[vchkpw] vpopmaild

2010-04-08 Thread Victor Subervi
Hi;
Where can I download a copy of vpopmaild for 5.4.30?
TIA,
Victor


!DSPAM:4bbe1ddf32717413446959!


Re: [vchkpw] vpopmaild

2010-04-08 Thread Victor Subervi
On Thu, Apr 8, 2010 at 2:13 PM, Rick Macdougall ri...@ummm-beer.com wrote:

 On 08/04/2010 2:18 PM, Victor Subervi wrote:

 Hi;
 Where can I download a copy of vpopmaild for 5.4.30?
 TIA,
 Victor


 Hi,

 It should be part of the standard tarball, and it should already be
 installed in $vpopmail/bin (usually /home/vpopmail/bin).


Nope. Ran a find for it and got a zillion results with Permission denied.
Dunno what that means, but didn't find the binary. How build it without
rebuilding vpopmail?
TIA,
V


!DSPAM:4bbe27f832717075316271!


Re: [vchkpw] vpopmaild

2010-04-08 Thread Rick Macdougall

On 08/04/2010 3:01 PM, Victor Subervi wrote:

On Thu, Apr 8, 2010 at 2:13 PM, Rick Macdougall ri...@ummm-beer.com
mailto:ri...@ummm-beer.com wrote:

On 08/04/2010 2:18 PM, Victor Subervi wrote:

Hi;
Where can I download a copy of vpopmaild for 5.4.30?
TIA,
Victor


Hi,

It should be part of the standard tarball, and it should already be
installed in $vpopmail/bin (usually /home/vpopmail/bin).


Nope. Ran a find for it and got a zillion results with Permission
denied. Dunno what that means, but didn't find the binary. How build it
without rebuilding vpopmail?


Hi,

Can you show me the output of

ls -l /home/vpopmail/bin/

Regards,

Rick


!DSPAM:4bbe2e0d32711561818756!



Re: [vchkpw] vpopmaild

2010-04-08 Thread Victor Subervi
On Thu, Apr 8, 2010 at 2:57 PM, Rick Macdougall ri...@ummm-beer.com wrote:

 Can you show me the output of

 ls -l /home/vpopmail/bin/


# ls -l /home/vpopmail/bin/
total 1712
-rwx--x--x 1 vpopmail vchkpw 65880 Feb 23 04:46 clearopensmtp
-rwx--x--x 1 vpopmail vchkpw 70056 Feb 23 04:46 dotqmail2valias
-rwx--x--x 1 vpopmail vchkpw 65912 Feb 23 04:46 vaddaliasdomain
-rwx--x--x 1 vpopmail vchkpw 70008 Feb 23 04:46 vadddomain
-rwx--x--x 1 vpopmail vchkpw 70008 Feb 23 04:46 vadduser
-rwx--x--x 1 vpopmail vchkpw 70056 Feb 23 04:46 valias
-rwx--x--x 1 vpopmail vchkpw 65912 Feb 23 04:46 vchangepw
-rwx--x--x 1 vpopmail vchkpw 78352 Feb 23 04:46 vchkpw
-rwx--x--x 1 vpopmail vchkpw 70008 Feb 23 04:46 vconvert
-rwx--x--x 1 vpopmail vchkpw 65912 Feb 23 04:46 vdeldomain
-rwx--x--x 1 vpopmail vchkpw 74248 Feb 23 04:46 vdelivermail
-rwx--x--x 1 vpopmail vchkpw 66904 Feb 23 04:46 vdeloldusers
-rwx--x--x 1 vpopmail vchkpw 65912 Feb 23 04:46 vdeluser
-rwx--x--x 1 vpopmail vchkpw 66968 Feb 23 04:46 vdominfo
-rwx--x--x 1 vpopmail vchkpw 65912 Feb 23 04:46 vipmap
-rwx--x--x 1 vpopmail vchkpw 65912 Feb 23 04:46 vkill
-rwx--x--x 1 vpopmail vchkpw 65880 Feb 23 04:46 vmkpasswd
-rwx--x--x 1 vpopmail vchkpw 74776 Feb 23 04:46 vmoddomlimits
-rwx--x--x 1 vpopmail vchkpw 70008 Feb 23 04:46 vmoduser
-rwx--x--x 1 vpopmail vchkpw 65912 Feb 23 04:46 vpasswd
-rwx--x--x 1 vpopmail vchkpw 69208 Feb 23 04:46 vpopbull
-rwx--x--x 1 vpopmail vchkpw 65912 Feb 23 04:46 vsetuserquota
-rwx--x--x 1 vpopmail vchkpw 70040 Feb 23 04:46 vuserinfo


!DSPAM:4bbe2f0b32716456111029!


