[vchkpw] Trouble authenticating unix AND vpopmail users in POP3

2009-08-09 Thread up


I have an odd problem, that I just discovered on a server that I need to 
put into production tomorrow.


I have a mixture of unix system users AND vpopmail virtual users on the 
same server, but for a reason I cannot figure out, I can authenticate 
vpopmail users fine for POP3 or IMAP, but I can NOT authenticate system 
users for POP3.  I am running qmail's stock pop3d with vchkpw like this:


#!/bin/sh
/usr/local/bin/tcpserver -l 0 -R -H 0 pop3 /var/qmail/bin/qmail-popup \
SERVERNAME /home/vpopmail/bin/vchkpw /var/qmail/bin/qmail-pop3d Maildir 

I can authenticate both types of users fine against IMAP, using the 
standard courier-imap startup script (not using tcpserver).


I get this error in the maillog (telnet localhost 110):

vchkpw-webmail: vpopmail user not found someuser@:127.0.0.1

It's like vchkpw is ONLY trying to authenticate vpopmail users.

I could have sworn I had this going a while back, but since then the only 
changes I can think of is the addition of a bunch of users/assign entries 
for the vpopmail virtual domains.  Does there need to be a catchall 
entry there for system users that just use normal delivery to $HOME ?


Here are the authdaemonrc auth modules:

authmodulelist=authvchkpw authpam

Both /etc/pam.d/imap and /etc/pam.d/pop3 have this entry:

auth   requiredpam_unix.sono_warntry_first_pass

Ideas?

James Smallacombe PlantageNet, Inc. CEO and Janitor
u...@3.am   http://3.am
=

!DSPAM:4a7f1a4332714290833933!



[vchkpw] Re: Trouble authenticating unix AND vpopmail users in POP3

2009-08-09 Thread up


Please disregard this...I found the problem.  I had initially installed 
the devel (5.5) version of vpopmail from FreeBSD ports, but uninstalled 
it when I ran into some minor anomolies with qmail-admin and installed 
5.4.27.  When I did that, I forgot to add


WITH_PASSWD=YES

to the ports Makefile.  I reinstalled it and it looks fine now.

On Sun, 9 Aug 2009, u...@3.am wrote:



I have an odd problem, that I just discovered on a server that I need to put 
into production tomorrow.


I have a mixture of unix system users AND vpopmail virtual users on the same 
server, but for a reason I cannot figure out, I can authenticate vpopmail 
users fine for POP3 or IMAP, but I can NOT authenticate system users for 
POP3.  I am running qmail's stock pop3d with vchkpw like this:


#!/bin/sh
/usr/local/bin/tcpserver -l 0 -R -H 0 pop3 /var/qmail/bin/qmail-popup \
SERVERNAME /home/vpopmail/bin/vchkpw /var/qmail/bin/qmail-pop3d Maildir 

I can authenticate both types of users fine against IMAP, using the standard 
courier-imap startup script (not using tcpserver).


I get this error in the maillog (telnet localhost 110):

vchkpw-webmail: vpopmail user not found someuser@:127.0.0.1

It's like vchkpw is ONLY trying to authenticate vpopmail users.

I could have sworn I had this going a while back, but since then the only 
changes I can think of is the addition of a bunch of users/assign entries for 
the vpopmail virtual domains.  Does there need to be a catchall entry there 
for system users that just use normal delivery to $HOME ?


Here are the authdaemonrc auth modules:

authmodulelist=authvchkpw authpam

Both /etc/pam.d/imap and /etc/pam.d/pop3 have this entry:

auth   requiredpam_unix.sono_warntry_first_pass

Ideas?

James Smallacombe PlantageNet, Inc. CEO and Janitor
u...@3.am   http://3.am
=



James Smallacombe PlantageNet, Inc. CEO and Janitor
u...@3.am   http://3.am
=

!DSPAM:4a7f1d8b32714612414082!



