*. the ratio is usually 
the issue. the ratio here really ain't bad most of the time, current 
thrashes not withstanding.

Most of the messages have been complaining about SPAM and getting "SPAM 
ASSASSIN" working!!!
patently false. but you're entitled to your wrong opinion.

1) I thought this was the vchkpw (aka vpopmail) group NOT SPAM ASSASSIN -- 
HELP I'M SCREWED GROUP!!!
yes, it is the vpopmail list. i have never seen anyone post to this list 
asking how to integrate spamassin with Exim, or communigate, for example. 
It is always relative to integrating it with vpopmail - which can be 
troublesome - so it's certainly appropriate. in any event, there are lots 
of questions unrelated to spamassassin. so i'm unclear why this is so 
troublesome to you.

2) If you really want to get rid of SPAM there are quite a few better ways 
then blocking by content (unless your in a corporate environment and this 
won't piss off your users).
that's nice. what does it have to do with vpopmail?

One of these days instead of just ignoring the shit out of this list and 
deleting all the E-Mails maybe I'll unsubscribe.
i'd recommend the latter if the aggravation isn't worth it to you. i 
recently unsubbed from the sqwebmail mailing list, since i consider 
sqwebmail and its author to be dreck. worked wonders for my peace of mind. 
life is full of choices.

In the meantime, I've been waiting for the QMailAdmin version that will 
support the damn aliases in the database for well over a year.
this is the vpopmail list. why are you posting about qmailadmin to this list?

yes, that gets a "   ;^)   ".

Everyone is complaining about nothing being done in the last 6 months???

It's more like the last year!!!
patently false, but you're entitled to your wrong opinion. oh, perhaps you 
were referring to qmailadmin, rather than vpopmail. in that case, i'd 
recommend posting to the correct list.

again, ;^).

ciao.

-Rich


Paul Theodoropoulos
http://www.anastrophe.com

Re: [vchkpw] vipmap - help

[Bill Shupp]

On Wednesday, September 10, 2003, at 06:30  PM, Urban - wrote:
Hi,

So since i can not use vipmap, is there any other solution that i can 
use so i dont have to login with "[EMAIL PROTECTED]"? I have one IP and 
3 domain names.
You can use --enable-default-domain to allow one domain to login 
without @domain.  But if you need more than one, you'll have to 
implement ip-alias-domains.  I haven't checked though to see if it's 
still restricted to vchkpw (pop) as Ken suggested.  I vaguely remember 
it getting moved to the vpopmail library to that all protocols could 
use it.  But that was a while ago.  You'll have to check that...

FWIW, it really doesn't take long for users to get used to using their 
full email address as their login name (in my experience).  And it's 
really in everyone's best interest not to waste IPs.  : )

Regards,

Bill

Re: [vchkpw] [smtpauth] SMTP-Auth bug in passwords?

[John Simpson]

On Tuesday, Sep 9, 2003, at 22:40 US/Central, Mike Miller wrote:
We had a customer who recently had a username of webmaster and a 
password of webmaster00.
bad idea to start with... passwords should not contain, or be similar 
to, the userid.

I then tried truncating their password character by character.  What I 
found was that only when I brought the password to 'webmast' (webmaste 
still worked), did it stop authenticating properly.
your system is using standard unix crypt() to create the encrypted 
passwords. the crypt() algorithm, when used for passwords, only 
encrypts the first eight bytes of the password. this is why most 
systems use MD5 encryption for passwords.

---
| John Simpson - KG4ZOW - Programmer at Large |
| <[EMAIL PROTECTED]>http://www.jms1.net/ |
---


PGP.sig
Description: PGP signature

Re: [vchkpw] vipmap - help

[Urban -]

Correct.  vipmap is useful when you want more then one domain to not 
require "[EMAIL PROTECTED]" to login.  But it eats up IP addresses, which kind of 
defeats one of the main advantages of virtual mail.

Regards,

Bill


Hi,

So since i can not use vipmap, is there any other solution that i can use so 
i dont have to login with "[EMAIL PROTECTED]"? I have one IP and 3 domain 
names.

Best Regds,

Urban

_
Express yourself with MSN Messenger 6.0 -- download now! 
http://www.msnmessenger-download.com/tracking/reach_general

Re: [vchkpw] vipmap - help

[Vladimir Kabanov]

- Original Message - 
From: "Ken Jones" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, September 11, 2003 12:19 PM
Subject: Re: [vchkpw] vipmap - help

> username instead of [EMAIL PROTECTED] The ip mapping
> figures out which domain is on the IP and automatically
> fills in the domain for authentication. It also only applies
> to pop authentication.
>
> Ken Jones

Ken, if u remember, i send you modified vchkpw,
so note of you "It also only applies to pop authentication."  may be skipped
if that corrections be integrated.
ip-mapping perfectly works for us with pop3, imap & smtp.

sincerelly,
Vladimir Kabanov.

Re: [vchkpw] vipmap - help

[Ken Jones]

On Wednesday 10 September 2003 8:17 pm, Urban - wrote:
> Shd i not use vipmap at all since i only have One IP address?
>
> Best regd,
> Urban

That's right. vipmap is only for sites that need to do 
ip based hosting instead of virtual hosting. The primary
usage is to allow multiple domains to login with just
username instead of [EMAIL PROTECTED] The ip mapping
figures out which domain is on the IP and automatically
fills in the domain for authentication. It also only applies
to pop authentication.

Ken Jones

Re: [vchkpw] vipmap - help

[Bill Shupp]

On Wednesday, September 10, 2003, at 06:17  PM, Urban - wrote:

Shd i not use vipmap at all since i only have One IP address?
Correct.  vipmap is useful when you want more then one domain to not 
require "[EMAIL PROTECTED]" to login.  But it eats up IP addresses, which 
kind of defeats one of the main advantages of virtual mail.

Regards,

Bill

Re: [vchkpw] This List.

[Ken Jones]

On Wednesday 10 September 2003 8:07 pm, Richard A. Secor wrote:

> In the meantime, I've been waiting for the QMailAdmin version that will
> support the damn aliases in the database for well over a year.


You are more than welcome to submit a patch to the
qmailadmin source forge project to solve this issue.

Ken Jones

Re: [vchkpw] vipmap - help

[Urban -]

Shd i not use vipmap at all since i only have One IP address?

Best regd,
Urban
Im using vpopmail-5.3.27 + courier-imap + qmail. In vpopmail the default 
domain is chaein.com We have a new domain cyberchaein.com. What i did was 
using vipmap to map 192.168.1.15 to cyberchaein.com so it looks like this 
when i run ./vipmap -p:

192.168.1.15 cyberchaein.com

but i still cant login to my acct with just the username (test). i still 
have to use [EMAIL PROTECTED] please help.

ps: we only have one mailserver.

Best regards,
Urban
_
Find it on the web with MSN Search. http://search.msn.com.sg/

_
Try MSN Messenger 6.0 with integrated webcam functionality! 
http://www.msnmessenger-download.com/tracking/reach_webcam

Re: [vchkpw] Re: Tom's fork of vpopmail (and qmailadmin)

[isp]

Please end this thread.  Enough has been said.

[vchkpw] This List.

[Richard A . Secor]

In all the time I've been subscribed to this list (around 2 years or 
more), I've been lucky to see even one USEFUL message.

Most of the messages have been complaining about SPAM and getting "SPAM 
ASSASSIN" working!!!

1) I thought this was the vchkpw (aka vpopmail) group NOT SPAM ASSASSIN 
-- HELP I'M SCREWED GROUP!!!
2) If you really want to get rid of SPAM there are quite a few better 
ways then blocking by content (unless your in a corporate environment 
and this won't piss off your users).

One of these days instead of just ignoring the shit out of this list 
and deleting all the E-Mails maybe I'll unsubscribe.

In the meantime, I've been waiting for the QMailAdmin version that will 
support the damn aliases in the database for well over a year.

Everyone is complaining about nothing being done in the last 6 months???

It's more like the last year!!!

-Rich

[vchkpw] .qmail-default

[Carlos Miranda]

Title: Mensagem




Hello 
all,
 
I´ve qmail installed 
with visualoffice. On that installations I´ve:
   # cat 
/var/qmail/alias/.qmail-default    
|/var/qmail/bin/checkattach    |/usr/bin/odeiavir    
|/usr/local/visualmail/bin/visualmda -f 
/usr/local/visualmail/config.mda/mda.cfg -d "$EXT@domain.com.br" -Q
    
/var/qmail/bin/checkattach 
and /usr/bin/odeiavir are executed 
for each incomming mail.
 
Having qmail with vpopmail I tried but it didn't 
work:
   # cat 
/home/vpopmail/domains/domain.com.br/.qmail-default
    
|/var/qmail/bin/checkattach    
|/usr/bin/odeiavir    |/home/vpopmail/bin/vdelivermail '' 
bounce-no-mailbox
In both configurations, I am using 
"Maildir".
If possible, I would like 
to have direction on how to make checkattach and odeiavir to work with 
vpopmail.
Best regards,
Carlos

[vchkpw] Re: Tom's fork of vpopmail (and qmailadmin)

[Paul L. Allen]

VeNoMouS writes:

> in short, YES, because how is it related to what any one here reads,

I'm someone here.  I'm reading your latest post.  Surely, by your own
standards, I have a right to reply to it.

> as far as ive seen this has been a post a q and answer forum,

For six months it was a q and no a forum.  That is what some of us
think of as a problem and which to address so that once more thare
are a's in response to q's.

> not hi im gonna state my fucking opinion on what ever the fuck i feel 
> like,

If I understand you correctly, you agree with posts that are questions
and posts that are answers but NOT posts that are opinions.  And yet
the ONLY posts I have seen from you have been opinions.  Please
explain.

> who died and made you ceo of inter7?

Nobody did, any more than they made YOU CEO of Inter 7.  And yet you
feel entitled to post your opinion here while denying me mine.  I
will also point out that in the last six months Inter 7 has done
absolutely nothing to support vpopmail while Tom has.  So if you were
to ask me who died and made me the CEO of Tom Collins your question
would have slightly more relevance.

> as i said before, take it to personal emails and leave us the fuck out of
> your bitching.

If you want to bitch to me without bothering the list, I suggest that
YOU take it to personal e-mail first.  If you convince me in personal
e-mail that you are right the I will apologise to the list.  If you
continue to attack me on the list I will continue to respond.  The
choice is yours, even though I suspect you are too stupid to understand
the options.

And you still have not learned how to unnecessarily quote all of
the mail that you are responding to, even after being fed large doses
of clue.  The cluephone is ringing, it is for you, but your service
has been disconnected...

-- 
Paul Allen
Softflare Support

[vchkpw] Re: Tom's fork of vpopmail (and qmailadmin)

[VeNoMouS]

in short, YES, because how is it related to what any one here reads, as far
as ive seen this has been a post a q and answer forum, not hi im gonna state
my fucking opinion on what ever the fuck i feel like, who died and made you
ceo of inter7?

as i said before, take it to personal emails and leave us the fuck out of
your bitching.

EOF.


- Original Message - 
From: "Paul L. Allen" <[EMAIL PROTECTED]>
To: "VeNoMouS" <[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>
Sent: Thursday, September 11, 2003 12:24 PM
Subject: Re: Tom's fork of vpopmail (and qmailadmin)


>
> VeNoMouS writes:
>
> [A load of crap]
>
> So you quote the WHOLE of my mail to lecture me about wasting bandwidth
> and brainwidth in the mailing list and post it to the mailing list.
>
> Please find a dictionary and look up the meaning of the folliwing words:
> "hypocrite" and "moron."
>
> -- 
> Paul Allen
> Softflare Support
>
>

Re: [vchkpw] Re: Tom's fork of vpopmail (and qmailadmin)

[Rick Macdougall]

Hi,

I apparently made a mistake between Paul Theodoropoulos and Paul Allen 
in replying to some emails written to the list.  I apologise for the 
mis-understanding.

Regards,

Rick

Paul Theodoropoulos wrote:


Hi,

Sorry if that's the case.  Entirely possible.  I was just responding 
to the last piece of the thread.

I'm human, I make mistakes :)

Regards,

Rick

Paul Theodoropoulos wrote:

Rick, you are confusing me with Paul Allen. I am not Paul Allen. We 
are two different people. Paul Allen has posted repeatedly and 
aggressively today. I have not.


Paul Theodoropoulos
http://www.anastrophe.com

[vchkpw] Re: Tom's fork of vpopmail (and qmailadmin)

[Paul L. Allen]

VeNoMouS writes:

[A load of crap]

So you quote the WHOLE of my mail to lecture me about wasting bandwidth
and brainwidth in the mailing list and post it to the mailing list.

Please find a dictionary and look up the meaning of the folliwing words:
"hypocrite" and "moron."

-- 
Paul Allen
Softflare Support

Re: [vchkpw] OT: vpopmail & spamd & user prefs

[Bill Shupp]

On Wednesday, September 10, 2003, at 04:22  PM, Alex Martin wrote:

Please post this answer to the list!
I have been searching for this answer for two days now, and I was 
about to
post to this list. I think a lot of people would like to know this.
-Alex
Ok, here's where I'm at now:

I upgraded to spamassassin 2.55, and am starting spamd like so from 
daemontools:

#!/bin/sh
exec /usr/bin/spamd -c -D -F0 -L -u vpopmail -v
And spamc is called via maildrop with these options:

/usr/bin/spamc -f -u [EMAIL PROTECTED]

It's now working, but spamd seems to create 
~/.spamassassin/.spamassassin on the first creation attempt, and 
reports and error that it could not create the prefs file.  Upon second 
attempt, it creates it successfully.  Still trying to pinpoint where 
that's breaking, but other than that it works.

I'm using this in the context of WebUserPrefs, a PHP config tool for 
SpamAssassin, plus a new panel that allows for optional deletion of 
spam.  Once I get all this working smoothly, I'll post some docs on how 
it's working for me.  Looks pretty cool, tho.

Cheers,

Bill Shupp

Re: [vchkpw] Re: Tom's fork of vpopmail (and qmailadmin)

[VeNoMouS]

dude get a fucking hint, WE DONT CARE ABOUT THIS BS IN THE PUBLIC FORUM!
- Original Message - 
From: "Paul L. Allen" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, September 11, 2003 11:47 AM
Subject: [vchkpw] Re: Tom's fork of vpopmail (and qmailadmin)


>
> Hello Rick
>
> Rick Macdougall writes:
>
> > I think Tom and Ken have resolved their issues off list
>
> So it appears.  Ken has not resolved my issue with his involvement with
> vpopmail.
>
> > and we
>
> We???  Do you claim to speak for everyone on the list?  Surely not
> because at best you can speak for everyone on the list EXCEPT me.
> And I suspect there may be one or two others you do not speak for
> either.
>
> > would appreciate it if you did the same.
>
> Gosh, wouldn't it have been a good idea if you wanted to avoid
> unnecessary traffic on the list if you had mailed me DIRECTLY instead
> of posting to the list?  If you want to make your point ON the list then
> you have to allow me to respond there.  Well, whether you allow me or
> not, that's what I'm gonna do.
>
> If you want to discuss this by mail then feel free to take it there.  If
> you want to rebuke me on the list, however nicely, then expect me to
> respond there.  As I explained to somebody else today, all you get to
> control is what you read and write and where you post it.  You do not get
> to control what I read and write and where I post that.  Any attempt to
> claim the moral high ground about unnecessary traffic to the list which
> is POSTED TO THE LIST will get the rebuke it deserves ON the list.
>
> > If Tom or Ken has an issue, it may belong on the list, if you personally
> > have an issue with Inter7 and/or Tom it does not.
>
> I disagree with your statement, for which you have provided no backing.
> If I disagree with Ken being an admin and can provide a compelling
> argument for my belief then that DOES belong on the list.  I believe I
> have provided grounds why Ken is not a suitable choice for an admin.
> Perhaps you would care to provide some reasoning, however slender, why
> I should not take issue with Ken here.
>
> > Thank you in advance for your understanding.
>
> You are ever the optimist...
>
> -- 
> Paul Allen
> Softflare Support
>
>
>

[vchkpw] How to package up a new release?

[Ken Jones]

Untill CVS is up and running, how would I go about
packaging up a new release?

Would it be as simple as:
1) get the current tarball
2) apply changes to my local copy
3) test test test
4) tar up the package with a new version number
5) upload to source forge?

Ken Jones

[vchkpw] Re: Tom's fork of vpopmail (and qmailadmin)

[Paul L. Allen]

Hello Rick

Rick Macdougall writes:

> I think Tom and Ken have resolved their issues off list

So it appears.  Ken has not resolved my issue with his involvement with
vpopmail.

> and we

We???  Do you claim to speak for everyone on the list?  Surely not
because at best you can speak for everyone on the list EXCEPT me.
And I suspect there may be one or two others you do not speak for
either.

> would appreciate it if you did the same.

Gosh, wouldn't it have been a good idea if you wanted to avoid
unnecessary traffic on the list if you had mailed me DIRECTLY instead
of posting to the list?  If you want to make your point ON the list then
you have to allow me to respond there.  Well, whether you allow me or
not, that's what I'm gonna do.

If you want to discuss this by mail then feel free to take it there.  If
you want to rebuke me on the list, however nicely, then expect me to
respond there.  As I explained to somebody else today, all you get to
control is what you read and write and where you post it.  You do not get
to control what I read and write and where I post that.  Any attempt to
claim the moral high ground about unnecessary traffic to the list which
is POSTED TO THE LIST will get the rebuke it deserves ON the list.

> If Tom or Ken has an issue, it may belong on the list, if you personally 
> have an issue with Inter7 and/or Tom it does not.