Re: [vchkpw] vpopmaild

2010-04-08 Thread Rick Macdougall

On 08/04/2010 3:31 PM, Victor Subervi wrote:

On Thu, Apr 8, 2010 at 2:57 PM, Rick Macdougall ri...@ummm-beer.com
mailto:ri...@ummm-beer.com wrote:

Can you show me the output of

ls -l /home/vpopmail/bin/


# ls -l /home/vpopmail/bin/
-rwx--x--x 1 vpopmail vchkpw 74776 Feb 23 04:46 vmoddomlimits
-rwx--x--x 1 vpopmail vchkpw 70008 Feb 23 04:46 vmoduser
-rwx--x--x 1 vpopmail vchkpw 65912 Feb 23 04:46 vpasswd
-rwx--x--x 1 vpopmail vchkpw 69208 Feb 23 04:46 vpopbull


Very strange.  Guess one of the Dev's will have to speak up because on 
my 5.4.13 it's installed by default.


-rwx--x--x  1 vpopmail vchkpw 63068 Aug  1  2007 vmoduser
-rwx--x--x  1 vpopmail vchkpw 60348 Aug  1  2007 vpasswd
-rwx--x--x  1 vpopmail vchkpw 64476 Aug  1  2007 vpopbull
-rwx--x--x  1 vpopmail vchkpw 85404 Aug  1  2007 vpopmaild
-rwx--x--x  1 vpopmail vchkpw 60412 Aug  1  2007 vsetuserquota

Did you install with the sourceforge package or a 3rd party package ?

Regards,

Rick

!DSPAM:4bbe313f32711221957189!



Re: [vchkpw] vpopmaild

2010-04-08 Thread Victor Subervi
On Thu, Apr 8, 2010 at 3:10 PM, Rick Macdougall ri...@ummm-beer.com wrote:

 On 08/04/2010 3:31 PM, Victor Subervi wrote:

 On Thu, Apr 8, 2010 at 2:57 PM, Rick Macdougall ri...@ummm-beer.com
 mailto:ri...@ummm-beer.com wrote:

Can you show me the output of

ls -l /home/vpopmail/bin/


 # ls -l /home/vpopmail/bin/
 -rwx--x--x 1 vpopmail vchkpw 74776 Feb 23 04:46 vmoddomlimits
 -rwx--x--x 1 vpopmail vchkpw 70008 Feb 23 04:46 vmoduser
 -rwx--x--x 1 vpopmail vchkpw 65912 Feb 23 04:46 vpasswd
 -rwx--x--x 1 vpopmail vchkpw 69208 Feb 23 04:46 vpopbull


 Very strange.  Guess one of the Dev's will have to speak up because on my
 5.4.13 it's installed by default.

 -rwx--x--x  1 vpopmail vchkpw 63068 Aug  1  2007 vmoduser
 -rwx--x--x  1 vpopmail vchkpw 60348 Aug  1  2007 vpasswd
 -rwx--x--x  1 vpopmail vchkpw 64476 Aug  1  2007 vpopbull
 -rwx--x--x  1 vpopmail vchkpw 85404 Aug  1  2007 vpopmaild
 -rwx--x--x  1 vpopmail vchkpw 60412 Aug  1  2007 vsetuserquota

 Did you install with the sourceforge package or a 3rd party package ?


qmailrocks
V


!DSPAM:4bbe342032711346911687!


[vchkpw] vpopmaild change of owner with newly created files

2009-09-10 Thread Harm van Tilborg

Hi all,

I found a small bug in both vpopmail 5.4 and 5.5. It has to do with the 
`write_file' functionality in vpopmaild. The file owner was not set, so 
that - when you're running vpopmaild as root - the file is owned by 
root. As far as I know vpopmaild can only mutate files that are inside 
the vpopmail domain directory - which indeed is completely owned by the 
vpopmail user. The included patch changes the owner of the newly created 
file to the vpopmail user. It also sets the umask to vpopmail's standard 
(077).


The patch is for 5.4.27, but the bug also exists in the current 5.5 SVN 
branch. (Ow yeah, small remark: why is this file opened as `w+', I don't 
see any reading of the file.)


--
Kind regards,
Harm van Tilborg

Tiscom Hosting B.V.


!DSPAM:4aa8ec1132711908363805!
--- vpopmail-5.4.27-vanilla/vpopmaild.c 2009-02-18 18:27:22.0 +0100
+++ vpopmail-5.4.27/vpopmaild.c 2009-09-10 13:50:16.0 +0200
@@ -1550,6 +1550,8 @@
   FILE *fs;
   static char tmpbuf[1024];

+  umask(VPOPMAIL_UMASK);
+
   /* must supply directory parameter */
   if ((oldfilename=strtok(NULL,TOKENS))==NULL) {
 show_error( ERR_FNAME_REQD, 2001 );
@@ -1572,6 +1574,13 @@
   }
   fclose(fs);

+  /* Change ownership */
+  if ( chown(filename,VPOPMAILUID,VPOPMAILGID) == -1 ) {
+snprintf(WriteBuf,sizeof(WriteBuf),RET_ERR 0.2003 %s RET_CRLF,
+  strerror(errno));
+return(-1);
+  }
+
   snprintf(WriteBuf,sizeof(WriteBuf), RET_OK);
   return(0);
 }

!DSPAM:4aa8ec1132711908363805!