[vchkpw] Stupid roaming-users question

2006-08-28 Thread up

I've configured this before, but I can't figure out why it isn't working
this time (new server).  I compiled vpopmail with roaming users, and it's
putting the open-smtp where it always has, under ~vpopmail/etc/.  In the
past, tcpserver always found it, AND the /etc/tcp.smtp.cdb file even
though it was invoked thusly:

-x/etc/tcp.smtp.cdb

How does one get tcpserver to recognise the rules in both files?

TIA,

James Smallacombe PlantageNet, Inc. CEO and Janitor
[EMAIL PROTECTED]   
http://3.am
=



Re: [vchkpw] Re: Stupid roaming-users question

2006-08-28 Thread up
On Mon, 28 Aug 2006 [EMAIL PROTECTED] wrote:

 On Mon, 28 Aug 2006 [EMAIL PROTECTED] wrote:

  On Mon, 28 Aug 2006, Peter Palmreuther wrote:
 
   Hello List,
  
   On Monday, August 28, 2006 at 5:04:23 PM up wrote:
  
I've configured this before, but I can't figure out why it isn't working
this time (new server).  I compiled vpopmail with roaming users, and 
it's
putting the open-smtp where it always has, under ~vpopmail/etc/.  In the
past, tcpserver always found it, AND the /etc/tcp.smtp.cdb file even
though it was invoked thusly:
  
-x/etc/tcp.smtp.cdb
  
How does one get tcpserver to recognise the rules in both files?
  
   Simple. Make /etc/tcp.smtp.cdb a symlink to ~vpopmail/etc/tcp.smtp.cdb.
 
  Sorry if I'm still confused...on the old server, I actually had simlinks
  the other way around.  In ~vpopmail/etc/ I had simlinks to /etc/tcp.smtp
  and /etc/tcp.smtp.cdb and it worked.  It doesn't on the new install.
 
  I tried reversing it the way you recommended, but it still doesn't work.
  (chowned vpopmail all the files, although open_smtp always gets created as
  root owned).
 
  I assume that somehow tcpserver either sees the open_smtp file when you do
  this, of its contents get somehow included in the tcp.smtp file, but I'm
  not seeing it...how does tcpserver know about the contents of the
  open_smtp file?

 replying to my own post...I found that FreeBSD ports, where I installed it
 from, for some reason has some nonsensical defaults, such as:

 --enable-tcpserver-file=/usr/local/vpopmail/etc/tcp.smtp

 yet, I put in a symlink from /usr/local/vpopmail/etc to
 /home/vpopmail/etc, which I would have thought would have fixed this, but
 it didn't...

Please disregard...it did fix it, I just had to give vpopmail a minute to
update the tcp.cdb.

Sorry...

James Smallacombe PlantageNet, Inc. CEO and Janitor
[EMAIL PROTECTED]   
http://3.am
=



Re: [vchkpw] Re: Stupid roaming-users question

2006-08-28 Thread up
On Tue, 29 Aug 2006, Alex Borges wrote:

 I hope its the question thats stupid. We regretfully have no
 human-rights compatible fix for stupid users.

Sorry for the unwanted noise...in my rush to install a bazillion different
packages, it didn't occur to me that FreeBSD ports would default to what
looks like a non-standard location for the cdb file.

James Smallacombe PlantageNet, Inc. CEO and Janitor
[EMAIL PROTECTED]   
http://3.am
=



[vchkpw] vpasswd.cdb problems?

2006-08-25 Thread up

I tried the qmailadmin list to no avail, but since this appears that it
might be a vchkpw problem, I thought I'd try here.  I am trying to make
the following upgrades:

qmailadmin 1.0.2  to  1.2.10
vpopmail 5.3.8 to 5.4.13
sqwebmail 4.0.3 to 5.1.2

the vpopmail users password files are simple .cdb files in:

~vpopmail/domains/somedomain.com/vpasswd.cdb

If I create a new test domain, postmaster and users, they all authenticate
fine in qmailadmin and sqwebmail.  The old domains that I copied over do
not, even though the format looks the same to me.