I disagree with your statement, for which you have provided no backing.
If I disagree with Ken being an admin and can provide a compelling
argument for my belief then that DOES belong on the list.  I believe I
have provided grounds why Ken is not a suitable choice for an admin.
Perhaps you would care to provide some reasoning, however slender, why
I should not take issue with Ken here.

> Thank you in advance for your understanding.

You are ever the optimist...

-- 
Paul Allen
Softflare Support

Re: [vchkpw] OT: vpopmail & spamd & user prefs

[Rick Macdougall]

Hi,

Alex Martin wrote:

Please post this answer to the list!
I have been searching for this answer for two days now, and I was about to
post to this list. I think a lot of people would like to know this.
-Alex
- Original Message - 
From: "Bill Shupp" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, September 10, 2003 4:51 PM
Subject: [vchkpw] OT: vpopmail & spamd & user prefs



Hello,

Has anyone successfully gotten spamc/spamd to create user preference
files for vpopmail users?
I.E. `~vpopmail/bin/vuserinfo -d`/.spamassasin/user_prefs

If so, could you send me your configuration info off-list?

Thanks,

Bill Shupp


We will, I know it did work at one point because I used it before 
switching to MySQL prefs.  As soon as we figure out the correct config, 
we will post the solution.

Regards,

Rick

Re: [vchkpw] OT: vpopmail & spamd & user prefs

[Alex Martin]

Please post this answer to the list!
I have been searching for this answer for two days now, and I was about to
post to this list. I think a lot of people would like to know this.
-Alex
- Original Message - 
From: "Bill Shupp" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, September 10, 2003 4:51 PM
Subject: [vchkpw] OT: vpopmail & spamd & user prefs


> Hello,
>
> Has anyone successfully gotten spamc/spamd to create user preference
> files for vpopmail users?
>
> I.E. `~vpopmail/bin/vuserinfo -d`/.spamassasin/user_prefs
>
> If so, could you send me your configuration info off-list?
>
> Thanks,
>
> Bill Shupp
>
>
>

Re: [vchkpw] Re: Tom's fork of vpopmail (and qmailadmin)

[Rick Macdougall]

Hi Paul,

I think Tom and Ken have resolved their issues off list and we would 
appreciate it if you did the same.  I've held off posting on this topic 
for a long time now just because I didn't want to waste more bandwidth.

If Tom or Ken has an issue, it may belong on the list, if you personally 
have an issue with Inter7 and/or Tom it does not.

Thank you in advance for your understanding.

Oh, just explained the whole scenario to my wife and now she wants a 
"Tom Collins" drink :)

Regards,

Rick

Paul Theodoropoulos wrote:

ahem. likewise, or is the sauce only good for the goose?

At 03:55 PM 9/10/2003, VeNoMouS wrote:

*WANK WANK*

is this really nessicary for the public fourm?? shouldnt this be handled
with personal email rather then pulling us all into it??

Re: [vchkpw] Re: Tom's fork of vpopmail (and qmailadmin)

[Paul Theodoropoulos]

ahem. likewise, or is the sauce only good for the goose?

At 03:55 PM 9/10/2003, VeNoMouS wrote:
*WANK WANK*

is this really nessicary for the public fourm?? shouldnt this be handled
with personal email rather then pulling us all into it??
- Original Message -
From: "Paul L. Allen" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>
Sent: Thursday, September 11, 2003 10:27 AM
Subject: [vchkpw] Re: Tom's fork of vpopmail (and qmailadmin)
>
> Robert Kropiewnicki writes:
>
> > I've spoken definitively to no such thing.  What Ken Jones will do now
> > that he has been granted admin access (bravo Tom!) is not at the core of
> > my argument.  My argument is that he has done enough in the past for
> > vpopmail development to warrant his inclusion as an admin.
>
> I disagree with you there.  What Ken did in the past prior to the
> last six months is sufficient to get him many mentions and many praises.
> And if he had continued doing the same in the past six months then he
> would still be project leader.  It is those past six months, and the
> responses from Inter 7 in the past few days, which are critical.
>
> I give you a preview of the next UK Olympics Selection Committee
> meeting...
>
>   A: who are we going to select for the 1500 metres?
>
>   B: I suggest Roger Bannister.  He was the first person to run
>   the mile in under 4 minutes.  He has a proven track record.
>
>   C: *groan*  Bad pun!
>
>   D: I want to know how he has performed recently.  Surely that is
>   important.
>
>   B: It doesn't matter how he has performed recently.  What matters
>   is that he used to be the best!
>
>   E: Do any of you bozos know that Roger Bannister is DEAD?
>
>   B: That doesn't matter.  What matters is that he once broke an
>   important world record.  Therefore we should select him.
>
> > Many of the projects I spoke about in terms of personal experience had
> > more to do with internal infrastructure projects.  Actually, it was
> > projects for external paying clients that would often be the reason they
> > were put on hold.  With any business, the needs of the paying clients
> > come first.
>
> You said it.  With Inter 7, as long as people keep paying them to install
> vpopmail BECAUSE they have their name on the project, their motivation in
> times of difficulty will be to divert resources to paying clients and let
> vpopmail development go unattended for six months.  In fact they DID
> let vpopmail development go unattended for six months and only paid
> attention to it once more when it appeared that the Inter 7 name would
> no longer be listed as its developer.
>
> If it takes that to motivate them into paying attention to this list then
> they are NOT good candidates for an admin position.  Because if they can
> delete the other admins then we return to a situation where vpopmail
> development is a lower priority than Inter 7's paying customers and can
> be neglected for half a year at a time.
>
> > For the most part I can agree with this argument.  If Ken were going to
> > have complete and total administrative control again to the exclusion of
> > Tom, I would completely agree with this argument.
>
> As I understand Tom's assessment of things, if Ken has equal powers
> to Tom then Ken can kick Tom out.  As I understand the mail from the
> Cat, that is something I consider to have a significant probability of
> happening.
>
> > However, as it stands right now, Ken and Tom are both listed as
> > administrators
>
> Can one administrator delete the other administrators?  Can one
> administrator copy the whole CVS tree then delete it?  As I understand
> it, Tom's only defence against a sneak attack of that nature is to
> maintain his own local CVS tree (which is a pain).
>
> Would Inter 7 do anything like that to re-assert the brand ownership
> of vpopmail so that they continue to be the first port of call for people
> who have problems and are willing to pay for answers?  I don't know.  But
> after the Cat's catty mail and Ken's equivocating mail I cannot deny the
> possibility.  That may be grossly unfair to Inter 7, but they are the ones
> who control what they did and what they wrote, not I.  If what they did
and
> wrote causes me, and many others, to distrust them then that is their
> fault.
>
> If I needed urgent support, so urgent that paying an outside consultant
> were warranted, then Tom would be top of my list and Inter 7 would be
> the very bottom, just below the option of selling my soul to the devil
> for an answer.  The position of Inter 7 on my list is absolutely nothing
> to do with anything that Tom has done and everything to do with what Inter
> 7 have failed to do for six months and have done for the past few days.
>
> As a user of vpopmail, I am no longer happy with an Inter 7 involvement of
> any kind.
>
> --
>  Paul Allen
> Softflare Support
>
>
Paul Theodoropoulos
http://www.anastrophe.com

Re: [vchkpw] Re: Tom's fork of vpopmail (and qmailadmin)

[VeNoMouS]

*WANK WANK*

is this really nessicary for the public fourm?? shouldnt this be handled
with personal email rather then pulling us all into it??

- Original Message - 
From: "Paul L. Allen" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>
Sent: Thursday, September 11, 2003 10:27 AM
Subject: [vchkpw] Re: Tom's fork of vpopmail (and qmailadmin)


>
> Robert Kropiewnicki writes:
>
> > I've spoken definitively to no such thing.  What Ken Jones will do now
> > that he has been granted admin access (bravo Tom!) is not at the core of
> > my argument.  My argument is that he has done enough in the past for
> > vpopmail development to warrant his inclusion as an admin.
>
> I disagree with you there.  What Ken did in the past prior to the
> last six months is sufficient to get him many mentions and many praises.
> And if he had continued doing the same in the past six months then he
> would still be project leader.  It is those past six months, and the
> responses from Inter 7 in the past few days, which are critical.
>
> I give you a preview of the next UK Olympics Selection Committee
> meeting...
>
>   A: who are we going to select for the 1500 metres?
>
>   B: I suggest Roger Bannister.  He was the first person to run
>   the mile in under 4 minutes.  He has a proven track record.
>
>   C: *groan*  Bad pun!
>
>   D: I want to know how he has performed recently.  Surely that is
>   important.
>
>   B: It doesn't matter how he has performed recently.  What matters
>   is that he used to be the best!
>
>   E: Do any of you bozos know that Roger Bannister is DEAD?
>
>   B: That doesn't matter.  What matters is that he once broke an
>   important world record.  Therefore we should select him.
>
> > Many of the projects I spoke about in terms of personal experience had
> > more to do with internal infrastructure projects.  Actually, it was
> > projects for external paying clients that would often be the reason they
> > were put on hold.  With any business, the needs of the paying clients
> > come first.
>
> You said it.  With Inter 7, as long as people keep paying them to install
> vpopmail BECAUSE they have their name on the project, their motivation in
> times of difficulty will be to divert resources to paying clients and let
> vpopmail development go unattended for six months.  In fact they DID
> let vpopmail development go unattended for six months and only paid
> attention to it once more when it appeared that the Inter 7 name would
> no longer be listed as its developer.
>
> If it takes that to motivate them into paying attention to this list then
> they are NOT good candidates for an admin position.  Because if they can
> delete the other admins then we return to a situation where vpopmail
> development is a lower priority than Inter 7's paying customers and can
> be neglected for half a year at a time.
>
> > For the most part I can agree with this argument.  If Ken were going to
> > have complete and total administrative control again to the exclusion of
> > Tom, I would completely agree with this argument.
>
> As I understand Tom's assessment of things, if Ken has equal powers
> to Tom then Ken can kick Tom out.  As I understand the mail from the
> Cat, that is something I consider to have a significant probability of
> happening.
>
> > However, as it stands right now, Ken and Tom are both listed as
> > administrators
>
> Can one administrator delete the other administrators?  Can one
> administrator copy the whole CVS tree then delete it?  As I understand
> it, Tom's only defence against a sneak attack of that nature is to
> maintain his own local CVS tree (which is a pain).
>
> Would Inter 7 do anything like that to re-assert the brand ownership
> of vpopmail so that they continue to be the first port of call for people
> who have problems and are willing to pay for answers?  I don't know.  But
> after the Cat's catty mail and Ken's equivocating mail I cannot deny the
> possibility.  That may be grossly unfair to Inter 7, but they are the ones
> who control what they did and what they wrote, not I.  If what they did
and
> wrote causes me, and many others, to distrust them then that is their
> fault.
>
> If I needed urgent support, so urgent that paying an outside consultant
> were warranted, then Tom would be top of my list and Inter 7 would be
> the very bottom, just below the option of selling my soul to the devil
> for an answer.  The position of Inter 7 on my list is absolutely nothing
> to do with anything that Tom has done and everything to do with what Inter
> 7 have failed to do for six months and have done for the past few days.
>
> As a user of vpopmail, I am no longer happy with an Inter 7 involvement of
> any kind.
>
> -- 
>  Paul Allen
> Softflare Support
>
>

RE: [vchkpw] OT: vpopmail & spamd & user prefs

[Remo Mattei]

That would be great if I can get that too. Thanks Bill, 


Remo Mattei
Network Security Engineer
cell 801-209-8554
email [EMAIL PROTECTED]

-Original Message-
From: Bill Shupp [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, September 10, 2003 4:52 PM
To: [EMAIL PROTECTED]
Subject: [vchkpw] OT: vpopmail & spamd & user prefs

Hello,

Has anyone successfully gotten spamc/spamd to create user preference 
files for vpopmail users?

I.E. `~vpopmail/bin/vuserinfo -d`/.spamassasin/user_prefs

If so, could you send me your configuration info off-list?

Thanks,

Bill Shupp

Re: [vchkpw] Unable to access mail using POP and domain issues with vpopmail

[VeNoMouS]

what is the actal problem again, as we fixed so many for you.


- Original Message - 
From: "Balaji NJL" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, September 11, 2003 10:25 AM
Subject: RE: [vchkpw] Unable to access mail using POP and domain issues with
vpopmail


> resending this. i think this got drowned in the flood
> of other mails. can some one help me on this pl. i
> appreciate it.
>
> -B
> --- Balaji NJL <[EMAIL PROTECTED]> wrote:
> > domain: ojoobala.com
> > uid:89
> > gid:89
> > dir:/home/vpopmail/domains/ojoobala.com
> > users:  3
> >
> > --- Shane Chrisp <[EMAIL PROTECTED]> wrote:
> > > If you type vdominfo ojoobala.com what output does
> > > it
> > > show for dir?
> > >
> > > >-Original Message-
> > > >From: Balaji NJL [mailto:[EMAIL PROTECTED]
> > > >Sent: Tuesday, 9 September 2003 11:03 PM
> > > >To: [EMAIL PROTECTED]; [EMAIL PROTECTED]
> > > >Subject: RE: [vchkpw] Unable to access mail using
> > > POP and
> > > >domain issues with vpopmail
> > > >
> > > >
> > > >yes it does hv Maildir under
> > > >/home/vpopmail/domains/ojoobala.com/balaji
> > > >
> > > >the permissions are vpopmail/vchkpw. Maildir has
> > > the
> > > >following dir cur, new and tmp. it also contains
> > > sqweb
> > > >configuration details. All the directories hv
> > 700.
> > > >
> > > >i feel vpop is looking for Maildir under
> > > >/home/balaji/Maildir but not under
> > > >/home/vpopmail/domains/balaji/maildir. How to
> > check
> > > >where its looking for the maildir.
> > > >
> > > >Sqwebmail is working fine. it authenticates me
> > > >correctly and i am able to send and receive mail.
> > > >
> > > >-B
> > > >--- Shane Chrisp <[EMAIL PROTECTED]> wrote:
> > > >> The user should have a maildir under
> > > >> ~/vpopmail/domains/ojoobala.com/myname/
> > > >> and it should be owned vpopmail.vchkpw with
> > > >> permissions 700.
> > > >>
> > > >> Check that this is the case.
> > > >>
> > > >> Shane
> > > >>
> > > >>
> > > >> >-Original Message-
> > > >> >From: Balaji NJL [mailto:[EMAIL PROTECTED]
> > > >> >Sent: Monday, 8 September 2003 12:53 PM
> > > >> >To: Tom Collins; vpopmail list
> > > >> >Subject: Re: [vchkpw] Unable to access mail
> > > using
> > > >> POP and
> > > >> >domain issues with vpopmail
> > > >> >
> > > >> >
> > > >> >i did that.
> > > >> >
> > > >> >now i am getting [EMAIL PROTECTED] and
> > > >> >[EMAIL PROTECTED]  both delivered to my
> > > >> >ojoobala.com account. i am able to check the
> > > mails
> > > >> >using sqwebmail. but i am still unable to
> > check
> > > it
> > > >> via
> > > >> >outlook express by POP. this is the error i am
> > > >> getting
> > > >> >
> > > >> >There was a problem logging onto your mail
> > > server.
> > > >> >Your Password was rejected. Account:
> > > '192.168.0.3',
> > > >> >Server: '192.168.0.3', Protocol: POP3, Server
> > > >> >Response: '-ERR this user has no
> > $HOME/Maildir',
> > > >> Port:
> > > >> >110, Secure(SSL): No, Server Error:
> > 0x800CCC90,
> > > >> Error
> > > >> >Number: 0x800CCC92
> > > >> >
> > > >> >i also tried this on my mailserver directly
> > > >> >
> > > >> >telnet localhost 110
> > > >> >user [EMAIL PROTECTED]
> > > >> >pass x
> > > >> >-ERR this user has no $HOME/Maildir
> > > >> >
> > > >> >this is true because this is a virtual user
> > and
> > > >> this
> > > >> >user doesnt hv Maildir.
> > > >> >
> > > >> >Any ideas whats happening...thanks,
> > > >> >-B
> > > >> >--- Balaji NJL <[EMAIL PROTECTED]> wrote:
> > > >> >> you mean...
> > > >> >> ./vdeldomain mail.ojoobala.com
> > > >> >> and
> > > >> >> ./vadddomain ojoobala.com
> > > >> >> and
> > > >> >> ./vaddaliasdomain mail.ojoobala.com
> > > ojoobala.com
> > > >> >>   
> > > >> >> Would this also solve my POP access problem.
> > > >> >>
> > > >> >> thanks,
> > > >> >> -B
> > > >> >>
> > > >> >>
> > > >> >> --- Tom Collins <[EMAIL PROTECTED]> wrote:
> > > >> >> > On Thursday, September 4, 2003, at 08:08
> > > AM,
> > > >> >> Balaji
> > > >> >> > NJL wrote:
> > > >> >> > > i think the reason why it happens is
> > that
> > > >> >> vopomail
> > > >> >> > > doesnt know anything about ojoobala.com.
> > i
> > > >> >> > compiled
> > > >> >> > > ./vadddomain as mail.ojoobala.com. the
> > > only
> > > >> >> domain
> > > >> >> > i
> > > >> >> > > see under home/vpopmail/domain is
> > > >> >> > mail.ojoobala.com
> > > >> >> > > but no ojoobala.com.
> > > >> >> >
> > > >> >> > vaddaliasdomain ojoobala.com
> > > mail.ojoobala.com
> > > >> >> >
> > > >> >> > You might want to actually delete
> > > >> >> mail.ojoobala.com,
> > > >> >> > add ojoobala.com
> > > >> >> > as the domain, and re-create
> > > mail.ojoobala.com
> > > >> as
> > > >> >> > the alias.
> > > >> >> >
> > > >> >> > Make sure mail.ojoobala.com and
> > ojoobala.com
> > > >> don't
> > > >> >> > appear in
> > > >> >> > control/locals, but do appear in
> > > >> >> control/rcpthosts,
> > > >> >> > control/virtualdomains and users/assign.
> > > >> >> >
> > > >> >> > --

[vchkpw] OT: vpopmail & spamd & user prefs

[Bill Shupp]

Hello,

Has anyone successfully gotten spamc/spamd to create user preference 
files for vpopmail users?