[vchkpw] vpopmaild

2008-06-27 Thread Lampa
Hello,

seem that in vpopmaild is little bug when creating .qmail file (i
think that is function int write_file()). There is fputs(tmpbuf,fs);
(about line 1573) but tmpbuf can contain (and contains) \r\n which is
not stripped. Tmpbuf should be stripped from \r\n and addedd only \n
(if nextline exists or can be added always)

-- 
Lampa

!DSPAM:4864928d32351550713605!



Re: [vchkpw] vpopmaild

2008-06-27 Thread Alessio Cecchi
Il Friday 27 June 2008 09:11:06 Lampa ha scritto:
 Hello,

 seem that in vpopmaild is little bug when creating .qmail file (i
 think that is function int write_file()). There is fputs(tmpbuf,fs);
 (about line 1573) but tmpbuf can contain (and contains) \r\n which is
 not stripped. Tmpbuf should be stripped from \r\n and addedd only \n
 (if nextline exists or can be added always)

Search in list my discussion Problem with add_alias, but on vpopmail-5.4.26 
this problem should be fixed.

Ciao
-- 
Alessio Cecchi is:
@ ILS - http://www.linux.it/~alessice/
Assistenza Sistemi GNU/Linux - http://www.cecchi.biz/
@ PLUG - ex-Presidente, adesso senatore a vita, http://www.prato.linux.it
@ LOLUG - neo-Socio http://www.lolug.net

!DSPAM:4864973832351778565666!



Re: [vchkpw] vpopmaild

2008-06-27 Thread Lampa
Hello,

i'm using vpopmail-5.4.26. Maybe was fixed in common files (vpalias.c)
but vpopmaild in this function is directly writing .qmail file (not
alias).

2008/6/27, Alessio Cecchi [EMAIL PROTECTED]:
 Il Friday 27 June 2008 09:11:06 Lampa ha scritto:

  Hello,
  
   seem that in vpopmaild is little bug when creating .qmail file (i
   think that is function int write_file()). There is fputs(tmpbuf,fs);
   (about line 1573) but tmpbuf can contain (and contains) \r\n which is
   not stripped. Tmpbuf should be stripped from \r\n and addedd only \n
   (if nextline exists or can be added always)


 Search in list my discussion Problem with add_alias, but on vpopmail-5.4.26
  this problem should be fixed.

  Ciao

 --
  Alessio Cecchi is:
  @ ILS - http://www.linux.it/~alessice/
  Assistenza Sistemi GNU/Linux - http://www.cecchi.biz/
  @ PLUG - ex-Presidente, adesso senatore a vita, http://www.prato.linux.it
  @ LOLUG - neo-Socio http://www.lolug.net

  




-- 
Lampa

!DSPAM:4864990832351410120901!



[vchkpw] vpopmaild bug ?

2008-05-06 Thread Lampa
Hello,

i'm playing with vpopmaild and net_vpopmaild class in php.

Problem is that vpopmaild is taking 100% cpu:

  PID USER  PR  NI  VIRT  RES  SHR S %CPU %MEMTIME+  COMMAND
21306 root  20   0  6144  620  496 R  100  0.0   2:09.65 vpopmaild

This happens after dropping telnet connection to localhost and auth
(using control ])

-- 
Lampa

!DSPAM:48204ad5120501736655499!



Re: [vchkpw] vpopmaild bug ?

2008-05-06 Thread Alessio Cecchi
Il Tuesday 06 May 2008 14:10:59 Lampa ha scritto:
 Hello,

 i'm playing with vpopmaild and net_vpopmaild class in php.

 Problem is that vpopmaild is taking 100% cpu:

   PID USER  PR  NI  VIRT  RES  SHR S %CPU %MEMTIME+  COMMAND
 21306 root  20   0  6144  620  496 R  100  0.0   2:09.65 vpopmaild

 This happens after dropping telnet connection to localhost and auth
 (using control ])

I have the same problem, search in vchkpw archive my e-mail with 
subject: vpopmaild use 99% of CPU

Ciao
-- 
Alessio Cecchi is:
@ ILS - http://www.linux.it/~alessice/
Assistenza Sistemi GNU/Linux - http://www.cecchi.biz/
@ PLUG - ex-Presidente, adesso senatore a vita, http://www.prato.linux.it
@ LOLUG - neo-Socio http://www.lolug.net

!DSPAM:48204c1e120509496411975!



Re: [vchkpw] vpopmaild bug ?

2008-05-06 Thread Lampa
Hmm, I see, but no solution there ;(

It's little exploitable (taking all cpu usage).

Seem that:

   if (fgets(ReadBuf,sizeof(ReadBuf),stdin) == NULL)
  return -1;
else
  return(1);

instead:
  fgets(ReadBuf,sizeof(ReadBuf),stdin);
return(1);

in function wait_read() in vpopmaild.c(about line 246) fix that
problem (at least for me)


2008/5/6, Alessio Cecchi [EMAIL PROTECTED]:
 Il Tuesday 06 May 2008 14:10:59 Lampa ha scritto:

  Hello,
  
   i'm playing with vpopmaild and net_vpopmaild class in php.
  