I checked the docs for vconvert, but they seem to only pertain to
converting to another database format.  Is there something I'm missing
here?

TIA!

James Smallacombe PlantageNet, Inc. CEO and Janitor
[EMAIL PROTECTED]   
http://3.am
=




Re: [vchkpw] vpasswd.cdb problems?

2006-08-25 Thread up

Please disregard this.  I stupidly forgot all about the

/var/qmail/users

file.

On Fri, 25 Aug 2006 [EMAIL PROTECTED] wrote:


 I tried the qmailadmin list to no avail, but since this appears that it
 might be a vchkpw problem, I thought I'd try here.  I am trying to make
 the following upgrades:

 qmailadmin 1.0.2  to  1.2.10
 vpopmail 5.3.8 to 5.4.13
 sqwebmail 4.0.3 to 5.1.2

 the vpopmail users password files are simple .cdb files in:

 ~vpopmail/domains/somedomain.com/vpasswd.cdb

 If I create a new test domain, postmaster and users, they all authenticate
 fine in qmailadmin and sqwebmail.  The old domains that I copied over do
 not, even though the format looks the same to me.

 I checked the docs for vconvert, but they seem to only pertain to
 converting to another database format.  Is there something I'm missing
 here?

 TIA!

 James Smallacombe   PlantageNet, Inc. CEO and Janitor
 [EMAIL PROTECTED] 
 http://3.am
 =




James Smallacombe PlantageNet, Inc. CEO and Janitor
[EMAIL PROTECTED]   
http://3.am
=



[vchkpw] Multiple open-smtp s?

2004-04-27 Thread up

I use vpopmail strictly for POP authentication on a particular server, and
I'd like to make it so that a different SMTP server will read that POP
server's open-smtp info *in addition* to its own to allow relaying.  I'd
like to do this without using MySQL.

Can/should this be done using NFS and starting tcpserver with more than
one '-x (say -x/etc/tcp.smtp.cdb AND -x/mnt/etc/tcp.smtp.cdb) or is there
a better way to get another .cdb from another host in there?

TIA,

James Smallacombe PlantageNet, Inc. CEO and Janitor
[EMAIL PROTECTED]   http://3.am
=



Re: [vchkpw] Multiple open-smtp s?

2004-04-27 Thread up
On Tue, 27 Apr 2004, Jeremy Kitchen wrote:

 On Tuesday 27 April 2004 12:13 pm, [EMAIL PROTECTED] wrote:
  I use vpopmail strictly for POP authentication on a particular server, and
  I'd like to make it so that a different SMTP server will read that POP
  server's open-smtp info *in addition* to its own to allow relaying.  I'd
  like to do this without using MySQL.

 Bruce Guenter's relay-ctrl package (http://untroubled.org/relay-ctrl) is far
 better suited for this style of setup, and is safe to use over NFS (I know,
 I've done it) and doesn't require rebuilding a CDB for every authentication,
 etc.

Sounds like the trick, but will it also work with vchkpw?  I couldn't find
any indication on Bruce's site (and please don't make me join yet another
mailing list to get this one answer!).

One of my servers could do without vpopmail, since it's only using it for
pop auth, but the other has virtual users.

TIA!

James Smallacombe PlantageNet, Inc. CEO and Janitor
[EMAIL PROTECTED]   http://3.am
=



Re: [vchkpw] How to leave a copy of email on the qmail server usingpop3 ...

2002-11-21 Thread up
On Thu, 21 Nov 2002, Lucy wrote:

 Thank you all for the suggestions.
 
 I did do the client configuration as you described as below b4, 
 but no effects.  really  why ?
 Outlook Express - Tools - Accounts - Mail - Properties - Advanced
  and tick the box Leave copy of message on server
 
 If server can keep the copy where does qmail store still 
 /home/vpopmail/domains/peak-mobile.com/lucy.liu/Maildir/new/
  ?