I.E. `~vpopmail/bin/vuserinfo -d`/.spamassasin/user_prefs

If so, could you send me your configuration info off-list?

Thanks,

Bill Shupp

[vchkpw] Re: Tom's fork of vpopmail (and qmailadmin)

[Paul L. Allen]

Robert Kropiewnicki writes:

> I've spoken definitively to no such thing.  What Ken Jones will do now
> that he has been granted admin access (bravo Tom!) is not at the core of
> my argument.  My argument is that he has done enough in the past for
> vpopmail development to warrant his inclusion as an admin.

I disagree with you there.  What Ken did in the past prior to the
last six months is sufficient to get him many mentions and many praises.
And if he had continued doing the same in the past six months then he
would still be project leader.  It is those past six months, and the
responses from Inter 7 in the past few days, which are critical.

I give you a preview of the next UK Olympics Selection Committee
meeting...

  A: who are we going to select for the 1500 metres?

  B: I suggest Roger Bannister.  He was the first person to run
  the mile in under 4 minutes.  He has a proven track record.

  C: *groan*  Bad pun!

  D: I want to know how he has performed recently.  Surely that is
  important.

  B: It doesn't matter how he has performed recently.  What matters
  is that he used to be the best!

  E: Do any of you bozos know that Roger Bannister is DEAD?

  B: That doesn't matter.  What matters is that he once broke an
  important world record.  Therefore we should select him.

> Many of the projects I spoke about in terms of personal experience had
> more to do with internal infrastructure projects.  Actually, it was
> projects for external paying clients that would often be the reason they
> were put on hold.  With any business, the needs of the paying clients
> come first.

You said it.  With Inter 7, as long as people keep paying them to install
vpopmail BECAUSE they have their name on the project, their motivation in
times of difficulty will be to divert resources to paying clients and let
vpopmail development go unattended for six months.  In fact they DID
let vpopmail development go unattended for six months and only paid
attention to it once more when it appeared that the Inter 7 name would
no longer be listed as its developer.

If it takes that to motivate them into paying attention to this list then
they are NOT good candidates for an admin position.  Because if they can
delete the other admins then we return to a situation where vpopmail
development is a lower priority than Inter 7's paying customers and can
be neglected for half a year at a time.

> For the most part I can agree with this argument.  If Ken were going to
> have complete and total administrative control again to the exclusion of
> Tom, I would completely agree with this argument.

As I understand Tom's assessment of things, if Ken has equal powers
to Tom then Ken can kick Tom out.  As I understand the mail from the
Cat, that is something I consider to have a significant probability of
happening.

> However, as it stands right now, Ken and Tom are both listed as 
> administrators

Can one administrator delete the other administrators?  Can one
administrator copy the whole CVS tree then delete it?  As I understand
it, Tom's only defence against a sneak attack of that nature is to
maintain his own local CVS tree (which is a pain).

Would Inter 7 do anything like that to re-assert the brand ownership
of vpopmail so that they continue to be the first port of call for people
who have problems and are willing to pay for answers?  I don't know.  But
after the Cat's catty mail and Ken's equivocating mail I cannot deny the
possibility.  That may be grossly unfair to Inter 7, but they are the ones
who control what they did and what they wrote, not I.  If what they did and
wrote causes me, and many others, to distrust them then that is their
fault.

If I needed urgent support, so urgent that paying an outside consultant
were warranted, then Tom would be top of my list and Inter 7 would be
the very bottom, just below the option of selling my soul to the devil
for an answer.  The position of Inter 7 on my list is absolutely nothing
to do with anything that Tom has done and everything to do with what Inter
7 have failed to do for six months and have done for the past few days.

As a user of vpopmail, I am no longer happy with an Inter 7 involvement of
any kind.

-- 
 Paul Allen
Softflare Support

RE: [vchkpw] Unable to access mail using POP and domain issues with vpopmail

[Balaji NJL]

resending this. i think this got drowned in the flood
of other mails. can some one help me on this pl. i
appreciate it.

-B
--- Balaji NJL <[EMAIL PROTECTED]> wrote:
> domain: ojoobala.com
> uid:89
> gid:89
> dir:/home/vpopmail/domains/ojoobala.com
> users:  3
> 
> --- Shane Chrisp <[EMAIL PROTECTED]> wrote:
> > If you type vdominfo ojoobala.com what output does
> > it
> > show for dir?
> > 
> > >-Original Message-
> > >From: Balaji NJL [mailto:[EMAIL PROTECTED] 
> > >Sent: Tuesday, 9 September 2003 11:03 PM
> > >To: [EMAIL PROTECTED]; [EMAIL PROTECTED]
> > >Subject: RE: [vchkpw] Unable to access mail using
> > POP and 
> > >domain issues with vpopmail
> > >
> > >
> > >yes it does hv Maildir under
> > >/home/vpopmail/domains/ojoobala.com/balaji
> > >
> > >the permissions are vpopmail/vchkpw. Maildir has
> > the
> > >following dir cur, new and tmp. it also contains
> > sqweb
> > >configuration details. All the directories hv
> 700.
> > >
> > >i feel vpop is looking for Maildir under
> > >/home/balaji/Maildir but not under
> > >/home/vpopmail/domains/balaji/maildir. How to
> check
> > >where its looking for the maildir.
> > >
> > >Sqwebmail is working fine. it authenticates me
> > >correctly and i am able to send and receive mail.
> > >
> > >-B
> > >--- Shane Chrisp <[EMAIL PROTECTED]> wrote:
> > >> The user should have a maildir under
> > >> ~/vpopmail/domains/ojoobala.com/myname/
> > >> and it should be owned vpopmail.vchkpw with
> > >> permissions 700.
> > >> 
> > >> Check that this is the case.
> > >> 
> > >> Shane
> > >> 
> > >> 
> > >> >-Original Message-
> > >> >From: Balaji NJL [mailto:[EMAIL PROTECTED] 
> > >> >Sent: Monday, 8 September 2003 12:53 PM
> > >> >To: Tom Collins; vpopmail list
> > >> >Subject: Re: [vchkpw] Unable to access mail
> > using
> > >> POP and 
> > >> >domain issues with vpopmail
> > >> >
> > >> >
> > >> >i did that.
> > >> >
> > >> >now i am getting [EMAIL PROTECTED] and
> > >> >[EMAIL PROTECTED]  both delivered to my
> > >> >ojoobala.com account. i am able to check the
> > mails
> > >> >using sqwebmail. but i am still unable to
> check
> > it
> > >> via
> > >> >outlook express by POP. this is the error i am
> > >> getting
> > >> >
> > >> >There was a problem logging onto your mail
> > server.
> > >> >Your Password was rejected. Account:
> > '192.168.0.3',
> > >> >Server: '192.168.0.3', Protocol: POP3, Server
> > >> >Response: '-ERR this user has no
> $HOME/Maildir',
> > >> Port:
> > >> >110, Secure(SSL): No, Server Error:
> 0x800CCC90,
> > >> Error
> > >> >Number: 0x800CCC92
> > >> >
> > >> >i also tried this on my mailserver directly
> > >> >
> > >> >telnet localhost 110
> > >> >user [EMAIL PROTECTED]
> > >> >pass x
> > >> >-ERR this user has no $HOME/Maildir
> > >> >
> > >> >this is true because this is a virtual user
> and
> > >> this
> > >> >user doesnt hv Maildir.
> > >> >
> > >> >Any ideas whats happening...thanks,
> > >> >-B
> > >> >--- Balaji NJL <[EMAIL PROTECTED]> wrote:
> > >> >> you mean...
> > >> >> ./vdeldomain mail.ojoobala.com
> > >> >> and 
> > >> >> ./vadddomain ojoobala.com
> > >> >> and
> > >> >> ./vaddaliasdomain mail.ojoobala.com
> > ojoobala.com
> > >> >>   
> > >> >> Would this also solve my POP access problem.
> > >> >> 
> > >> >> thanks,
> > >> >> -B
> > >> >> 
> > >> >> 
> > >> >> --- Tom Collins <[EMAIL PROTECTED]> wrote:
> > >> >> > On Thursday, September 4, 2003, at 08:08 
> > AM,
> > >> >> Balaji
> > >> >> > NJL wrote:
> > >> >> > > i think the reason why it happens is
> that
> > >> >> vopomail
> > >> >> > > doesnt know anything about ojoobala.com.
> i
> > >> >> > compiled
> > >> >> > > ./vadddomain as mail.ojoobala.com. the
> > only
> > >> >> domain
> > >> >> > i
> > >> >> > > see under home/vpopmail/domain is
> > >> >> > mail.ojoobala.com
> > >> >> > > but no ojoobala.com.
> > >> >> > 
> > >> >> > vaddaliasdomain ojoobala.com
> > mail.ojoobala.com
> > >> >> > 
> > >> >> > You might want to actually delete
> > >> >> mail.ojoobala.com,
> > >> >> > add ojoobala.com 
> > >> >> > as the domain, and re-create
> > mail.ojoobala.com
> > >> as
> > >> >> > the alias.
> > >> >> > 
> > >> >> > Make sure mail.ojoobala.com and
> ojoobala.com
> > >> don't
> > >> >> > appear in 
> > >> >> > control/locals, but do appear in
> > >> >> control/rcpthosts, 
> > >> >> > control/virtualdomains and users/assign.
> > >> >> > 
> > >> >> > --
> > >> >> > Tom Collins
> > >> >> > [EMAIL PROTECTED]
> > >> >> > http://sniffter.com/ - info on the
> Sniffter
> > >> >> > hand-held Network Tester
> > >> >> > 
> > >> >> > 
> > >> >> 
> > >> >> 
> > >> >> __
> > >> >> Do you Yahoo!?
> > >> >> Yahoo! SiteBuilder - Free, easy-to-use web
> > site
> > >> >> design software
> > >> >> http://sitebuilder.yahoo.com
> > >> >> 
> > >> >
> > >> >
> > >> >__
> > >> >Do you Yahoo!?
> > >> >Yahoo! SiteBuilder - Free, easy-to-use web
> site
> > >> design software
> > >> >http://sit

Re: [vchkpw] UPGRADE to MD5 encryption

[VeNoMouS]

it should, as the md5 holds a salt and it also defines as being MD5 with $1
in the front then $2 for the salt then $ for the rest of the md5 hash, if
there isnt any detection in the src it should be added, im to hashed from
last nite partying to go over the code, some 1 else do it...

k thnx bye
- Original Message - 
From: "Mike Miller" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, September 11, 2003 6:14 AM
Subject: [vchkpw] UPGRADE to MD5 encryption


> Wondering if someone can answer this for me.  I've got maybe 100 domains
> thus yet using crypt() encryption for passwords, as well as storing clear
> text [for CRAM-MD5 encryption requiring the password].
>
> If I just install VPOPMAIL with MD5 support, will it detect which domains
> are crypt and which are MD5?  Some of my domains don't have clear text
> passwords because they haven't changed them since before I started saving
> them.  Will a simple upgrade make all new passwords MD5 and existing
> passwords crypt for a slow migration? as passwords get updated?  I want to
> be able to use both at the same time.
>
> Thoughts?
> -Mike
>
> _
> The new MSN 8: advanced junk mail protection and 2 months FREE*
> http://join.msn.com/?page=features/junkmail
>
>
>

Re: [vchkpw] Vpopmail 5.3.27 released

[Chris Pugh]

Hi,

Seems like a permission problem + a few oddities in
paths .. working now!  Thanks for pointing out the
obvious .. ;-)

Cheers,


Chris.

--- Jonathan Viney <[EMAIL PROTECTED]> wrote:
> Hi,
> 
> Check your permissions on
> /home/vpopmail/lib/libvpopmail.a. Make sure
> the user that you're building courier-imap as can
> read the file :). Or,
> just build courier-imap as root, passing
> --disable-root-check as a
> configure option.
> 
> Let me know if that helps.
> 
> Cheers,
> Jonathan
> 
> On Mon, 2003-09-08 at 07:41, Chris Pugh wrote:
> > Hi folks,
> > 
> > I have a Courier-IMAP 'make check' which bombs out
> > with:
> > 
> > >Compiling modauthvchkpw.c
> > >gcc  -I/home/vpopmail/include -g -O2 -Wall -I.. -
> > >I./..   -o authvchkpw  modauthvchkpw.o
> libauthmod.a
> > >libauth.a ../numlib/libnumlib.a ../md5/libmd5.a
> > ../sha>1/libsha1.a -L/home/vpopmail/lib -lvpopmail
> -lm
> > ->lcrypt 
> > >cannot find -lvpopmail
> > >collect2: ld returned 1 exit status
> > >make[2]: *** [authvchkpw] Error 1
> > >..
> > > .. etc, etc
> > 
> > *No sign of said file on the system, which bit 
> > is supposed to install it? vpopmail is @ 5.2.1
> > in this instance, and working aok 
> > 
> > Any ideas? ( Meantime I'll go through the
> procedure
> > once again .. )
> > 
> > Cheers,
> > 
> > 
> > C.
> > 
> > __
> > Do you Yahoo!?
> > Yahoo! SiteBuilder - Free, easy-to-use web site
> design software
> > http://sitebuilder.yahoo.com
> > 
> > 
> 


__
Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software
http://sitebuilder.yahoo.com

Re: [vchkpw] OT: sourceforge management

[Richard A . Secor]

It figures the programmers at SF would forget the OFF BUTTON!!!



-Rich

On Wednesday, Sep 10, 2003, at 15:17 America/New_York, Shane Chrisp 
wrote:

I think you just need to email the guys at SF. I remember an
email coming out a few months ago about them starting a clean
up of dead or unused projects.
Shane

-Original Message-
From: Ken Jones [mailto:[EMAIL PROTECTED]
Sent: Thursday, 11 September 2003 3:09 AM
To: [EMAIL PROTECTED]
Subject: [vchkpw] OT: sourceforge management
Does anyone know how to delete a project at sourceforge.

A long time ago I registered "theqmailadmin" project.
To avoid confusion, I'd like to remove that project from sourceforge.
Ken Jones

RE: [vchkpw] OT: sourceforge management

[Shane Chrisp]

I think you just need to email the guys at SF. I remember an
email coming out a few months ago about them starting a clean
up of dead or unused projects.

Shane

>-Original Message-
>From: Ken Jones [mailto:[EMAIL PROTECTED] 
>Sent: Thursday, 11 September 2003 3:09 AM
>To: [EMAIL PROTECTED]
>Subject: [vchkpw] OT: sourceforge management
>
>
>Does anyone know how to delete a project at sourceforge.
>
>A long time ago I registered "theqmailadmin" project.
>To avoid confusion, I'd like to remove that project from sourceforge.
>
>Ken Jones
>
>
>

Re: [vchkpw] Thanks: looking forward to a productive working relationship

[Tom Collins]

Just so everyone's clear: I'm done with this thread.  It's gotten way 
out of control and I can't see how it will benefit the 
vpopmail/qmailadmin community at this point.  Ken is now an admin on 
both vpopmail and qmailadmin, and we will work together on SourceForge 
to coordinate further development and make releases.

On Wednesday, September 10, 2003, at 10:25  AM, Ken Jones wrote:
Thanks for adding me as an admin to the vpopmail project.
I hope to contribute towards making a great new stable release.
As do I.  I added Ken last night, and I wish I had posted something to 
the list about it.  Reading through 80+ messages this morning was not 
fun.

As a reminder to everyone, please don't cc members of the list when you 
post to the list.  I don't need two copies of every message.  In the 
case of this list, the mail server that handles email for 
[EMAIL PROTECTED] helps out by sending a third copy...

When I get back to the office on Saturday I will
update the inter7 development page to point to
sourceforge for both vpopmail and qmailadmin.
(currently I am on the road) I'll see today if I can
get the web admin to update the links before then.
I would like to see websites for vpopmail and qmailadmin stored/hosted 
on SourceForge with the ability for developers to make contributions.  
It should be possible to include the entire website in CVS as a 
separate module, making it easy for multiple people to make 
contributions (and have revision control).

Even though Inter7 originated vpopmail and qmailadmin, I feel it would 
be appropriate to limit vendor information and/or endorsements to a 
single page on the site (e.g., companies offering paid support for 
vpopmail).  There are many companies in addition to Inter7 that earn a 
living by installing and supporting vpopmail/qmailadmin systems.

Inter7 has graciously hosted the vchkpw and qmailadmin mailing lists 
for many years.  If the cost of doing so outweighs the benefits, we can 
definitely move them to SourceForge (as vpopmail-users and 
qmailadmin-users).  I've already established qmailadmin-devel and 
vpopmail-devel for the developers to discuss coding issues and 
long-range planning.

I will start testing the latest vpopmail devel release against 
different
versions of vqadmin and qmailadmin for any problems.
I will also start looking into the bug reports. Probably the best
role for me is to support Tom as the primary admin in charge of
releases, new patches/features.
I'm more than happy to have Ken handle that.  I prefer to write code, 
and I only got things going on SF to make it easier to keep track of 
Bug Reports, Feature Requests and Patches.  Once we started adding 
significantly to the source, it was easier to release new versions 
there than to send huge patches to Ken and wait for him to release a 
new version.