   Problem is that vpopmaild is taking 100% cpu:
  
 PID USER  PR  NI  VIRT  RES  SHR S %CPU %MEMTIME+  COMMAND
   21306 root  20   0  6144  620  496 R  100  0.0   2:09.65 vpopmaild
  
   This happens after dropping telnet connection to localhost and auth
   (using control ])


 I have the same problem, search in vchkpw archive my e-mail with
  subject: vpopmaild use 99% of CPU

  Ciao

 --
  Alessio Cecchi is:
  @ ILS - http://www.linux.it/~alessice/
  Assistenza Sistemi GNU/Linux - http://www.cecchi.biz/
  @ PLUG - ex-Presidente, adesso senatore a vita, http://www.prato.linux.it
  @ LOLUG - neo-Socio http://www.lolug.net

  




-- 
Lampa

!DSPAM:48205ff0120501968158029!



[vchkpw] Vpopmaild Gecos Quota

2008-02-27 Thread Dom inic
I have been testing the usage of vpopmaild and have come across 2 issues
that i would like some assistance on in terms of the commands to use within
the vpopmaild shell

1) Is it possible to directly add comment/gecos when creating accounts
(instead of using mod_user  comment)
2) Create/modify a quota ( I have tried mod_user and quota 10M but it still
mentions that there is no quota)

I am using vpopmail 5.4.25 and if someone has this working if you could let
me know the correct commands syntaxas i am nuts here trying to get it to
work correctly

Thanks


!DSPAM:47c61c35310544725820908!


Re: [vchkpw] vpopmaild use 99% of CPU

2007-11-30 Thread Rick Widmer



Alessio Cecchi wrote:

Hello all,

i'm using vpopmaild to manage some domains (add_user, add_alias ...) with a 
simply php script run on a remote web service.





@4000474fd7970d4bc924 30689  login [EMAIL PROTECTED] XXX
@4000474fd7970daf1704 30689  +OK M
@4000474fd7970db6102c 30689 
@4000474fd7970db617fc 30689  add_user [EMAIL PROTECTED] XM
@4000474fd7970dc8483c 30689  +OK+M
@4000474fd7970dc8bd6c 30689  vpopmail_dir /home/vpopmailM
@4000474fd7970dc92eb4 30689  
domain_dir /home/vpopmail/domains/circoli.itM

@4000474fd7970dc99444 30689  uid 89M
@4000474fd7970dca0974 30689  gid 89M


snip


@4000474fd7970dd2bc04 30689  no_spamassassin 0M
@4000474fd7970dd32194 30689  delete_spam 0M
@4000474fd7970dd38724 30689  no_maildrop 0M
@4000474fd7970dd3f09c 30689  system_admin_privileges 0M
@4000474fd7970dd56b84 30689  .M
@4000474fd7970e4b1884 30689  [EOF]
@4000474fd7970f781f04 30689  -ERR 0.305 Username existsM
@4000474fd7f825dfafb4 tcpserver: status: 2/10



Are you waiting for vpopmaild's responses?  It looks to me as if you are 
just sending commands down the pipe, without waiting for responses, or 
checking for errors.  The recordio run should look like this:


 +OK  --   Once connected wait for +OK
 login [EMAIL PROTECTED] XXX
 +OK+ --   Login OK, multi line response is coming
 vpopmail_dir /home/vpopmail
 domain_dir /home/vpopmail/domains/circoli.it
 uid 89
 gid 89

snip

 no_spamassassin 0
 delete_spam 0
 no_maildrop 0
 system_admin_privileges 0
 .   --  Read lines of response until single . on line
 add_user [EMAIL PROTECTED] X   --   send for next command
 -ERR 0.305 Username existsM -- last command was error, ready for next
 quit--  send the quit commnad
 +OK --  now it is safe to close the connection

Also, if you don't care about the user information returned by login, 
you should use slogin (silent-login).


It may be a while before I find time to fix this within the daemon.  (I 
got slammed by two 'need it yesterday' projects at the same time.)  I 
admit it should not be possible to lock it up this way, but you are way 
out of spec on following the protocol.  Please either expand your code 
to accept what you are sent, or use one of the following libraries:


Bill Shupp's NET_Vpopmaild has been accepted as a part of PEAR.  You can 
find it here:


  http://pear.php.net/package/Net_Vpopmaild

If that is too complex, you might want to look at my original at:

   http://pmailadmin.sourceforge.net/vpopmaild-php.php

The code itself is available on the SourceForge pMailAdmin project.

This is much simpler, and is what Bill's project is based on.  There are 
a few bug fixes that need to be ported back to my code, so if you can 
handle using a PEAR module that is probably best.


Rick



!DSPAM:474fef5032006323851287!



Re: [vchkpw] vpopmaild use 99% of CPU

2007-11-30 Thread Alessio Cecchi
Il Friday 30 November 2007 11:18:48 Boris Pavlov ha scritto:
 imap?

what you mean?