~user/Maildir/cur

James Smallacombe PlantageNet, Inc. CEO and Janitor
[EMAIL PROTECTED] http://3.am
=





[vchkpw] Re: Best IMAPd for vchkpw w/roaming-users

2002-11-20 Thread up

Sorry for replying to the list, but I'm getting into a time crunch here.
I see no references to updating this file in the FAQ or any other docs.
In fact, preauthvchkpw.c doesn't appear to exist anywhere in the vpopmail
source, only in sqwebmail and courier-imap.  Can someone please shed some
light here?

TIA,

On Wed, 20 Nov 2002, Nicholas Horwood wrote:

 hi there.
 
 Did you update preauthvchkpw.c source file in vpopmail for use with
 courier-imap?
 
 nicholas
 
 
  yep, I'm invoking qmail-pop3d with vchkpwd and authentications are
  working with it...
 
  thanks,
 
  On Tue, 19 Nov 2002, Nicholas Horwood wrote:
 
  Have you managed to get vpopmail to authenticate your pop3 requests?
  It could be that vpopmail isn't set up properly.
 
  nicholas
 
   On Tue, 19 Nov 2002, nicholas wrote:
  
   Hi James.
   Didn't know you were on this list, (I hang out on inetaccess). Can
  you authenticate using authvchpw in imap.conf before you try using
  roaming? or are you not getting past authentication
  
   No, the only way I've gotten courier-imap to authenticate at all is
  to run its authdaemon with authpam listed.
  
   nicholas
  
   
I checked all the docs, list archives for this and the
  Courier-IMAP
   list, followed the FAQ at: http://www.inter7.com/vpopmail/FAQ (no
  34) and what I'm trying to do still doesn't seem to work...I'm
  trying to configure the following:
   
qmail/tcpserver/sqwebmail/maildrop/vpopmail -- All of these are
   working fine together.
   
I am authenticating against the system password database, with no
   virtual users, with roaming-users on.  To do this, I had to use
  sqwebmail's authdaemon with authdaemon in the authmodule list.
   
The only way I've been able to get courier-imap users to
   authenticate successfully is to start its authdaemon with authpam
  in the module list. Putting authvchpw in that list still does not
  allow roaming users, despite following vpopmail's faq instructions
  (perhaps this only works for virtual users?).
   
If somebody can recommend another good Maildir native IMAPd that
   works this way, I'd be grateful.  I wouldn't mind a popd
  replacement that works with the same setup but shows the client
  large attachment download status (STAT?).
   
TIA,
   
 
 
 
 

James Smallacombe PlantageNet, Inc. CEO and Janitor
[EMAIL PROTECTED] http://3.am
=





[vchkpw] Best IMAPd for vchkpw w/roaming-users

2002-11-18 Thread up

I checked all the docs, list archives for this and the Courier-IMAP list,
followed the FAQ at: http://www.inter7.com/vpopmail/FAQ (no 34) and what
I'm trying to do still doesn't seem to work...I'm trying to configure the
following:

qmail/tcpserver/sqwebmail/maildrop/vpopmail -- All of these are working
fine together.

I am authenticating against the system password database, with no virtual
users, with roaming-users on.  To do this, I had to use sqwebmail's
authdaemon with authdaemon in the authmodule list.

The only way I've been able to get courier-imap users to authenticate
successfully is to start its authdaemon with authpam in the module list.
Putting authvchpw in that list still does not allow roaming users,
despite following vpopmail's faq instructions (perhaps this only works
for virtual users?).

If somebody can recommend another good Maildir native IMAPd that works
this way, I'd be grateful.  I wouldn't mind a popd replacement that works
with the same setup but shows the client large attachment download status
(STAT?).

TIA,

James Smallacombe PlantageNet, Inc. CEO and Janitor
[EMAIL PROTECTED] http://3.am
=