Since it looks like we will finally have CVS support I'll have
to bite the bullet and learn how to use it!
Many of us will, but from what I've seen so far, it is a very powerful 
tool for collaborative software development.  I'm looking forward to 
working on vpopmail/qmailadmin with CVS instead of the current patch 
process.  It should even be possible to have CVS generate the ChangeLog 
for each release.

I think that when we're ready for a release, we should be able to tag 
the source with a pre-release tag, have a small group of testers 
download from CVS and verify that it works properly, and then finally 
make a release.

In the next few days could you also add me to the qmailadmin project?
Done.

I just registered the vqadmin and qmailmrtg7 projects at source forge
and will add you as an admin, if you would like, when the projects are
accepted.
No thanks!  :-)

I've had my hands full with qmailadmin and vpopmail.  I'm now getting 
involved in clamdmail, a program like qmail-spamc to integrate ClamAV 
virus scanning into the mail handling process (without incurring the 
overhead of Perl-based qmail-scanner).  It's a good start, but it needs 
some work (it chokes on some messages and doesn't die cleanly).  
Everyone should feel free to join in at !  
I'll be making a new release sometime this week with the recent patches 
I've posted.

--
Tom Collins
[EMAIL PROTECTED]
QmailAdmin: http://qmailadmin.sf.net/  Vpopmail: http://vpopmail.sf.net/
Info on the Sniffter hand-held Network Tester: http://sniffter.com/

[vchkpw] OT: sourceforge management

[Ken Jones]

Does anyone know how to delete a project at sourceforge.

A long time ago I registered "theqmailadmin" project.
To avoid confusion, I'd like to remove that project from sourceforge.

Ken Jones

RE: [vchkpw] Re: Tom's fork of vpopmail (and qmailadmin)

[Ross Davis - DataAnywhere.net]

Well said.  I am another person that has not contributed very much to
wonderful development that Ken and his team have done over past several
years.  Bill has also contributed greatly to this product.  

Any person that has contributed as much to this project as they have
should be have full access and control to these projects on sourceforge.


I understand that Tom has the right to fork the code, but doing so will
only hurt the prodcut that we have come to rely on.

Please don't destroy a great product by forking the code.  This is what
happened with the Interbase/firebird/pheonix database projects.  There
was a lot of interest when there was one fork of the system but after it
was split support went down the tube and the product has all but died.

Keep the development focused on one fork.

Ross Davis
DataAnywhere.net

Re: [vchkpw] UPGRADE to MD5 encryption

[Charles Sprickman]

On Wed, 10 Sep 2003, Ken Jones wrote:

> On Wednesday 10 September 2003 1:14 pm, Mike Miller wrote:
> > Wondering if someone can answer this for me.  I've got maybe 100 domains
> > thus yet using crypt() encryption for passwords, as well as storing clear
> > text [for CRAM-MD5 encryption requiring the password].
> >
> > If I just install VPOPMAIL with MD5 support, will it detect which domains
> > are crypt and which are MD5?
> Yes. The crypt() function does that automatically.

This is also somewhat OS dependant.  The *BSDs for example have a crypt()
that can handle DES, MD5, and Blowfish.  I'm successfully using Blowfish
(accounts were system account users from OpenBSD) after making the
pw_passwd field larger in mysql.

Some OSes have a config file for crypt() that will set the default
encryption method.  "man 3 crypt" should give some indication of how your
OS will behave.

Charles

> > Some of my domains don't have clear text
> > passwords because they haven't changed them since before I started saving
> > them.  Will a simple upgrade make all new passwords MD5 and existing
> > passwords crypt for a slow migration? as passwords get updated?  I want to
> > be able to use both at the same time.
>
> I have tested that when we first added support to generate MD5 passwords.
> I tested it against a domain that had both DES and MD5.
>
> As far as I know, smtp auth with cram-md5 requires the clear text password.
>
> Ken Jones
>
> >
> > Thoughts?
> > -Mike
> >
> > _
> > The new MSN 8: advanced junk mail protection and 2 months FREE*
> > http://join.msn.com/?page=features/junkmail
>
>
>

Re: [vchkpw] UPGRADE to MD5 encryption

[Ken Jones]

On Wednesday 10 September 2003 1:14 pm, Mike Miller wrote:
> Wondering if someone can answer this for me.  I've got maybe 100 domains
> thus yet using crypt() encryption for passwords, as well as storing clear
> text [for CRAM-MD5 encryption requiring the password].
>
> If I just install VPOPMAIL with MD5 support, will it detect which domains
> are crypt and which are MD5? 
Yes. The crypt() function does that automatically. 

> Some of my domains don't have clear text
> passwords because they haven't changed them since before I started saving
> them.  Will a simple upgrade make all new passwords MD5 and existing
> passwords crypt for a slow migration? as passwords get updated?  I want to
> be able to use both at the same time.

I have tested that when we first added support to generate MD5 passwords.
I tested it against a domain that had both DES and MD5.

As far as I know, smtp auth with cram-md5 requires the clear text password.

Ken Jones

>
> Thoughts?
> -Mike
>
> _
> The new MSN 8: advanced junk mail protection and 2 months FREE*
> http://join.msn.com/?page=features/junkmail

Re: [vchkpw] RE: [ ABU1063202463386 ] RE: [vchkpw] Re: Inter7, vpopmail, and open source standards

[JB]

Don't hold your breath. SBC has been flooding us for weeks. We finally 
resorted to blocking IP addresses because we could not get a response 
from their black-hole abuse address.



Shane Chrisp wrote:

I hope that this time the address is unsub'd now. I sent an
unsub request for it.
 

-Original Message-
From: Prodigy Abuse Department [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, 10 September 2003 10:01 PM
To: [EMAIL PROTECTED]
Subject: [ ABU1063202463386 ] RE: [vchkpw] Re: Inter7, 
vpopmail, and open source standards



   Thank you for writing to SBC Internet Services Policy Group. 
We apologize for the inconvenience you have experienced. This 
   



 

[vchkpw] UPGRADE to MD5 encryption

[Mike Miller]

Wondering if someone can answer this for me.  I've got maybe 100 domains 
thus yet using crypt() encryption for passwords, as well as storing clear 
text [for CRAM-MD5 encryption requiring the password].

If I just install VPOPMAIL with MD5 support, will it detect which domains 
are crypt and which are MD5?  Some of my domains don't have clear text 
passwords because they haven't changed them since before I started saving 
them.  Will a simple upgrade make all new passwords MD5 and existing 
passwords crypt for a slow migration? as passwords get updated?  I want to 
be able to use both at the same time.

Thoughts?
-Mike
_
The new MSN 8: advanced junk mail protection and 2 months FREE*  
http://join.msn.com/?page=features/junkmail

Re: [vchkpw] Re: Inter7, vpopmail, and open source standards

[Charles Sprickman]

On Wed, 10 Sep 2003, Paul L. Allen wrote:

> Ms. Catherine Kouzmanoff writes:
>
> > It is a  time to call together everyone on this list to insist that Tom
> > Collins  add Ken Jones or another representative from Inter7.
>
> I've been using vpopmail for a few years now and didn't really care who
> was in control as long as somebody was.  When I saw Ken's comments I
> thought that perhaps Tom had acted a little precipitously in blocking
> Ken.  After seeing your shameful comments I am inclined to think that
> Tom was correct.

I've got a guess as to what's going on, based on the timing of this.  To
anyone on this list, it's obvious that Tom was undertaking some radical
changes in how the project will be *administered*.  There is now a place
for users to submit bug reports, and those that can code to submit
patches.  I also assume that in the future there will be things for people
like myself to do; FAQ entries, documentation, helping with
administering the mailing lists hosted as SF, etc.  These are all positive
changes.

So in the months that Tom has been (not so quietly) doing this, not a peep
from Inter7.  Now a few days ago, Tom solicited help in creating a front
page for the SF project.  This would presumably be a home for
documentation, a FAQ, an install guide, etc.  All items that do not exist.
Right after this announcement, we hear not from Ken, but from the CFO of
Inter7.  Maybe I'm making a leap here, but I think that the loss of the
redirect from "vpopmail.sf.net" to the inter7 site is the problem.

Inter7 is a business, and their business is selling "pop toasters" and
support of their software.  Currently, I must imagine that some amount of
their customer base came there after visiting the vpopmail project pages.
If the new home of vpopmail is "vpopmail.sf.net", they lose that sales
lead.

I think that is what precipitated all this, and that everything else is
tangential.

Personally, I *want* a real homepage for vpopmail.  I *want* to contribute
docs, and I *want* to make it easier for new users to find information
about the project, even simple info like "what is vpopmail?" is helpful,
followed by a complete list of required software, links to the various
"toaster" sites, and of course links to companies that provide commercial
support or "toaster-in-a-box" hardware/software solutions.

Again, just a guess, but the timing seems to point to the homepage issue
being the unspoken center of debate here...

Some have been calling anyone that speaks up "ingrateful" and "unhelpful".
Let me just state that while I am not (yet) much of a C coder, I would
gladly offer up my time for the following:

-documentation on a new vpopmail homepage
-aggressive testing of development releases
-CVS repository hosting (primary, or simply mirroring for when SF has
problems)
-a FreeBSD 4.x development environment for interested developers
-mailing list administration (ie: reaping malicious subs, deleting those
with autoresponders, answering manual unsub requests, etc.)

> Ken himself seems like a nice guy who is genuinely concerned for the
> users and who feels left out.  You seem like a piece of shit determined
> to keep the Inter7 stamp on vpopmail at all costs (which fall upon the
> users).

Ditto.  I was disturbed by the tone of the CFO, and somewhat puzzled.

Thanks,

Charles

> --
> Paul Allen
> Softflare Support
>
>

[vchkpw] autoresponders

[Jeremy Kitchen]

Those of you who have posted since about 10 o'clock this morning have
probably noticed that you're not getting autoreplies anymore.  I didn't
see any reason to have [EMAIL PROTECTED] subscribed to the mailing
list, or the pager, or the broken autoresponder.  I didn't think we
needed to know he was relocating after every post :)

-- 
Jeremy Kitchen
Systems Administrator
.
Inter7 Internet Technologies, Inc.
www.inter7.com
866.528.3530 toll free
847.492.0470 int'l
847.492.0632 fax
GNUPG key ID: 93BDD6CE

[vchkpw] RE: [ ABU1063202463386 ] RE: [vchkpw] Re: Inter7, vpopmail, and open source standards

[Shane Chrisp]

I hope that this time the address is unsub'd now. I sent an
unsub request for it.

>-Original Message-
>From: Prodigy Abuse Department [mailto:[EMAIL PROTECTED] 
>Sent: Wednesday, 10 September 2003 10:01 PM
>To: [EMAIL PROTECTED]
>Subject: [ ABU1063202463386 ] RE: [vchkpw] Re: Inter7, 
>vpopmail, and open source standards
>
>
>
> Thank you for writing to SBC Internet Services Policy Group. 
>We apologize for the inconvenience you have experienced. This 

[vchkpw] Thanks: looking forward to a productive working relationship

[Ken Jones]

Hi Tom,

Thanks for adding me as an admin to the vpopmail project.
I hope to contribute towards making a great new stable release. 

When I get back to the office on Saturday I will 
update the inter7 development page to point to 
sourceforge for both vpopmail and qmailadmin.
(currently I am on the road) I'll see today if I can
get the web admin to update the links before then.

I will start testing the latest vpopmail devel release against different
versions of vqadmin and qmailadmin for any problems.
I will also start looking into the bug reports. Probably the best
role for me is to support Tom as the primary admin in charge of 
releases, new patches/features.

Since it looks like we will finally have CVS support I'll have
to bite the bullet and learn how to use it!

In the next few days could you also add me to the qmailadmin project?

I just registered the vqadmin and qmailmrtg7 projects at source forge 
and will add you as an admin, if you would like, when the projects are
accepted.

Thanks
Ken Jones

Re: [vchkpw] Re: Inter7, vpopmail, and open source standards

[Paul Theodoropoulos]

At 05:30 AM 9/10/2003, Chris Pugh wrote:
> I doubt it because this thread shows that nobody
> owns GPLd software  and that monopolies are not
> possible in Open Source.
My ha'penny / cents worth:

If this statement is true then make impartiality the
byword. Total admin control over the project should be
given neither to Tom nor Ken, but to an independent
indiviual, a moderator, not necessarily someone with a
vested interest in the vpopmail project.
"vested-interest" implies that the moderator receives benefit from 
'ownership'. This is not the case.

IMVHO, and in view of current comments, I've yet to
see evidence of such a person on this list!
On the Inter7 base page vopomail along with other
items is listed under 'Free Software'
http://www.gnu.org/philosophy/free-sw.html

Who is going to draw what line and where?
yes, and inter7's site still lists two of DJB's software packages 
(daemontools and ucspi) as "GPL software", which is completely wrong, and 
which they were notified of many months ago and still have not corrected.

Apparently, inter7 releases software under the GPL, but they haven't taken 
the time to read or understand it.

They do so at their own peril in the marketplace of both ideas and products.

Paul Theodoropoulos
http://www.anastrophe.com

[vchkpw] Lists, stable/devel, and "where is it" for newbies

[Dave Richardson - Lists]

My hope, now that Ken and Tom have apparently been united in mind, is 
that the mailing lists, "stable" vs. "devel" issues, and what the Inter7 
website and Sourceforge project pages say about vpopmail will be quickly 
and uniformally aligned as well.

Just consider what a new user to vpopmail would encounter if they 
searched Sourceforge for *this* list and its VERY helpful archives. 
Also consider what a newbie would find if they went to Inter7 to find 
current source code and development mail list(s).  It's hard enough as a 
new user to spend time Googling to find answers, but dual, unaligned 
"official" web sites would be truly awful.

Again, my hope is that Ken and Tom (and all other related parties) can 
again gather the vpopmail resources into a unified organization with a 
common and well understood direction.  I worry that there will be 
lingering confusion about who does what with whom and where, such that 
it will impact future adoption of the application  It's too darned 
good for that!

D.

Re: [vchkpw] Re: Inter7, vpopmail, and open source standards

[JB]

Lets keep to the topic and leave the conspiracy theories for anther 
forum. Politics and religion are better discussed else where.

~jb

Dubya has done more to drive up al-Qaeda recruitment than bin Laden
ever did.  Which is only fair because bin Laden has always been a puppet
of the same people that control Dubya.  The attacks of 9-11 benefited
Bush and his cronies immensely, which is why the ample warnings were
"ignored," why the US Air Force did not follow Standard Operating 
Procedures that day, and why there continues to be a massive cover-up
over events.  For a European you are almost as misinformed as most people
in the US yet you do not have their excuse of media willing to cover up 
Bush's lies and incompetence.  This recent article by a UK Member of 
Parliament covers only a small portion of the damning evidence against
Bush but should be enough to let you use google to find the rest.
http://politics.guardian.co.uk/iraq/comment/0,12956,1036687,00.html

 

RE: [vchkpw] Re: Tom's fork of vpopmail (and qmailadmin)

[Robert Kropiewnicki]

> Paul L. Allen
>
> Robert Kropiewnicki writes:
>
> > Do you work for Inter7?  Can you speak definitively to the fact that
> > they've shelved vpopmail for good on their end?  No, you can't.
>
> And can you speak definitively to say that they haven't?
> Despite Ken's
> sudden re-appearance here, can you positively, definitely state that
> Ken is going to be as active now and in the future as he was
> six months
> ago and that there will be no more sudden disappearances for months on
> end?
>

I've spoken definitively to no such thing.  What Ken Jones will do now
that he has been granted admin access (bravo Tom!) is not at the core of
my argument.  My argument is that he has done enough in the past for
vpopmail development to warrant his inclusion as an admin.

> > I've seen enough projects in enough companies get put on hold for
> > periods of time because there was something else that required more
> > attention.  Heck, I've had projects I've worked on get put on hold
> > because management decided something else was a more pressing matter
> > only to return to the project when the pressing matter had been
> > completed.
>
> And in those cases I would expect the companies involved to be honest
> with external clients who are waiting for the completion of those
> projects, at least if the client asked when it was going to be ready.
> Clients are funny that way - if you tell them there has been a delay
> they may accept that delay but if you ignore them they go
> somewhere else.
> By not even saying that he was busy or delegating it to somebody else
> Ken put himself in the situation where people walked away.
>

Many of the projects I spoke about in terms of personal experience had
more to do with internal infrastructure projects.  Actually, it was
projects for external paying clients that would often be the reason they
were put on hold.  With any business, the needs of the paying clients
come first.

> > Failure of Inter7's management to recognize the need for
> either visibly
> > active development or at the very least, acknowledge the
> fact that Ken's
> > hands were currently tied due to being assigned other
> projects should not
> > be held against Ken.
>
> No, it should be held against Inter 7.  Which may or may not be Ken
> himself.  Whether it was Ken's decision or that of a pointy-haired
> boss makes no difference.  Somebody at Inter 7 thought it acceptable
> for Ken to ignore this list and vpopmail development for 6 months.
> I do not think that acceptable.
>

I do not find it acceptable either.  I had asked on this list when the
next official Inter7-stamped stable release of vpopmail was coming on at
least two occasions given that one of the other Inter7 apps I was using
(I believe it was vqadmin) required the development release of vpopmail
as a requirement for its stable release.  I found that as unacceptable
then as I do now.