-- 
Alessio Cecchi is:
@ ILS - http://www.linux.it/~alessice/
Assistenza Sistemi GNU/Linux - http://www.cecchi.biz/
@ PLUG - Presidente, http://www.prato.linux.it

!DSPAM:474febb032001375351866!



Re: [vchkpw] vpopmaild use 99% of CPU

2007-11-30 Thread Boris Pavlov

imap?

Alessio Cecchi wrote:

Hello all,

i'm using vpopmaild to manage some domains (add_user, add_alias ...) with a 
simply php script run on a remote web service.


Many time vpopmaild after some command remains to use all CPU TIME as long as 
I kill vpopmaild process:


PID USER  PR  NI  VIRT  RES  SHR S %CPU %MEMTIME+  COMMAND
30689 root  20   0  1012 1012  768 R 97.1  0.1   3:20.21 vpopmaild


With recordio i registered tha last command after which vpopmaild go 
into loop:


@4000474fd7970d197e24 tcpserver: status: 1/10
@4000474fd7970d1c7fac tcpserver: pid 30689 from 212.35.215.144
@4000474fd7970d1db05c tcpserver: ok 30689 
0:63.149.200.5:89 :212.35.215.144::47632

@4000474fd7970d4bc924 30689  login [EMAIL PROTECTED] XXX
@4000474fd7970daf1704 30689  +OK M
@4000474fd7970db6102c 30689 
@4000474fd7970db617fc 30689  add_user [EMAIL PROTECTED] XM
@4000474fd7970dc8483c 30689  +OK+M
@4000474fd7970dc8bd6c 30689  vpopmail_dir /home/vpopmailM
@4000474fd7970dc92eb4 30689  
domain_dir /home/vpopmail/domains/circoli.itM

@4000474fd7970dc99444 30689  uid 89M
@4000474fd7970dca0974 30689  gid 89M
@4000474fd7970dcaff8c 30689  name postmasterM
@4000474fd7970dcb075c 30689  comment PostmasterM
@4000474fd7970dcb4dac 30689  quota 52428800SM
@4000474fd7970dcbc2dc 30689  
user_dir /home/vpopmail/domains/circoli.it/postmasterM
@4000474fd7970dcc2c54 30689  encrypted_password 
$1$xfoW4Kfg$..A0M

@4000474fd7970dcc99b4 30689  clear_text_password XXXM
@4000474fd7970dcd032c 30689  no_password_change 0M
@4000474fd7970dcd6ca4 30689  no_pop 0M
@4000474fd7970dcdda04 30689  no_webmail 0M
@4000474fd7970dce3f94 30689  no_imap 0M
@4000474fd7970dcea524 30689  bounce_mail 0M
@4000474fd7970dcf0e9c 30689  no_relay 0M
@4000474fd7970dcf7814 30689  no_dialup 0M
@4000474fd7970dcfe18c 30689  user_flag_0 0M
@4000474fd7970dd0471c 30689  user_flag_1 0M
@4000474fd7970dd0acac 30689  user_flag_2 0M
@4000474fd7970dd11a0c 30689  user_flag_3 0M
@4000474fd7970dd17f9c 30689  no_smtp 0M
@4000474fd7970dd1e914 30689  domain_admin_privileges 1M
@4000474fd7970dd2528c 30689  override_domain_limits 0M
@4000474fd7970dd2bc04 30689  no_spamassassin 0M
@4000474fd7970dd32194 30689  delete_spam 0M
@4000474fd7970dd38724 30689  no_maildrop 0M
@4000474fd7970dd3f09c 30689  system_admin_privileges 0M
@4000474fd7970dd56b84 30689  .M
@4000474fd7970e4b1884 30689  [EOF]
@4000474fd7970f781f04 30689  -ERR 0.305 Username existsM
@4000474fd7f825dfafb4 tcpserver: status: 2/10

After this vpopmaild stay in an infinite loop using all CPU Time :(

Thanks



!DSPAM:474fe39632002125924037!



[vchkpw] vpopmaild use 99% of CPU

2007-11-30 Thread Alessio Cecchi
Hello all,

i'm using vpopmaild to manage some domains (add_user, add_alias ...) with a 
simply php script run on a remote web service.

Many time vpopmaild after some command remains to use all CPU TIME as long as 
I kill vpopmaild process:

PID USER  PR  NI  VIRT  RES  SHR S %CPU %MEMTIME+  COMMAND
30689 root  20   0  1012 1012  768 R 97.1  0.1   3:20.21 vpopmaild


With recordio i registered tha last command after which vpopmaild go 
into loop:

@4000474fd7970d197e24 tcpserver: status: 1/10
@4000474fd7970d1c7fac tcpserver: pid 30689 from 212.35.215.144
@4000474fd7970d1db05c tcpserver: ok 30689 
0:63.149.200.5:89 :212.35.215.144::47632
@4000474fd7970d4bc924 30689  login [EMAIL PROTECTED] XXX
@4000474fd7970daf1704 30689  +OK M
@4000474fd7970db6102c 30689 
@4000474fd7970db617fc 30689  add_user [EMAIL PROTECTED] XM
@4000474fd7970dc8483c 30689  +OK+M
@4000474fd7970dc8bd6c 30689  vpopmail_dir /home/vpopmailM
@4000474fd7970dc92eb4 30689  
domain_dir /home/vpopmail/domains/circoli.itM
@4000474fd7970dc99444 30689  uid 89M
@4000474fd7970dca0974 30689  gid 89M
@4000474fd7970dcaff8c 30689  name postmasterM
@4000474fd7970dcb075c 30689  comment PostmasterM
@4000474fd7970dcb4dac 30689  quota 52428800SM
@4000474fd7970dcbc2dc 30689  
user_dir /home/vpopmail/domains/circoli.it/postmasterM
@4000474fd7970dcc2c54 30689  encrypted_password 
$1$xfoW4Kfg$..A0M
@4000474fd7970dcc99b4 30689  clear_text_password XXXM
@4000474fd7970dcd032c 30689  no_password_change 0M
@4000474fd7970dcd6ca4 30689  no_pop 0M
@4000474fd7970dcdda04 30689  no_webmail 0M
@4000474fd7970dce3f94 30689  no_imap 0M
@4000474fd7970dcea524 30689  bounce_mail 0M
@4000474fd7970dcf0e9c 30689  no_relay 0M
@4000474fd7970dcf7814 30689  no_dialup 0M
@4000474fd7970dcfe18c 30689  user_flag_0 0M
@4000474fd7970dd0471c 30689  user_flag_1 0M
@4000474fd7970dd0acac 30689  user_flag_2 0M
@4000474fd7970dd11a0c 30689  user_flag_3 0M
@4000474fd7970dd17f9c 30689  no_smtp 0M
@4000474fd7970dd1e914 30689  domain_admin_privileges 1M
@4000474fd7970dd2528c 30689  override_domain_limits 0M
@4000474fd7970dd2bc04 30689  no_spamassassin 0M
@4000474fd7970dd32194 30689  delete_spam 0M
@4000474fd7970dd38724 30689  no_maildrop 0M
@4000474fd7970dd3f09c 30689  system_admin_privileges 0M
@4000474fd7970dd56b84 30689  .M
@4000474fd7970e4b1884 30689  [EOF]
@4000474fd7970f781f04 30689  -ERR 0.305 Username existsM
@4000474fd7f825dfafb4 tcpserver: status: 2/10

After this vpopmaild stay in an infinite loop using all CPU Time :(

Thanks
-- 
Alessio Cecchi is:
@ ILS - http://www.linux.it/~alessice/
Assistenza Sistemi GNU/Linux - http://www.cecchi.biz/
@ PLUG - Presidente, http://www.prato.linux.it

!DSPAM:474fd9e732007209068805!



Re: [vchkpw] vpopmaild use 99% of CPU

2007-11-30 Thread Boris Pavlov

Alessio Cecchi wrote:

Il Friday 30 November 2007 11:18:48 Boris Pavlov ha scritto:

imap?


what you mean?



skip it, sorry, my mistake.

!DSPAM:474ff8c932001749358807!



RE: [vchkpw] vpopmaild patch

2006-06-14 Thread VeNoMouS
Let me be the first to say WTF? Is it just me or is this English so bad it
makes no sense to you either?

-Original Message-
From: news [mailto:[EMAIL PROTECTED] On Behalf Of Dmitriy MiksIr
Sent: Saturday, 10 June 2006 4:08 a.m.
To: vchkpw@inter7.com
Subject: [vchkpw] vpopmaild patch

Hi!
VpopmailD - is very useful for many function. May be in future mail will 
be delivered via this daemon too =))
I write check_user patch for vpopmaild (as source of ideas was used 
chkuser of Antonio Nati). Also i rewrite a little access levels systems, 
for centralized access control... and help command for show only 
available for current access level commands.
This batch seems work, but not tested very careful - any suggestions 
will be welcome.
After weekends i will try to add command for check quotas.



Re: [vchkpw] vpopmaild patch

2006-06-14 Thread DAve

VeNoMouS wrote:

Let me be the first to say WTF? Is it just me or is this English so bad it
makes no sense to you either?

-Original Message-
From: news [mailto:[EMAIL PROTECTED] On Behalf Of Dmitriy MiksIr
Sent: Saturday, 10 June 2006 4:08 a.m.
To: vchkpw@inter7.com
Subject: [vchkpw] vpopmaild patch

Hi!
VpopmailD - is very useful for many function. May be in future mail will 
be delivered via this daemon too =))
I write check_user patch for vpopmaild (as source of ideas was used 
chkuser of Antonio Nati). Also i rewrite a little access levels systems, 
for centralized access control... and help command for show only 
available for current access level commands.
This batch seems work, but not tested very careful - any suggestions 
will be welcome.

After weekends i will try to add command for check quotas.



In his defense, his English is better than my Russian.

Thinking about that, his English is better than many journalists. I have 
read articles more than twice and still not been able to understand what 
was intended. ;^)


DAve




--
Three years now I've asked Google why they don't have a
logo change for Memorial Day. Why do they choose to do logos
for other non-international holidays, but nothing for
Veterans?