> > Disagree.  If Linus Torvalds had to step away from working
> on the Linux
> > kernel for an extended period of time, would he have to
> justify why he
> > still deserved to be a lead on the project?
>
> If he stopped working on the kernel for 6 months without
> telling anyone,
> without responding to bug reports or patches and effectively stalling
> development until somebody forked development then he damned
> well would
> have to justify being a lead again.  But we both know that Linus would
> not do that.  If circumstances forced his absence for a
> prolonged period
> he would delegate control temporarily.
>
> Ken did not even delegate control temporarily.  It was left to Tom to
> pick up the ball after realizing that Ken had apparently given up on
> things.  It appears that the only reason Ken has expressed
> any interest
> since is because Tom formally took control and so Inter 7
> would lose the
> right advertise themselves as the developers of vpopmail.
>
> I do not see any behaviour by Ken or Inter 7 that justifies Ken having
> administrative control but I do see a lot of behaviour by Ken that
> justifies him NOT having administrative control.
>

For the most part I can agree with this argument.  If Ken were going to
have complete and total administrative control again to the exclusion of
Tom, I would completely agree with this argument.  However, as it stands
right now, Ken and Tom are both listed as administrators, so here's a
call to let this thread die.

> --
> Paul Allen
> Softflare Support
>
>

The civility of your post is well appreciated.  Here's hoping we both
get what we want, the continued development and improvement of vpopmail.

Regards,

Robert Kropiewnicki

[vchkpw] Re: Tom's fork of vpopmail (and qmailadmin)

[webmaster]

My first and only e-mail

Like most of the people who are members of this list, we are the benefactors
of your work over the past many years.  I take vpopmail and qmailadmin,
customise them to add in our own features, in a production environment and
our clients are happy with them.  We contributed little and are reaping the
fruit of your labor.

I am sorry to see many disrespectful words towards you being thrown around
thanklessly.  I don't understand this "spoiled brat" demeanor.  I don't know
whether people are born with this entitlement attitude or they just acquire
them over a period of time which they mostly take from others.

I have been on this list long enough to know that you have been generously
donating a lot of your time in developing these software and providing help
to those in need including myself.

Ken, I am sure you must be saying to yourself "why, after all that I have
done for this community, that there are these dis-respectful and thankless
words".
All projects have their moments.  There are periods of great ideas and spurs
of development and other time, a slow down.  At times other people such as
Bill Shupp stepped in and contributed.  You showed great cooperation.

I hope you do not think that a few of these rants are representative of the
wide, and more thoughtful membership.

Do not let these bitter, abusive words discourage you from continuing to
contribute.

On behalf of those who are the benefactors of your work over the past many
years,  you have our THANKS.

Lu.

Re: [vchkpw] Re: Tom's fork of vpopmail (and qmailadmin)

[tonix (Antonio Nati)]

My 2 cents.

I'm not satisfied both with the last year of Inter7 and the SF period.

I've seen a lot of changes done, but I've the strong feeling that there is 
no coherence in the architecture of vpopmail, anymore.

Too much programmers at work, no analists.

No "-enable" on configuration for new functions or "-disable" for obsolete, 
you must follow the stream and study again your 
installation/configuration/dependencies for each release.

Good things have been done, but I've the feeling they're just patches 
integrated, not a "programmed" analitic work.

I hope the new agreement may help to have more stability, and improve the 
architecture.

I don't mean to be offensive for anyone. Just my feeling and my wish.

Good work.

Tonino

[vchkpw] Re: Tom's fork of vpopmail (and qmailadmin)

[Paul L. Allen]

Robert Kropiewnicki writes:

> Do you work for Inter7?  Can you speak definitively to the fact that
> they've shelved vpopmail for good on their end?  No, you can't.

And can you speak definitively to say that they haven't?  Despite Ken's
sudden re-appearance here, can you positively, definitely state that
Ken is going to be as active now and in the future as he was six months
ago and that there will be no more sudden disappearances for months on
end?

> I've seen enough projects in enough companies get put on hold for
> periods of time because there was something else that required more 
> attention.  Heck, I've had projects I've worked on get put on hold
> because management decided something else was a more pressing matter
> only to return to the project when the pressing matter had been
> completed.

And in those cases I would expect the companies involved to be honest
with external clients who are waiting for the completion of those
projects, at least if the client asked when it was going to be ready.
Clients are funny that way - if you tell them there has been a delay
they may accept that delay but if you ignore them they go somewhere else.
By not even saying that he was busy or delegating it to somebody else
Ken put himself in the situation where people walked away.

> Failure of Inter7's management to recognize the need for either visibly 
> active development or at the very least, acknowledge the fact that Ken's 
> hands were currently tied due to being assigned other projects should not 
> be held against Ken.

No, it should be held against Inter 7.  Which may or may not be Ken
himself.  Whether it was Ken's decision or that of a pointy-haired
boss makes no difference.  Somebody at Inter 7 thought it acceptable
for Ken to ignore this list and vpopmail development for 6 months.
I do not think that acceptable.

> Disagree.  If Linus Torvalds had to step away from working on the Linux
> kernel for an extended period of time, would he have to justify why he
> still deserved to be a lead on the project?

If he stopped working on the kernel for 6 months without telling anyone,
without responding to bug reports or patches and effectively stalling
development until somebody forked development then he damned well would
have to justify being a lead again.  But we both know that Linus would
not do that.  If circumstances forced his absence for a prolonged period
he would delegate control temporarily.

Ken did not even delegate control temporarily.  It was left to Tom to
pick up the ball after realizing that Ken had apparently given up on
things.  It appears that the only reason Ken has expressed any interest 
since is because Tom formally took control and so Inter 7 would lose the
right advertise themselves as the developers of vpopmail.

I do not see any behaviour by Ken or Inter 7 that justifies Ken having
administrative control but I do see a lot of behaviour by Ken that
justifies him NOT having administrative control.

-- 
Paul Allen
Softflare Support

Re: [vchkpw] Question regarding courier

[Anthony Baratta]

At 08:49 AM 9/10/2003, Ewald Geschwinde wrote:

Have I done something wrong with the vpopmail installation?

/usr/bin/ld: cannot find -lvpopmail
collect2: ld returned 1 exit status
Ewald...

Make sure you have the following two files:

 /var/qmail/vpopmail/etc/inc_deps
 /var/qmail/vpopmail/etc/lib_deps
I had to create them:

 /var/qmail/vpopmail/etc/inc_deps

 Inside:
 -I/var/qmail/vpopmail/include -I/usr/include/mysql
 /var/qmail/vpopmail/etc/lib_deps

  Inside:
  -L/var/qmail/vpopmail/lib /var/qmail/vpopmail/lib/libvpopmail.a 
-L/usr/lib/mysql /usr/lib/mysql/libmysqlclient.a -lz

(the above is one line, watch for wrap)

---
Anthony Baratta
President
Keyboard Jockeys
"Conformity is the refuge of the unimaginative."

Re: [vchkpw] Setting Qmailqueue value for virtual domains

[Paul Theodoropoulos]

i handle this by using a three stage transport - primary and secondary MX 
feed mail that is to be filtered on to a 
dedicated  spamassassin/viruschecker server via /var/qmail/smtproutes. 
Those domains that i don't want to filter i just push the mail directly to 
the vpopmail server, also via smtproutes.

you could get away with two stages - run a spam filtering smtpd on an 
alternate port on your vpopmail server - i use port 26 - then you can use 
smtproutes on the primary/secondary MX to feed to the different ports, eg:

iwantspam.com:myvpopmailserver.com:25
idontwantspam.com:myvpopmailserver.com:26


At 07:19 AM 9/10/2003, Martin Horsley wrote:
Is there a way in which I can set the QMAILQUEUE value in tcp.smtp for 
mail sent to a virtual domain?

I'm setting up a qmail+vpopmail+spamassassin+virus check server, but are 
finding that the spam and virus checking is adding a large overhead to the 
time taken to process a message (5 seconds on PII 200 Dual).  One of my 
virtual domains will only ever be used for receiving mail destined for an 
in house mail client, and as such we don't care how much spam gets through 
to it.  There is therefore, no reason for spamassassin/antivirus to check 
mails destined for this domain.

I tried adding this to my tcp.smtp file:-
:allow,RELAYCLIENT="",RBLSMTPD="",QMAILQUEUE="/var/qmail/bin/qmail-queue",TCPLOCALHOST="mydomain.com"
but it didn't work.

Im pretty new to Qmail and vpopmail, so I'm still learning, but I've been 
trying to find a solution to this problem for a couple of weeks now, and 
the usual mailing list archives and google searches have not provided a 
solution

Many thanks

Martin.


Paul Theodoropoulos
http://www.anastrophe.com

[vchkpw] Question regarding courier

[Ewald Geschwinde]

I hav downloaded the courier imap

I have compiled the qmail vpopmail with the qinstall-1.1 from www.obua.org

pop mail is running fine

Now I want to use this with Imap

I'm compiling with courier-imap-2.1.1

Here is the error output:

The problem is the vpopmail is installed perfect
I'm finding an libvpopmail.a in the /home/vpopmail/lib dir
Have I done something wrong with the vpopmail installation?
I'm very pleased for any hints!!!
Compiling authdaemonpwd.c
gcc  -I/home/vpopmail/include -g -O2 -Wall -I.. -I./..   -o 
authdaemon.passwd  authdaemonpwd.o libauth.a ../numlib/libnumlib.a  
../soxwrap/libsoxwrap.a `cat ../soxwrap/soxlibs.dep`
Compiling modauthcustom.c
gcc  -I/home/vpopmail/include -g -O2 -Wall -I.. -I./..   -o authcustom  
modauthcustom.o libauthmod.a libauth.a ../numlib/libnumlib.a 
../libhmac/libhmac.a ../md5/libmd5.a ../sha1/libsha1.a -lcrypt
Compiling modauthcram.c
gcc  -I/home/vpopmail/include -g -O2 -Wall -I.. -I./..   -o authcram  
modauthcram.o libauthmod.a libauth.a ../numlib/libnumlib.a 
../libhmac/libhmac.a ../userdb/libuserdb.a ../gdbmobj/libgdbmobj.a 
../md5/libmd5.a ../sha1/libsha1.a -lgdbm
Compiling modauthuserdb.c
gcc  -I/home/vpopmail/include -g -O2 -Wall -I.. -I./..   -o authuserdb  
modauthuserdb.o libauthmod.a libauth.a ../numlib/libnumlib.a 
../userdb/libuserdb.a ../gdbmobj/libgdbmobj.a ../libhmac/libhmac.a 
-lgdbm  ../md5/libmd5.a ../sha1/libsha1.a -lcrypt
Compiling modauthvchkpw.c
gcc  -I/home/vpopmail/include -g -O2 -Wall -I.. -I./..   -o authvchkpw  
modauthvchkpw.o libauthmod.a libauth.a ../numlib/libnumlib.a 
../md5/libmd5.a ../sha1/libsha1.a -L/home/vpopmail/lib -lvpopmail -lm 
-lcrypt
/usr/bin/ld: cannot find -lvpopmail
collect2: ld returned 1 exit status
make[2]: *** [authvchkpw] Error 1
make[2]: Leaving directory `/home/eg/courier-imap-2.1.1/authlib'
make[1]: *** [all] Error 2
make[1]: Leaving directory `/home/eg/courier-imap-2.1.1/authlib'
make: *** [all-recursive] Error 1



Regards EWald Geschwinde

Re: [vchkpw] Re: Tom's fork of vpopmail (and qmailadmin)

[Manvendra Bhangui]

Let us stop this now and put this war behind us. I can see that Tom has
added Ken as an admin. Cheers to Tom and Ken

Regards Manvendra
On Wed, 2003-09-10 at 19:39, Benjamin Tomhave, CISSP wrote:
> First off, everybody needs to quit whining.  Seriously, if Tom hadn't
> taken up the reins, there would be ZERO DEVELOPMENT on this project right
> now.  Unless you were willing to send a truck of cash to Inter7, they
> would often not even respond to emails asking whether development would
> continue, let alone addressing actual, verified bugs in the code.
> 
> Second, if there's confusion about what a "devel" release is versus a
> stable release, then I suggest you go back to kindergarten, because this
> is NOT A NEW METHOD for developing an open source project.  If you're
> confused, perhaps it's because you're not very smart, in which case maybe
> you ought not be a systems administrator.  Some of us are running devel
> code in our production environments because we needed features that Inter7
> didn't seem inclined to add, such as seekable patch, etc.  Under the
> pressure of meeting customer demands, it has been absolutely necessary to
> install devel releases.  HOWEVER, that DOESN'T MEAN installing EVERY devel
> release -- just installing one that seems stable while providing the
> needed functionality.
> 
> Third, there are certainly improvements that can be made to the PROCESS. 
> But, btw, in case everybody was sleeping when he announced it, Tom has
> created a vpopmail-devel mailing list where all of you can contribute to
> the devel discussions, where, oh btw, the question of CVS access has been
> presented previous and will, I believe, be forthcoming.
> 
> Should this be a separate fork?  No.  Why?  Because, imho, regardless of
> what Ken Jones might claim, vpopmail has been shelved by Inter7, and is
> thus a dead product without this open source SF project.  Inter7 has
> failed, probably for economic reasons, to continue supporting the product
> in the open source community, which has been a very common occurrence over
> the past few years.  That anybody took over the development and moved it
> forward is quite amazing, and I think we all ought to heartily thank Tom
> for doing so.
> 
> Now, onto the specific concerns raised, I think the following practice
> should be adopted:
> 1) CVS should be enabled.
> 2) If KJ wants to be an admin, then he needs to justify his request more
> than "it was my baby originally", and then he should be added.
> 3) Instead of "releasing" devel releases, I think we should switch to a
> "nightly build" approach so that there is "stable-current" and then
> "latest-devel", and not a string of devel releases.  Tom, I would probably
> list 3 packages total: 5.2.x-stable, the last 5.3.x release from Inter7,
> and then 5.3.x-latest-devel.
> 4) Inter7 needs to get over themselves and gradually join back into the
> development, IF AND ONLY IF they plan to play nicely with others.  If they
> don't, then maybe they should go get bent since there's been a ton of
> positive movement on this project in their absence.  NO FORKING.
> 
> Disclaimer: If you disagree with these comments, that's your prerogative,
> but I personally don't want to hear sniping comments back about it,
> because frankly, I don't value the opinion of most of you.  The list
> membership over the past year has become overpopulated with whiny idiots
> who have no appreciation for where the product has been, how it almost
> died, and how it has now seen tremendous progress in the absence of Ken
> and Inter7.
> 
> > On Tuesday, September 9, 2003, at 10:07  AM, Ken Jones wrote:
> >> Just so everyone knows. Tom Collins is attempting
> >> to fork the vpopmail project. He refuses to let me
> >> share ownership of the vpopmail and qmailadmin
> >> projects on source forge. When I asked him to
> >> add me as an owner on the project he said he
> >> refuses now and at any time in the future to
> >> allow me to share ownership.
> >
> > I have forked ownership since I felt that Inter7 was doing a poor job
> > of maintaining vpopmail and qmailadmin.  I readily acknowledge that Ken
> > created vpopmail and qmailadmin.  They're GPL projects, so I'm free to
> > fork them if I like.  Since moving the projects to SourceForge, we've
> > kept up with submitted patches and bug reports.  I feel that making the
> > move was beneficial to the projects themselves and the people that use
> > them.
> >
> > I'm certainly not doing this to be malicious or to hurt Ken and Inter7.
> >
> > I've told Ken that he's more than welcome to contribute to the project
> > on SourceForge, or to maintain his own version of vpopmail and
> > qmailadmin.  I also stated that until I stopped actively maintaining
> > vpopmail and qmailadmin, I saw no need to add him as a project
> > administrator.  Michael Bowe has been actively involved with vpopmail
> > development, and I had no problem adding him as an admin.
> >
> > Ken Jones hasn't contributed to vpopmail 

[vchkpw] QmailAdmin images

[Zafar Rizvi]

Hi 
i am installing qmailadmin-1.0.13 with qmail but no 
images found after installing many times.
 
Here how i am going to install.
 