Maybe they forgot who made that choice possible.


[vchkpw] vpopmaild patch

2006-06-09 Thread Dmitriy MiksIr

Hi!
VpopmailD - is very useful for many function. May be in future mail will 
be delivered via this daemon too =))
I write check_user patch for vpopmaild (as source of ideas was used 
chkuser of Antonio Nati). Also i rewrite a little access levels systems, 
for centralized access control... and help command for show only 
available for current access level commands.
This batch seems work, but not tested very careful - any suggestions 
will be welcome.

After weekends i will try to add command for check quotas.
--- vpopmail-5.4.16.orig/vpopmaild.c2006-01-17 22:20:47.0 +0300
+++ vpopmail-5.4.16/vpopmaild.c 2006-06-09 20:00:07.0 +0400
@@ -66,6 +66,7 @@
 char TmpDomain[AUTH_SIZE];
 
 int compact_output = 0;
+int logged_in = 0;
 
 int login();
 int add_user();
@@ -101,6 +102,7 @@
 int mod_list();
 int quit();
 int help();
+int check_user();
 
 /* utility functions */
 void send_user_info(struct vqpasswd *tmpvpw);
@@ -118,47 +120,58 @@
  char *command;
  int (*func)();
  char *help;
+ int access_level;
 } func_t;
 
 /*
-{login, login, [EMAIL PROTECTED] passwordcrlf },
+{login, login, [EMAIL PROTECTED] passwordcrlf, access },
 */
 
+#define ACCESS_ANONYMOUS 1
+#define ACCESS_USER 2
+#define ACCESS_QA_ADMIN 4
+#define ACCESS_SA_ADMIN 8
+#define ACCESS_AUTHORIZED ACCESS_USER | ACCESS_QA_ADMIN | ACCESS_SA_ADMIN
+#define ACCESS_ANYONE ACCESS_ANONYMOUS | ACCESS_AUTHORIZED
+#define ACCESS_ADMINS ACCESS_QA_ADMIN | ACCESS_SA_ADMIN
+
 func_t Functions[] = {
-{add_user, add_user, [EMAIL PROTECTED] passwordcrlf },
-{del_user, del_user, [EMAIL PROTECTED]crlf },
-{mod_user, mod_user, [EMAIL PROTECTED] (option lines)crlf.crlf },
-{user_info, user_info, user_domaincrlf },
-{add_alias_domain, add_alias_domain, domain aliascrlf },
-{add_domain, add_domain, domain [EMAIL PROTECTED]crlf },
-{del_domain, del_domain, domaincrlf },
-{dom_info, dom_info, domaincrlf },
-{mk_dir, mk_dir, /full/path/to/dircrlf },
-{rm_dir, rm_dir, /full/path/to/dircrlf },
-{list_dir, list_dir, /full/path/to/dircrlf },
-{rm_file, rm_file, /full/path/to/filecrlf },
-{write_file, write_file, /full/path (data lines)crlf.crlf },
-{read_file, read_file, /full/pathcrlf },
-{list_domains, list_domains, [page per_page]crlf },
-{find_domain, find_domain, domain [per-page]crlf },
-{domain_count, domain_count, crlf },
-{list_users, list_users, domaincrlf },
-{list_alias, list_alias, domaincrlf },
-{list_lists, list_lists, domaincrlf },
-{get_ip_map, get_ip_map, domaincrlf },
-{add_ip_map, add_ip_map, domain ipcrlf },
-{del_ip_map, del_ip_map, domaincrlf },
-{show_ip_map, show_ip_map, domaincrlf },
-{get_limits, get_limits, domaincrlf },
-{set_limits, set_limits, domain (option lines)crlf.crlf},
-{del_limits, del_limits, domaincrlf },
-{get_lastauth, get_lastauth, [EMAIL PROTECTED]crlf },
-{add_list, add_list, domain listname (command line options)crlf },
-{del_list, del_list, domain listnamecrlf},
-{mod_list, mod_list, domain listname (command line options)crlf },
-{quit, quit, quit },
-{help, help, help },
-{NULL, NULL } };
+{add_user, add_user, [EMAIL PROTECTED] passwordcrlf, ACCESS_ADMINS },
+{del_user, del_user, [EMAIL PROTECTED]crlf, ACCESS_ADMINS },
+{mod_user, mod_user, [EMAIL PROTECTED] (option lines)crlf.crlf, 
ACCESS_AUTHORIZED },
+{user_info, user_info, user_domaincrlf, ACCESS_ADMINS },
+{add_alias_domain, add_alias_domain, domain aliascrlf, ACCESS_SA_ADMIN },
+{add_domain, add_domain, domain [EMAIL PROTECTED]crlf, ACCESS_SA_ADMIN },
+{del_domain, del_domain, domaincrlf, ACCESS_SA_ADMIN },
+{dom_info, dom_info, domaincrlf, ACCESS_SA_ADMIN },
+{mk_dir, mk_dir, /full/path/to/dircrlf, ACCESS_AUTHORIZED },
+{rm_dir, rm_dir, /full/path/to/dircrlf, ACCESS_AUTHORIZED },
+{list_dir, list_dir, /full/path/to/dircrlf, ACCESS_AUTHORIZED },
+{rm_file, rm_file, /full/path/to/filecrlf, ACCESS_AUTHORIZED },
+{write_file, write_file, /full/path (data lines)crlf.crlf, 
ACCESS_AUTHORIZED },
+{read_file, read_file, /full/pathcrlf, ACCESS_AUTHORIZED },
+{list_domains, list_domains, [page per_page]crlf, ACCESS_SA_ADMIN },
+{find_domain, find_domain, domain [per-page]crlf, ACCESS_SA_ADMIN },
+{domain_count, domain_count, crlf, ACCESS_SA_ADMIN },
+{list_users, list_users, domaincrlf, ACCESS_ADMINS },
+{list_alias, list_alias, domaincrlf, ACCESS_ADMINS },
+{list_lists, list_lists, domaincrlf, ACCESS_ADMINS },
+{get_ip_map, get_ip_map, domaincrlf, ACCESS_ANYONE },
+{add_ip_map, add_ip_map, domain ipcrlf, ACCESS_SA_ADMIN },
+{del_ip_map, del_ip_map, domaincrlf, ACCESS_SA_ADMIN },
+{show_ip_map, show_ip_map, domaincrlf, ACCESS_SA_ADMIN },
+{get_limits, get_limits, domaincrlf, ACCESS_AUTHORIZED },
+{set_limits, set_limits, domain (option lines)crlf.crlf, ACCESS_ADMINS 
},
+{del_limits, del_limits, domaincrlf, ACCESS_SA_ADMIN },
+{get_lastauth, get_lastauth, [EMAIL PROTECTED]crlf, ACCESS_AUTHORIZED },
+{add_list, add_list, domain listname (command line options)crlf, 
ACCESS_ADMINS },
+{del_list, del_list, domain listnamecrlf, ACCESS_ADMINS },
+{mod_list, mod_list, 