[EMAIL PROTECTED] qmailadmin-1.0.13]# 
./configureloading cache ./config.cachechecking for a BSD compatible 
install... (cached) /usr/bin/install -cchecking whether build environment is 
sane... yeschecking whether make sets ${MAKE}... (cached) yeschecking 
for working aclocal... foundchecking for working autoconf... 
foundchecking for working automake... foundchecking for working 
autoheader... foundchecking for working makeinfo... foundchecking host 
system type... i686-unknown-linuxchecking for gcc... (cached) 
gccchecking whether the C compiler (gcc  ) works... yeschecking 
whether the C compiler (gcc  ) is a cross-compiler... nochecking 
whether we are using GNU C... (cached) yeschecking whether gcc accepts -g... 
(cached) yeschecking for ranlib... (cached) ranlibchecking for strerror 
in -lcposix... (cached) nochecking how to run the C preprocessor... (cached) 
gcc -Echecking for AIX... nochecking for crypt in -lcrypt... (cached) 
yeschecking for crypt in -lshadow... (cached) nochecking for floor in 
-lm... (cached) yeschecking for gethostbyaddr in -lnsl... (cached) 
yeschecking for getsockname in -lsocket... (cached) nochecking whether 
we should prohibit caching... nochecking whether to require ip 
authentication... yeschecking whether to display user index... 
yeschecking whether to allow admins to modify user quotas... nochecking 
whether to show help pages... nochecking for ezmlm-idx... yeschecking 
for dirent.h that defines DIR... (cached) yeschecking for opendir in 
-ldir... (cached) nochecking for ANSI C header files... (cached) 
yeschecking for unistd.h... (cached) yeschecking for working const... 
(cached) yeschecking for size_t... (cached) yeschecking whether struct 
tm is in sys/time.h or time.h... (cached) time.hchecking for getcwd... 
(cached) yeschecking for mkdir... (cached) yeschecking for strdup... 
(cached) yeschecking for strstr... (cached) yescreating 
./config.statuscreating Makefilecreating config.hconfig.h is 
unchanged
 
    
Current settings---
 
   cgi-bin dir = 
/var/www/cgi-bin  html 
dir = /var/www/html image 
dir = 
/var/www/html/images/qmailadmin 
image URL = "">  template dir = 
/usr/local/share/qmailadmin/ 
qmail dir = /var/qmail  vpopmail dir = 
/home/vpopmail ezmlm dir = 
/usr/local/bin/ezmlm ezmlm 
idx = yes[EMAIL PROTECTED] qmailadmin-1.0.13]# makegcc -I. 
-I/home/vpopmail/include  -g -O2 -c 
qmailadmin.cgcc -I. -I/home/vpopmail/include  
-g -O2 -c alias.cgcc -I. 
-I/home/vpopmail/include  -g -O2 -c 
autorespond.cgcc -I. -I/home/vpopmail/include  
-g -O2 -c forward.cgcc -I. 
-I/home/vpopmail/include  -g -O2 -c 
mailinglist.cgcc -I. -I/home/vpopmail/include  
-g -O2 -c user.cgcc -I. 
-I/home/vpopmail/include  -g -O2 -c util.cgcc 
-I. -I/home/vpopmail/include  -g -O2 -c 
auth.cgcc -I. -I/home/vpopmail/include  -g -O2 
-c template.cgcc -I. -I/home/vpopmail/include  
-g -O2 -c command.cgcc -I. 
-I/home/vpopmail/include  -g -O2 -c show.cgcc 
-I. -I/home/vpopmail/include  -g -O2 -c 
cgi.cgcc -I. -I/home/vpopmail/include  -g -O2 
-c limits.cgcc -I. -I/home/vpopmail/include  -g 
-O2 -c dotqmail.cgcc  -g -O2  -o qmailadmin  qmailadmin.o 
alias.o autorespond.o forward.o mailinglist.o user.o util.o auth.o template.o 
command.o show.o cgi.o limits.o dotqmail.o -L/home/vpopmail/lib -lvpopmail -lnsl 
-lm -lcrypt[EMAIL PROTECTED] qmailadmin-1.0.13]# make install-stripmake  
AM_INSTALL_PROGRAM_FLAGS=-s installmake[1]: Entering directory 
`/usr/local/src/qmailadmin-1.0.13'make[2]: Entering directory 
`/usr/local/src/qmailadmin-1.0.13'/bin/sh ./mkinstalldirs 
/var/www/cgi-bin  /usr/bin/install -c -s qmailadmin 
/var/www/cgi-bin/qmailadminchown vpopmail 
/var/www/cgi-bin/qmailadminchgrp vchkpw /var/www/cgi-bin/qmailadminchmod 
u+s,g+s /var/www/cgi-bin/qmailadmin/bin/sh ./mkinstalldirs  
/usr/local/share/qmailadmin//bin/sh ./mkinstalldirs  
/usr/local/share/qmailadmin//htmlcp -R html/*  
/usr/local/share/qmailadmin//html/bin/sh ./mkinstalldirs  
/var/www/html/images/qmailadminmkdir /var/www/html/imagesmkdir 
/var/www/html/images/qmailadmincp -R images/*    
/var/www/html/images/qmailadmincp    
/usr/local/share/qmailadmin//html/en 
/usr/local/share/qmailadmin//html/en-usif test "" = "yes"; then 
\    
cp html/show_login_help.html /usr/local/share/qmailadmin//html/show_login.html ; 
\fimake[2]: Leaving directory 
`/usr/local/src/qmailadmin-1.0.13'make[1]: Leaving directory 
`/usr/local/src/qmailadmin-1.0.13'
 
Any suggestion.
Thanks
Zafar
 

RE: [vchkpw] Re: Tom's fork of vpopmail (and qmailadmin)

[Robert Kropiewnicki]

> Benjamin Tomhave wrote:
>
> First off, everybody needs to quit whining.  Seriously, if Tom hadn't
> taken up the reins, there would be ZERO DEVELOPMENT on this
> project right
> now.  Unless you were willing to send a truck of cash to Inter7, they
> would often not even respond to emails asking whether
> development would
> continue, let alone addressing actual, verified bugs in the code.
>

I don't think anyone is complaining about Tom taking a lead role in the
development of vpopmail.  The question is a matter of what role, if any,
Ken Jones should play.

> Second, if there's confusion about what a "devel" release is versus a
> stable release, then I suggest you go back to kindergarten,
> because this
> is NOT A NEW METHOD for developing an open source project.

No one is suggesting there shouldn't be development releases.  But for
use in a true production environment, there needs to be stable releases
as well.


> If you're confused, perhaps it's because you're not very smart, in
> which case maybe
> you ought not be a systems administrator.  Some of us are
> running devel
> code in our production environments because we needed
> features that Inter7
> didn't seem inclined to add, such as seekable patch, etc.  Under the
> pressure of meeting customer demands, it has been absolutely
> necessary to
> install devel releases.  HOWEVER, that DOESN'T MEAN
> installing EVERY devel
> release -- just installing one that seems stable while providing the
> needed functionality.
>

Hey, if you can get away with running development code in a production
environment, more power to you.  Some of us don't have that luxury,
regardless of whether or not the development release has features we
really want.  Not everyone on this list has the programming skills
and/or the amount of time and manpower to validate a release as stable.

> Third, there are certainly improvements that can be made to
> the PROCESS.
> But, btw, in case everybody was sleeping when he announced it, Tom has
> created a vpopmail-devel mailing list where all of you can
> contribute to
> the devel discussions, where, oh btw, the question of CVS
> access has been
> presented previous and will, I believe, be forthcoming.
>

Good to know.

> Should this be a separate fork?  No.  Why?  Because, imho,
> regardless of
> what Ken Jones might claim, vpopmail has been shelved by
> Inter7, and is
> thus a dead product without this open source SF project.  Inter7 has
> failed, probably for economic reasons, to continue supporting
> the product
> in the open source community, which has been a very common
> occurrence over
> the past few years.  That anybody took over the development
> and moved it
> forward is quite amazing, and I think we all ought to
> heartily thank Tom
> for doing so.
>

Do you work for Inter7?  Can you speak definitively to the fact that
they've shelved vpopmail for good on their end?  No, you can't.  It's
purely speculation which you're stating as fact.  I've seen enough
projects in enough companies get put on hold for periods of time because
there was something else that required more attention.  Heck, I've had
projects I've worked on get put on hold because management decided
something else was a more pressing matter only to return to the project
when the pressing matter had been completed.  A great deal of thanks
goes to Tom for taking a lead role while this was going on.  However, I
still believe that Ken Jones, by virtue of the work he has done in the
past does deserve consideration for an admin role.  Failure of Inter7's
management to recognize the need for either visibly active development
or at the very least, acknowledge the fact that Ken's hands were
currently tied due to being assigned other projects should not be held
against Ken.

> Now, onto the specific concerns raised, I think the following practice
> should be adopted:
> 1) CVS should be enabled.

Agreed.

> 2) If KJ wants to be an admin, then he needs to justify his
> request more
> than "it was my baby originally", and then he should be added.

Disagree.  If Linus Torvalds had to step away from working on the Linux
kernel for an extended period of time, would he have to justify why he
still deserved to be a lead on the project?

> 3) Instead of "releasing" devel releases, I think we should
> switch to a
> "nightly build" approach so that there is "stable-current" and then
> "latest-devel", and not a string of devel releases.  Tom, I
> would probably
> list 3 packages total: 5.2.x-stable, the last 5.3.x release
> from Inter7,
> and then 5.3.x-latest-devel.

I would make one change to this idea.  Instead of listing the latest
5.2.x-stable as well as the last 5.3.x release from Inter7, someone
(perhaps Ken Jones) should go through that last Inter7 5.3.x release and
figure out what needs to be done to make that a new stable release.

> 4) Inter7 needs to get over themselves and gradually join
> back into the
> development, IF AND ONLY IF they plan to play nicely with
> others.

Re: [vchkpw] Re: Tom's fork of vpopmail (and qmailadmin)

[Anders Brander]

Hi, 

On Wed, 2003-09-10 at 16:09, Benjamin Tomhave, CISSP wrote:
> First off, everybody needs to quit whining.  Seriously, if Tom hadn't
[snip]

Just my sniping comment... I am so very sorry for being a whining
sleeping idiot! I will say thanks to Tom, stop being a sysadmin and go
back to kindergarten right away!

Sorry - it was so tempting ;-)

/Anders

[vchkpw] Setting Qmailqueue value for virtual domains

[Martin Horsley]

Is there a way in which I can set the QMAILQUEUE value in tcp.smtp for 
mail sent to a virtual domain?

I'm setting up a qmail+vpopmail+spamassassin+virus check server, but are 
finding that the spam and virus checking is adding a large overhead to 
the time taken to process a message (5 seconds on PII 200 Dual).  One of 
my virtual domains will only ever be used for receiving mail destined 
for an in house mail client, and as such we don't care how much spam 
gets through to it.  There is therefore, no reason for 
spamassassin/antivirus to check mails destined for this domain.

I tried adding this to my tcp.smtp file:-
:allow,RELAYCLIENT="",RBLSMTPD="",QMAILQUEUE="/var/qmail/bin/qmail-queue",TCPLOCALHOST="mydomain.com"
but it didn't work.

Im pretty new to Qmail and vpopmail, so I'm still learning, but I've 
been trying to find a solution to this problem for a couple of weeks 
now, and the usual mailing list archives and google searches have not 
provided a solution

Many thanks

Martin.

[vchkpw] Re: Inter7, vpopmail, and open source standards

[Paul L. Allen]

Ken Jones writes:

> Since I have been working on vpopmail almost every day
> for the last 5 years (including most weekends), it is very
> difficult for me to hear people saying I have not done enough
> lately. Even during these last 6 months where we have not
> made a new devel release

If I had submitted bug reports or patches during those six months and
there had been no new release in all that time then I would say that
you had not done enough no matter how much work was going on behind
the scenes that I was unaware of.

> I continue to work on it just about every day:

So far, so good...

> training people,

Training employees so that they can offer paid support to customers?
Training paying customers?  Those are business operations from which
you gain but the rest of us do not.

> trouble shooting, installing,

Ditto.  If you're doing that stuff for free then criticisms of you
were harsh (but still valid because bugs need to be fixed).  If it's
paid work then it doesn't count.  I get paid to install vpopmail on
systems but I do not in any way claim that such work contributes
to vpopmail development except indirectly if I find and report a problem.

> trying to work on new documentation,

New documentation would be good.  But secondary to fixing real bugs
or adding features needed to support enhancements in sqwebmail and
the like.  And 6 months to update documentation seems rather excessive
to me.  Can we see it or did a dog eat it yesterday?

> monitoring the mailing list.

Ummm...

If you monitor the mailing list then why did you not notice several
months ago that Tom and others have been working on vpopmail?  If
you monitor the mailing list then why do you rarely notice that Tom
has put out a new development release and update the Inter 7 website
to reflect that?  If you monitor the mailing list then why did you not
notice several days ago that somebody keeps maliciously subscribing
auto-responders to the mailing list and remove them?

I have to say that I now agree with Tom irrespective of Ms Cat's
ill-advised mail.  You just pegged my bullshit detector at FSD.

-- 
Paul Allen
Softflare Support

Re: [vchkpw] Re: Tom's fork of vpopmail (and qmailadmin)

[David Choo]

Ladies & Gents,

Before I get off the list, let me this useless non-contributing newbie say
something.

Whats happening here over the past few days will do no one any good. Shooting
off like that in e-mails will just simply piss everyone involved off.

So I sincerly hope that everyone will now just forget that this ever happened,
and continue to do whats best for the project. CODING.

We don't need another political battle for Vpopmail. 

Regards
David

Quoting "Benjamin Tomhave, CISSP" <[EMAIL PROTECTED]>:

> First off, everybody needs to quit whining.  Seriously, if Tom hadn't
> taken up the reins, there would be ZERO DEVELOPMENT on this project right
> now.  Unless you were willing to send a truck of cash to Inter7, they
> would often not even respond to emails asking whether development would
> continue, let alone addressing actual, verified bugs in the code.
> 
> Second, if there's confusion about what a "devel" release is versus a
> stable release, then I suggest you go back to kindergarten, because this
> is NOT A NEW METHOD for developing an open source project.  If you're
> confused, perhaps it's because you're not very smart, in which case maybe
> you ought not be a systems administrator.  Some of us are running devel
> code in our production environments because we needed features that Inter7
> didn't seem inclined to add, such as seekable patch, etc.  Under the
> pressure of meeting customer demands, it has been absolutely necessary to
> install devel releases.  HOWEVER, that DOESN'T MEAN installing EVERY devel
> release -- just installing one that seems stable while providing the
> needed functionality.
> 
> Third, there are certainly improvements that can be made to the PROCESS. 
> But, btw, in case everybody was sleeping when he announced it, Tom has
> created a vpopmail-devel mailing list where all of you can contribute to
> the devel discussions, where, oh btw, the question of CVS access has been
> presented previous and will, I believe, be forthcoming.
> 
> Should this be a separate fork?  No.  Why?  Because, imho, regardless of
> what Ken Jones might claim, vpopmail has been shelved by Inter7, and is
> thus a dead product without this open source SF project.  Inter7 has
> failed, probably for economic reasons, to continue supporting the product
> in the open source community, which has been a very common occurrence over
> the past few years.  That anybody took over the development and moved it
> forward is quite amazing, and I think we all ought to heartily thank Tom
> for doing so.
> 
> Now, onto the specific concerns raised, I think the following practice
> should be adopted:
> 1) CVS should be enabled.
> 2) If KJ wants to be an admin, then he needs to justify his request more
> than "it was my baby originally", and then he should be added.
> 3) Instead of "releasing" devel releases, I think we should switch to a
> "nightly build" approach so that there is "stable-current" and then
> "latest-devel", and not a string of devel releases.  Tom, I would probably
> list 3 packages total: 5.2.x-stable, the last 5.3.x release from Inter7,
> and then 5.3.x-latest-devel.
> 4) Inter7 needs to get over themselves and gradually join back into the
> development, IF AND ONLY IF they plan to play nicely with others.  If they
> don't, then maybe they should go get bent since there's been a ton of
> positive movement on this project in their absence.  NO FORKING.
> 
> Disclaimer: If you disagree with these comments, that's your prerogative,
> but I personally don't want to hear sniping comments back about it,
> because frankly, I don't value the opinion of most of you.  The list
> membership over the past year has become overpopulated with whiny idiots
> who have no appreciation for where the product has been, how it almost
> died, and how it has now seen tremendous progress in the absence of Ken
> and Inter7.
> 
> > On Tuesday, September 9, 2003, at 10:07  AM, Ken Jones wrote:
> >> Just so everyone knows. Tom Collins is attempting
> >> to fork the vpopmail project. He refuses to let me
> >> share ownership of the vpopmail and qmailadmin
> >> projects on source forge. When I asked him to
> >> add me as an owner on the project he said he
> >> refuses now and at any time in the future to
> >> allow me to share ownership.
> >
> > I have forked ownership since I felt that Inter7 was doing a poor job
> > of maintaining vpopmail and qmailadmin.  I readily acknowledge that Ken
> > created vpopmail and qmailadmin.  They're GPL projects, so I'm free to
> > fork them if I like.  Since moving the projects to SourceForge, we've
> > kept up with submitted patches and bug reports.  I feel that making the
> > move was beneficial to the projects themselves and the people that use
> > them.
> >
> > I'm certainly not doing this to be malicious or to hurt Ken and Inter7.
> >
> > I've told Ken that he's more than welcome to contribute to the project
> > on SourceForge, or to maintain his own version of vpopmail and
> > qma

Re: [vchkpw] Re: Tom's fork of vpopmail (and qmailadmin)

[Benjamin Tomhave, CISSP]

First off, everybody needs to quit whining.  Seriously, if Tom hadn't
taken up the reins, there would be ZERO DEVELOPMENT on this project right
now.  Unless you were willing to send a truck of cash to Inter7, they
would often not even respond to emails asking whether development would
continue, let alone addressing actual, verified bugs in the code.

Second, if there's confusion about what a "devel" release is versus a
stable release, then I suggest you go back to kindergarten, because this
is NOT A NEW METHOD for developing an open source project.  If you're
confused, perhaps it's because you're not very smart, in which case maybe
you ought not be a systems administrator.  Some of us are running devel
code in our production environments because we needed features that Inter7
didn't seem inclined to add, such as seekable patch, etc.  Under the
pressure of meeting customer demands, it has been absolutely necessary to
install devel releases.  HOWEVER, that DOESN'T MEAN installing EVERY devel
release -- just installing one that seems stable while providing the
needed functionality.

Third, there are certainly improvements that can be made to the PROCESS. 
But, btw, in case everybody was sleeping when he announced it, Tom has
created a vpopmail-devel mailing list where all of you can contribute to
the devel discussions, where, oh btw, the question of CVS access has been
presented previous and will, I believe, be forthcoming.

Should this be a separate fork?  No.  Why?  Because, imho, regardless of
what Ken Jones might claim, vpopmail has been shelved by Inter7, and is
thus a dead product without this open source SF project.  Inter7 has
failed, probably for economic reasons, to continue supporting the product
in the open source community, which has been a very common occurrence over
the past few years.  That anybody took over the development and moved it
forward is quite amazing, and I think we all ought to heartily thank Tom
for doing so.

Now, onto the specific concerns raised, I think the following practice
should be adopted:
1) CVS should be enabled.
2) If KJ wants to be an admin, then he needs to justify his request more
than "it was my baby originally", and then he should be added.
3) Instead of "releasing" devel releases, I think we should switch to a
"nightly build" approach so that there is "stable-current" and then
"latest-devel", and not a string of devel releases.  Tom, I would probably
list 3 packages total: 5.2.x-stable, the last 5.3.x release from Inter7,
and then 5.3.x-latest-devel.
4) Inter7 needs to get over themselves and gradually join back into the
development, IF AND ONLY IF they plan to play nicely with others.  If they
don't, then maybe they should go get bent since there's been a ton of
positive movement on this project in their absence.  NO FORKING.

Disclaimer: If you disagree with these comments, that's your prerogative,
but I personally don't want to hear sniping comments back about it,
because frankly, I don't value the opinion of most of you.  The list
membership over the past year has become overpopulated with whiny idiots
who have no appreciation for where the product has been, how it almost
died, and how it has now seen tremendous progress in the absence of Ken
and Inter7.

> On Tuesday, September 9, 2003, at 10:07  AM, Ken Jones wrote:
>> Just so everyone knows. Tom Collins is attempting
>> to fork the vpopmail project. He refuses to let me
>> share ownership of the vpopmail and qmailadmin
>> projects on source forge. When I asked him to
>> add me as an owner on the project he said he
>> refuses now and at any time in the future to
>> allow me to share ownership.
>
> I have forked ownership since I felt that Inter7 was doing a poor job
> of maintaining vpopmail and qmailadmin.  I readily acknowledge that Ken
> created vpopmail and qmailadmin.  They're GPL projects, so I'm free to
> fork them if I like.  Since moving the projects to SourceForge, we've
> kept up with submitted patches and bug reports.  I feel that making the
> move was beneficial to the projects themselves and the people that use
> them.
>
> I'm certainly not doing this to be malicious or to hurt Ken and Inter7.
>
> I've told Ken that he's more than welcome to contribute to the project
> on SourceForge, or to maintain his own version of vpopmail and
> qmailadmin.  I also stated that until I stopped actively maintaining
> vpopmail and qmailadmin, I saw no need to add him as a project
> administrator.  Michael Bowe has been actively involved with vpopmail
> development, and I had no problem adding him as an admin.
>
> Ken Jones hasn't contributed to vpopmail and qmailadmin development
> since March.  We've had 12 qmailadmin releases and 7 vpopmail releases
> since then.  Managing the projects on SourceForge keeps everything out
> in the open, and allows anyone to contribute.
>
> Ken hasn't stated why he wants to be an owner of the project.  I'm not
> sure I understand what he loses out on by being a developer on t

RE: [vchkpw] Re: Inter7, vpopmail, and open source standards

[Shane Chrisp]

Please please please accept the truce and lets get back to what
the mailing list is for... support and discussion about vpopmail.

Im totally sick and tired of the whole issue.

Shane

>-Original Message-
>From: Ken Jones [mailto:[EMAIL PROTECTED] 
>Sent: Wednesday, 10 September 2003 9:46 PM
>To: [EMAIL PROTECTED]
>Subject: Re: [vchkpw] Re: Inter7, vpopmail, and open source standards
>
>
>This whole problem could have been avoided if Tom
>had contacted me and told me about his plans.
>I would have agreed. I think using source forge is a 
>great idea. 
>
>Unfortunately Tom did not talk to me. The first I heard
>of his intentions was when the FreshMeat admins emailed
>me saying Tom wanted to take ownership of the vpopmail
>and qmailadmin projects. 
>
>Why bother with a fork when I would have agreed?
>
>I asked Tom what was going on and his response was
>what I have previously said, he would never share admin
>access with me, ever. Makes one wonder, no?
>
>I finally decided to take this public to the list when
>it became clear that one of Tom's goals was to exclude me.
>Why? I don't know. Yesterday Tom said part of his reason
>was he was worried I would revoke his admin rights. 
>
>Since I have been working on vpopmail almost every day
>for the last 5 years (including most weekends), it is very
>difficult for me to hear people saying I have not done enough
>lately. Even during these last 6 months where we have not
>made a new devel release I continue to work on it just about
>every day: training people, trouble shooting, installing, trying
>to work on new documentation, monitoring the mailing list.
>
>So Tom.. what do you say? Let us put this whole thing behind
>us and join together and build an excellent new stable release?
>I like Michael's compromise, what do you think?
>
>Ken Jones
>
>
>

[vchkpw] Re: SMTP-Auth bug in passwords?

[Paul L. Allen]

Mike Miller writes:

> I believe what you say (that if I enable MD5 passwords, then it will work 
> for both),

I didn't say that.  I said that if vpopmail were written correctly then
it would work for both.

> There should really be a note that it will accept existing crypt
> passwords  but store new ones in MD5.

If it actually does work that way then I would agree with you.

> I just didn't want it to stop working when migrated users.

If I were you I'd look through the source or try it on a test box before
risking it on a production server.

-- 
Paul Allen
Softflare Support

[vchkpw] Re: SMTP-Auth bug in passwords?

[Paul L. Allen]

Mike Miller writes:

> Any way to convert an entire large site of cdb files (probably 
> 150 domains) into MD5?  Actually coverting is the wrong word [since you 
> can't do that unless there is clear text passwords], but rather to have it 
> choose between both MD5 and CRYPT passwords (based on length) to migrate 
> from crypt to MD5?

I don't know how vpopmail handles this.  If it was written correctly then
on
most recent releases of *nix then both types of crypted password in the
same
cdb ought to be possible.

DES crypt requires two characters of salt chosen from A-Za-z0-9./ while
MD5 crypt requires eight characters from the same character set prefixed
by $1$.  The wrong way to code things is to examine the crypted password
(which starts with whatever salt has been used) and figure out whether
it's DES or MD5, extract the appropriate amount of salt and pass that
with the plaintext password to crypt and see if the result matches the
crypted password.  The really wrong way to code it is to fix at compile
time what type of crypt should be used when validating passwords.

The right way to code this is to use the crypted password itself, in its
entirety, as the salt for crypting the plaintext password when you
validate the password.  Versions of crypt which support MD5 also support 
using the entirety of the crypted password as salt and then figure out how 
much of that really is salt without you having to bother.  Do it this way 
and both types of crypted password can be used in the same file even though
when passwords are set or modified they will be converted to whichever type
of crypt you said you wanted to use.

If vpopmail does it that way then you can happily turn on MD5, with
existing passwords continuing to work and new or changed passwords
being MD5 crypted.  If vpopmail doesn't do it that way then you have
problems until the next release appears.

-- 
Paul Allen
Softflare Support

[vchkpw] unregister

[David Choo]

Regards,
David Choo

Re: [vchkpw] Re: SMTP-Auth bug in passwords?

[Mike Miller]

I'm in no way stating that that webmaster21312 password is secure, however 
I'd say that length issues are important here as often the complex parts of 
a password are near the end [ie: dogguy45b].  If this was me, I'd completely 
agree and never have a password like that.  However it seems that my users 
on the other hand do like this sort of thing, which is a security 
consideration in its own respect.  Yes those numbers are a bigger 
difference, but has the same effect in my case- webmaste is identical to 
webmastejashfdajsfhasfjashfasj - which is the furthest thing from the truth.

I believe what you say (that if I enable MD5 passwords, then it will work 
for both), but I think that might be a documentation issue.
" --enable-md5-passwords=y|n   Turn on (y default ) or off (n) to store 
encrypted passwords as md5."
There should really be a note that it will accept existing crypt passwords 
but store new ones in MD5.  This would ensure that users looking to migrate 
know what's going on.  I just didn't want it to stop working when migrated  
users.

-M

From: "Paul L. Allen" <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: [vchkpw] Re: SMTP-Auth bug in passwords?
Date: Wed, 10 Sep 2003 13:44:03 GMT
Mike Miller writes:

> Okay, but should it be _allowing_ this as a password or don't you think
> that it should reject it?
I think that it is behaving at it is documented to behave and that your
expectations are wrong.
> There is a very big difference between 'webmaste' and 'webmaster23445'
> in terms of security, as I just found out.
Not a big difference, but more than the difference between webmaste
and webmaster00 which is what you said was being used.  Password cracker
programs try using the username as a password in combination with one
or two digits at the end as the FIRST thing they do.  Mail authentication
is not tarpitted like user logins so a cracker can happily try all
combinations very quickly.  If that mail login also happens to be
the username and password for a user login you start to have serious
problems.  If you think webmaster23445 is secure you need to think
again.
> The reasoning for my use of CRYPT is that most of my users are still 
from
> when VPOPMAIL didn't support MD5.

Crypt is capable of supporting both styles of password in the system
passwd file so if vpopmail has been coded correctly then it ought also
to support both types of password.  It is a simple matter of using the
crypted password itself as salt when doing a trial crypt of the plain
password.
> But in terms of this situation, the base64 password that the user sends
> would likely be better decode_base64()'d  and then compared against the
> clear-text password.
Comparing against the plain text password would allow longer passwords.
Having plain text passwords is, itself, a security problem.  Think about
users who use the same username and password everywhere, including their
on-line banking.  Think about being the only one of the systems that user
uses  which holds the password in plain text.  Think about what happens
if that user claims there was an unauthorized on-line withdrawal.  Your
system being the only one to have the password in plain text is not
proof of guilt and the others having the password crypted is not proof
of innocence, but you try convincing a jury of that...
--
Paul Allen
Softflare Support

_
MSN 8 helps eliminate e-mail viruses. Get 2 months FREE*.  
http://join.msn.com/?page=features/virus

Re: [vchkpw] Re: Inter7, vpopmail, and open source standards

[Ken Jones]

This whole problem could have been avoided if Tom
had contacted me and told me about his plans.
I would have agreed. I think using source forge is a 
great idea. 

Unfortunately Tom did not talk to me. The first I heard
of his intentions was when the FreshMeat admins emailed
me saying Tom wanted to take ownership of the vpopmail
and qmailadmin projects. 

Why bother with a fork when I would have agreed?

I asked Tom what was going on and his response was
what I have previously said, he would never share admin
access with me, ever. Makes one wonder, no?

I finally decided to take this public to the list when
it became clear that one of Tom's goals was to exclude me.
Why? I don't know. Yesterday Tom said part of his reason
was he was worried I would revoke his admin rights. 

Since I have been working on vpopmail almost every day
for the last 5 years (including most weekends), it is very
difficult for me to hear people saying I have not done enough
lately. Even during these last 6 months where we have not
made a new devel release I continue to work on it just about
every day: training people, trouble shooting, installing, trying
to work on new documentation, monitoring the mailing list.

So Tom.. what do you say? Let us put this whole thing behind
us and join together and build an excellent new stable release?
I like Michael's compromise, what do you think?

Ken Jones

Re: [vchkpw] Re: SMTP-Auth bug in passwords?

[Mike Miller]

POP3:
+OK <[EMAIL PROTECTED]>
user webmaster
+OK
pass webmaster00
+OK
list
I don't like that at all.  You're right.  it is comparing to the crypt 
password.  Any way to convert an entire large site of cdb files (probably 
150 domains) into MD5?  Actually coverting is the wrong word [since you 
can't do that unless there is clear text passwords], but rather to have it 
choose between both MD5 and CRYPT passwords (based on length) to migrate 
from crypt to MD5?  I'd love to migrate away from it if this is the type of 
problems it causes...  Then I could just make a script to md5-encrypt where 
a clear password exists [which is most of them, and in any cases, the 
accounts which are used].  Has anyone done this?  Is it an all-or-nothing 
game?

-M


From: "Paul L. Allen" <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
CC: [EMAIL PROTECTED]
Subject: [vchkpw] Re: SMTP-Auth bug in passwords?
Date: Wed, 10 Sep 2003 13:30:27 GMT
Mike Miller writes:

> Nope.  Not using MD5 passwords.

That would explain it then.  As Tom said, DES-style crypt ignores
everything
after the first eight characters of the password.  MD5-style crypt has a
higher limit, from memory I believe it's something like 126.
--
Paul Allen
Softflare Support

_
The new MSN 8: advanced junk mail protection and 2 months FREE*  
http://join.msn.com/?page=features/junkmail

[vchkpw] Re: SMTP-Auth bug in passwords?

[Paul L. Allen]

Mike Miller writes:

> Okay, but should it be _allowing_ this as a password or don't you think 
> that it should reject it?

I think that it is behaving at it is documented to behave and that your
expectations are wrong.

> There is a very big difference between 'webmaste' and 'webmaster23445'
> in terms of security, as I just found out.

Not a big difference, but more than the difference between webmaste
and webmaster00 which is what you said was being used.  Password cracker
programs try using the username as a password in combination with one
or two digits at the end as the FIRST thing they do.  Mail authentication
is not tarpitted like user logins so a cracker can happily try all
combinations very quickly.  If that mail login also happens to be
the username and password for a user login you start to have serious
problems.  If you think webmaster23445 is secure you need to think
again.

> The reasoning for my use of CRYPT is that most of my users are still from 
> when VPOPMAIL didn't support MD5.

Crypt is capable of supporting both styles of password in the system
passwd file so if vpopmail has been coded correctly then it ought also
to support both types of password.  It is a simple matter of using the
crypted password itself as salt when doing a trial crypt of the plain
password.

> But in terms of this situation, the base64 password that the user sends 
> would likely be better decode_base64()'d  and then compared against the 
> clear-text password.

Comparing against the plain text password would allow longer passwords.
Having plain text passwords is, itself, a security problem.  Think about
users who use the same username and password everywhere, including their 
on-line banking.  Think about being the only one of the systems that user
uses  which holds the password in plain text.  Think about what happens
if that user claims there was an unauthorized on-line withdrawal.  Your
system being the only one to have the password in plain text is not
proof of guilt and the others having the password crypted is not proof
of innocence, but you try convincing a jury of that...

-- 
Paul Allen
Softflare Support

Re: [vchkpw] Re: SMTP-Auth bug in passwords?

[Mike Miller]

Okay, but should it be _allowing_ this as a password or don't you think that 
it should reject it?  There is a very big difference between 'webmaste' and 
'webmaster23445' in terms of security, as I just found out.

The reasoning for my use of CRYPT is that most of my users are still from 
when VPOPMAIL didn't support MD5.  But in terms of this situation, the 
base64 password that the user sends would likely be better decode_base64()'d 
and then compared against the clear-text password.

-M


From: "Paul L. Allen" <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
CC: [EMAIL PROTECTED]
Subject: [vchkpw] Re: SMTP-Auth bug in passwords?
Date: Wed, 10 Sep 2003 13:30:27 GMT
Mike Miller writes:

> Nope.  Not using MD5 passwords.

That would explain it then.  As Tom said, DES-style crypt ignores
everything
after the first eight characters of the password.  MD5-style crypt has a
higher limit, from memory I believe it's something like 126.
--
Paul Allen
Softflare Support

_
The new MSN 8: smart spam protection and 2 months FREE*  
http://join.msn.com/?page=features/junkmail

Re: [vchkpw] SMTP-Auth bug in passwords?

[Mike Miller]

It's JUST login/plain and not CRAM-MD5.  As proof, I used a test client 
script:
# Simple SMTP client with STARTTLS and AUTH support.
# Michal Ludvig <[EMAIL PROTECTED]>, 2003
# See http://www.logix.cz/~mic/devel/smtp for details.

# ./smtp-client.pl --host= --hello-host=breaded --disable-starttls 
--auth-plain --user=webmaster --pass=webmaster --from="[EMAIL PROTECTED]" 
--to="[EMAIL PROTECTED]" --data="txt"

-- works with password of 'webmaster' when the password if vpopmail is 
either webmaste, webmaster.  As soon as I change it to webmast, it stops 
working.  CRAM-MD5 will only work if the password is 100% acurate.

So --auth-cram-md5 won't work unless the password is right.  --auth-login 
and --auth-plain will work if the password is webmaste, webmaster, 
webmaster0, webmaster00.

Very strange.  Anything I can do to help.
-M


From: Tom Collins <[EMAIL PROTECTED]>
To: vpopmail list <[EMAIL PROTECTED]>
Subject: Re: [vchkpw] SMTP-Auth bug in passwords?
Date: Tue, 9 Sep 2003 22:23:27 -0700
On Tuesday, September 9, 2003, at 10:06  PM, Anthony Baratta wrote:
Doesn't the AUTH LOGIN state that he's going to use Base64 encoding?? If 
he put in AUTH CRAM-MD5 then it would be expecting MD5 encoding.

So this appears to be a problem with LOGIN, either in the patch or with 
vPopmail.
When vpopmail stores passwords (at least in cdb), it either uses crypt() 
with a two-character salt and DES encoding (where only the first 8 
characters of the password matter), or it uses an 8-character salt and MD5 
encoding.

It would be interesting to see whether the problem exists when using 
CRAM-MD5 as well.  It could also be isolated by trying to authenticate with 
qmailadmin or courier-imap and using just the first 8 characters of the 
password.

--
Tom Collins
[EMAIL PROTECTED]
QmailAdmin: http://qmailadmin.sf.net/  Vpopmail: http://vpopmail.sf.net/
Info on the Sniffter hand-held Network Tester: http://sniffter.com/

_
Protect your PC - get McAfee.com VirusScan Online  
http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=3963

[vchkpw] Re: SMTP-Auth bug in passwords?

[Paul L. Allen]

Mike Miller writes:

> Nope.  Not using MD5 passwords.

That would explain it then.  As Tom said, DES-style crypt ignores
everything 
after the first eight characters of the password.  MD5-style crypt has a
higher limit, from memory I believe it's something like 126.

-- 
Paul Allen
Softflare Support

[vchkpw] Re: Inter7, vpopmail, and open source standards

[Paul L. Allen]

Chris Pugh writes:

> If this statement is true then make impartiality the
> byword. Total admin control over the project should be
> given neither to Tom nor Ken, but to an independent
> indiviual, a moderator, not necessarily someone with a
> vested interest in the vpopmail project.

But somebody with no vested interest is also somebody who is unlikely
to put much effort into it or to understand enough about it to resolve
conflicts about what changes should or should not be made.  The right
person to head a project is one who either does most of the work or
directs most of the work.  That used to be Ken.  It is now Tom.  With
Tom there have been many improvements and bug fixes that would NOT have
happened without him.

> On the Inter7 base page vopomail along with other 
> items is listed under 'Free Software'
> 
> http://www.gnu.org/philosophy/free-sw.html
> 
> Who is going to draw what line and where?

According to that link, everyone has the right to improve and redistribute
their changed version, which is exactly what Tom has done.  Over on
http://www.opensource.org you will find links to Eric Raymond's thoughts
on code-forking.  It is his opinion that as long as a project is active
and well-run then code-forking is undesirable (although not forbidden
even then) but that when a project becomes inactive or badly-run then 
code-forking may be necessary.  As has been made clear by others, Ken
stopped doing anything with vpopmail for several months, did not apply
bug-fixes sent to him, etc.  When something like that happens then
code-forking is not just permissible, it's desirable.  In fact, when
a lapsed project is taken over it is not usually seen as code-forking but
merely a change of ownership and a name change is unnecessary.

Nor is there any guarantee that Ken would devote more effort to it in the 
future since Ms Cat told us all about the bigger and better things that
Ken is working on.  And while I understand Inter 7's desire to be
associated with vpopmail because of the kudos it gives them, that same
fact also worries me because they may be tempted to take full control
and kick Tom out so that once again vpopmail is perceived to be an
Inter 7 product.  If Ken had been as active as Tom has these past months
then that wouldn't be a problem, but he has not.  If Ms Cat hadn't stepped
in then the prospect of Ken being able to kick Tom out wouldn't be such
a concern, but after her mail it is - that was very much an "it was our
product originally and we demand full and exclusive control" mail.

Yes, it's sad that Ken no longer has control of a product he did so much
work on but that's what happens to people who let GPL projects lapse.  And
until and unless Ken decides to play a major active part in development 
once again he has no technical need of control (a commercial need,
perhaps, but that is insufficient justification).  If Ken wanted to keep 
control he should have kept working on it and been responsive to bug
reports and submitted patches.  It's as simple as that.

If Ken decides to code-fork away from Tom's work then it is Ken who should 
rename his product, not Tom, because ownership of vpopmail transferred when
Ken turned his back on it.  The fact that Ken is now showing an interest
again does NOT mean that control or the name reverts to him.  He had his
chance to keep working on it.  He had his chance to say he would be busy
for a few months and to delegate control temporarily to somebody else.
By not responding he blew it.

It is also worth noting that Tom is setting up CVS so that a TEAM of
people can continue to work on vpopmail even if Tom is temporarily unable
to do anything on it himself for some reason.  With Inter 7 revision
control was essentially if and when Ken decided to make changes.  This is
yet another reason why Tom is the better choice to control the project
because he is ensuring that it will continue to be developed even if
he cannot work on it; when Ken turned his back on vpopmail all work
stopped until Tom forked it.  Tom has done after a few months of control
what Ken did not after several years of control - he's put it on CVS.

I'm not criticising all the great work Ken did in the past.  But he
stopped doing it...

-- 
Paul Allen
Softflare Support

Re: [vchkpw] SMTP-Auth bug in passwords?

[Mike Miller]

It is my understanding that this is not using CRAM-MD5 but PLAIN login, so 
those methods aren't affected.  I used the 
http://members.elysium.pl/brush/qmail-smtpd-auth/ patch and haven't had 
difficulty using it from within netscape or other clients.  I will be 
investigating further.
 As far as I can tell, it's only on the AUTH LOGIN which I'm having this 
issue (although more testing is needed).  It just doesn't seem to keep 
enough significant characters to return true.  And in theory, the patch 
should just pass it's information off to vpopmail.
 I'll do some more investigating later today and see what I can come up 
with.  AUTH LOGIN sends the base64 
(http://makcoder.sourceforge.net/demo/base64.php) encoded username and 
password [which is two-way, so really not as secure, but it's better than 
nothing], one per line.

-M

From: Jeremy Kitchen <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: Re: [vchkpw] SMTP-Auth bug in passwords?
Date: Wed, 10 Sep 2003 00:10:30 -0500
I apologize for sending a copy directly to you Anthony, reply button in
evolution is a little crazy sometimes :)
On Wed, 2003-09-10 at 00:06, Anthony Baratta wrote:
> Tom...
>
> Doesn't the AUTH LOGIN state that he's going to use Base64 encoding?? If 
he
> put in AUTH CRAM-MD5 then it would be expecting MD5 encoding.
>
> So this appears to be a problem with LOGIN, either in the patch or with
> vPopmail.
>
> Do I have my logic wrong??

the smtp-auth patch you are probably using wrongly advertises that it
can handle CRAM-MD5.  Simply edit qmail-smtpd.c, search for the
CRAM-MD5, remove it, rebuild qmail-smtpd, and you're set.  I just did
this today, and it worked fine.
--
Jeremy Kitchen
Systems Administrator
.
Inter7 Internet Technologies, Inc.
www.inter7.com
866.528.3530 toll free
847.492.0470 int'l
847.492.0632 fax
GNUPG key ID: 93BDD6CE

_
STOP MORE SPAM with the new MSN 8 and get 2 months FREE*   
http://join.msn.com/?page=features/junkmail

Re: [vchkpw] lets stop the fight!

[Evren Yurtesen]

I ment branches :) ok :) sorry...

Evren

On Wed, 10 Sep 2003, Adam Hooper wrote:

> Two CVS sources is a nightmare -- as a user, I'd much rather two 
> branches on the same source, so I could just do, for example, 'cvs up -r 
> UNSTABLE'
> 
> -- 
> Adam Hooper
> [EMAIL PROTECTED]
> 
> Evren Yurtesen wrote:
> > I dont see why you fight over this. There should be two cvs sources anyhow
> > one for current development branch and one for stable releases branch.
> 
> 
> 
> 

Re: [vchkpw] lets stop the fight!

[Adam Hooper]

Two CVS sources is a nightmare -- as a user, I'd much rather two 
branches on the same source, so I could just do, for example, 'cvs up -r 
UNSTABLE'

--
Adam Hooper
[EMAIL PROTECTED]
Evren Yurtesen wrote:
I dont see why you fight over this. There should be two cvs sources anyhow
one for current development branch and one for stable releases branch.

Re: [vchkpw] MySQL support in SqWebmail

[Adam Hooper]

We use sqwebmail with MySQL and have had no problems. Where did you read 
that it doesn't work?

--
Adam Hooper
[EMAIL PROTECTED]
til wrote:
Hi,
i have a running setup using vchkpw with cdb authentication. I thought 
about switching to MySql Authentication to have a better overview over 
the existing accounts. Somewhere i read that Sqwebmail does not 
completely work with Mysql authentication and still vchkpw should be 
used. The problem is, that if vpopmail is already using mysql, new 
accounts will only be created in the databse so sqwebmail cannot login 
unless i convert them back from the mysql to cdb files ?
What is the best way if i want to use the mysql database as the only 
source for login and password data ?
Thanks,
Till

Re: [vchkpw] SMTP-Auth bug in passwords?

[Mike Miller]

Nope.  Not using MD5 passwords.  5.3.20 at present.
-M

From: Tom Collins <[EMAIL PROTECTED]>
To: vpopmail list <[EMAIL PROTECTED]>
Subject: Re: [vchkpw] SMTP-Auth bug in passwords?
Date: Tue, 9 Sep 2003 21:24:31 -0700
On Tuesday, September 9, 2003, at 08:40  PM, Mike Miller wrote:
Looking just below, the SPAMmer who made use of this, used the same 
username and password.  I then tried the base64 password for their 
'webmaster00' password and that [d2VibWFzdGVyMDA=] works as well.  I then 
tried truncating their password character by character.  What I found was 
that only when I brought the password to 'webmast' (webmaste still 
worked), did it stop authenticating properly.
What version of vpopmail?

Are you using MD5 passwords (go to your vpopmail source directory and `grep 
MD5 config.h`)?  If not, I think crypt() only uses the first 8 characters 
of the password.  I'm not sure what the limit is if you're using MD5.

--
Tom Collins
[EMAIL PROTECTED]
QmailAdmin: http://qmailadmin.sf.net/  Vpopmail: http://vpopmail.sf.net/
Info on the Sniffter hand-held Network Tester: http://sniffter.com/

_
Add photos to your messages with MSN 8. Get 2 months FREE*.  
http://join.msn.com/?page=features/featuredemail

Re: [vchkpw] Re: Inter7, vpopmail, and open source standards

[Chris Pugh]

> I doubt it because this thread shows that nobody
> owns GPLd software  and that monopolies are not 
> possible in Open Source.

My ha'penny / cents worth:

If this statement is true then make impartiality the
byword. Total admin control over the project should be
given neither to Tom nor Ken, but to an independent
indiviual, a moderator, not necessarily someone with a
vested interest in the vpopmail project.

IMVHO, and in view of current comments, I've yet to
see evidence of such a person on this list!

On the Inter7 base page vopomail along with other 
items is listed under 'Free Software'

http://www.gnu.org/philosophy/free-sw.html

Who is going to draw what line and where?


C.

__
Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software
http://sitebuilder.yahoo.com

[vchkpw] MySQL support in SqWebmail

[til]

Hi, 

i have a running setup using vchkpw with cdb authentication. I thought about 
switching to MySql Authentication to have a better overview over the 
existing accounts. Somewhere i read that Sqwebmail does not completely work 
with Mysql authentication and still vchkpw should be used. The problem is, 
that if vpopmail is already using mysql, new accounts will only be created 
in the databse so sqwebmail cannot login unless i convert them back from the 
mysql to cdb files ? 

What is the best way if i want to use the mysql database as the only source 
for login and password data ? 

Thanks,
Till

[vchkpw] Re: Inter7, vpopmail, and open source standards

[Paul L. Allen]

dalmata writes:

> No need to use bad words.

Those words expressed my feelings exactly; other words would not.

> That is a personal attack

Correct.  As were her comments about Tom.  Her attack was more subtle
but it was still a personal attack.  I consider her attack to be worse
than mine precisely because it was disguised and intended to mislead
people into thinking it was not an attack but a call for unity.

> that is useless and uncomfortable to me.

I found it useful and comfortable.  You get to determine what you read
and write, not what I read and write.  Therefore your only way of avoiding
discomfort is to exert the control which you do have over what you read
and not the control which you would like to have (but do not) over what I 
write.

> I am sure that Bill Gates would be very glad to read this thread.

I doubt it because this thread shows that nobody owns GPLd software
and that monopolies are not possible in Open Source.  The fact that
there can be dissent is entirely foreign to Bill's methods of operation.
Bill would be far happier if Inter 7 had been able to enforce their
desired control over Tom Collins and the users of vpopmail because then
development of vpopmail would have stalled again.  Bill would be far
happier if owners of projects could insist that nobody fork them
because they had left the project idle for several months and ignored
requests for bugs to be fixed.

> And Ben Laden to read your comments.

Dubya has done more to drive up al-Qaeda recruitment than bin Laden
ever did.  Which is only fair because bin Laden has always been a puppet
of the same people that control Dubya.  The attacks of 9-11 benefited
Bush and his cronies immensely, which is why the ample warnings were
"ignored," why the US Air Force did not follow Standard Operating 
Procedures that day, and why there continues to be a massive cover-up
over events.  For a European you are almost as misinformed as most people
in the US yet you do not have their excuse of media willing to cover up 
Bush's lies and incompetence.  This recent article by a UK Member of 
Parliament covers only a small portion of the damning evidence against
Bush but should be enough to let you use google to find the rest.
http://politics.guardian.co.uk/iraq/comment/0,12956,1036687,00.html

-- 
Paul Allen
Softflare Support

Re: [vchkpw] Customise Bounce message

[Oden Eriksson]

onsdagen den 10 september 2003 12.57 skrev Emris:
> Hi,
>
> on 06.05.2003 01:19 CoyoteTM said the following:
> > I need to customise the bounce messages. How can I do that ?
> > (...well maybe this is qmail related question, but maybe someone can help
> > me...)
>
> There several patches which can help you to get desired results. You can
> search via Google. If this doesn't helps, i'll provide them to you.

http://www.deserve-it.com/sw/patches/


-- 
Regards // Oden Eriksson, Deserve-IT.com

Re: [vchkpw] lets stop the fight!

[Boris Pavlov]

100% right.

it will be really a pain to have two separate sources.

and if they don't agree between, i think that ken should keep the name 
"vpopmail" for this product. the manner and style for the comments does 
not apply there. futuremore, the public can not what happened between 
tom and ken, making ken so angry.

and to be more specific, i think it is really "enemy inside" tactic to 
use sourceforge's popularity to forcibly change the head of the project 
- and i can somehow understand ken.

but your solution, evren, is really the best - for an commerical 
support/soluton provider it will be good to have/manage the stable versions.

if they can not make agreement, it will be fair if tom steps back or at 
least _rename_ the project - yes, change the name, tpopmail for example, 
and start his _own_ clone.

i think that this is becoming quite quickly a fight for the vpopmail's 
name. if tom cares so much for the source and the users, it is up to him 
to start a new product tree based on current vpopmail - and maybe inter7 
can put a link to his clone on their web site even...

..but to be a god-like judge who decides who can and who can not manage 
the project ("own" it) ... placing himsef on a first place... nah, i can 
not agree with such a way to "make good" and "care" for something. anything.

wwell edi
Evren Yurtesen wrote:
I dont see why you fight over this. There should be two cvs sources anyhow
one for current development branch and one for stable releases branch.
The new features shouldnt be added to stable branch until they are
relatively bug free.
Since Tom seems to handle cutting edge stuff in the code, we need an admin
for stable releases. Ken can be stable releases admin. (I dont know how
this can be arranged in sourceforge though) Everybody can be happy this
way.
Listen to the users, they want stable releases. Stop fighting over
vpopmail and share the responsibility. The need for stable releases is
obvious. Yet Tom seems to do excellent job in refining the code and
adding new features he seems to come short on creating stable releases.
I see a job vacancy there for Ken :) and inter7.
I think it is REALLY bad idea to have two vpopmail development going on
with different names. That would cause the development force to divide in
two also. Why not use all our force to create one properly working
vpopmail distribution instead of doing two which doesnt satisfy anyone
because of bugs or lack of features?
Evren

Re: [vchkpw] Inter7, vpopmail, and open source standards

[dalmata]

> De: Paul L. Allen [mailto:[EMAIL PROTECTED]
> 
> 
> Ms. Catherine Kouzmanoff writes:
> 
> > It is a  time to call together everyone on this list to insist that 
> > Tom
> > Collins  add Ken Jones or another representative from Inter7.
> 
> I've been using vpopmail for a few years now and didn't really care 
> who was in control as long as somebody was.  When I saw Ken's comments 
> I thought that perhaps Tom had acted a little precipitously in 
> blocking Ken.  After seeing your shameful comments I am inclined to 
> think that Tom was correct.
> 

I can agree with that. I didn't like Ms. Kouzmanoff's letter either.

> Ken himself seems like a nice guy who is genuinely concerned for the 
> users and who feels left out.  You seem like a piece of shit 
> determined to keep the Inter7 stamp on vpopmail at all costs (which 
> fall upon the users).

No need to use bad words. That is a personal attack that is useless and
uncomfortable to me. Please do those comments privately.

> 
> You have George Dumbya Dush's talent for uniting people.  Most of the 
> world now hates the US and most of this list now hates you and Inter 
> 7. Well done!
> 
> --
> Paul Allen
> Softflare Support
> 

I don't hate neither Inter7 nor Ms. Kouzmanoff nor Bush. Not even that
President that missed his responsibilities because of a spot in a dress. 

No need to mix politics either, but, as a European I can tell you that [some
of] the world hates the US[/capitalism] since, at least, 50 years ago.

Even some Americans kind of hate US/capitalism and defend the "First Blame
America" phrase.

In Open Source initiatives, like in politics, the enemy is inside.

I am sure that Bill Gates would be very glad to read this thread. And Ben
Laden to read your comments.

Kind regards.

Re: [vchkpw] Customise Bounce message

[Emris]

Hi,

on 06.05.2003 01:19 CoyoteTM said the following:

I need to customise the bounce messages. How can I do that ?
(...well maybe this is qmail related question, but maybe someone can help me...)
There several patches which can help you to get desired results. You can 
search via Google. If this doesn't helps, i'll provide them to you.

--
Best regards,
 Emris   mailto:[EMAIL PROTECTED]

[vchkpw] Doesn't anyone have any idea about my problem...?

[Shai]

I posted a mail on the list about having trouble setting up the 
.quotawarn.msg . I actually did set it up.. but it's not going through to 
the mailbox I have with over 90% (right now it's 93%). 

Any ideas, please? 

Shai.