[vchkpw] Vpopmaild issue

2006-02-27 Thread Joshua Megerman
Using the Patch that Bill Shupp used to integrate vpopmaild into 5.4.13, I
was able to develop a PHP-based interface for editing .qmail and other
files in vpopmail users' home dirs for controlling various delivery
processing options.  It's not working now, and I've figured out why not. 
The original version of vpopmaild that I was using only uses \n for
CRLF, while the new one in 5.4.15 uses \r\n.  While not an issue for raw
telnet, it fails for PHP since PHP_NORMAL_READ stops reading at '\r' OR
'\n'.  I may be able to resolve it by simply calling an additional read,
but I'm wondering why crlf was chosen as the delimiter rather than
just lf.

Thanks for the info,
Josh
-- 
Joshua Megerman
SJGames MIB #5273 - OGRE AI Testing Division
You can't win; You can't break even; You can't even quit the game.
  - Layman's translation of the Laws of Thermodynamics
[EMAIL PROTECTED]




Re: [vchkpw] Vpopmaild issue

2006-02-27 Thread Ken Jones

Joshua Megerman wrote:

Using the Patch that Bill Shupp used to integrate vpopmaild into 5.4.13, I
was able to develop a PHP-based interface for editing .qmail and other
files in vpopmail users' home dirs for controlling various delivery
processing options.  It's not working now, and I've figured out why not. 
The original version of vpopmaild that I was using only uses \n for

CRLF, while the new one in 5.4.15 uses \r\n.  While not an issue for raw
telnet, it fails for PHP since PHP_NORMAL_READ stops reading at '\r' OR
'\n'.  I may be able to resolve it by simply calling an additional read,
but I'm wondering why crlf was chosen as the delimiter rather than
just lf.

Thanks for the info,
Josh


To match the standards for protocols like pop3 and smtp.

Ken Jones


RE: [vchkpw] vpopmaild status?

2006-02-03 Thread Nicklas Bondesson
 It's in 5.5.3 on Inter7's web site, and I'm trying to find a 
 little bit of time to get it into 5.4.14.  I might just try 
 to get it out this morning.
 
 I haven't been involved in the development of vpopmaild, but 
 I believe that a few of the developers are using it on 
 production servers.  It might be better to package it 
 separately from the main vpopmail distribution, that way it 
 could be updated on its own as necessary, and be used with 
 any version of vpopmail (as long as the changes don't require 
 updates to the libvpopmail API).
 
 --
 Tom Collins  -  [EMAIL PROTECTED]
 QmailAdmin: http://qmailadmin.sf.net/  Vpopmail: 
 http://vpopmail.sf.net/ You don't need a laptop to 
 troubleshoot high-speed Internet: 
 sniffter.com
 

What is the status on vpopmaild? Will vpopmaild be released as a stand alone
package?

Thanks,

Nicklas




Re: [vchkpw] vpopmaild status?

2006-02-03 Thread Tom Collins

On Feb 3, 2006, at 2:14 AM, Nicklas Bondesson wrote:
What is the status on vpopmaild? Will vpopmaild be released as a stand 
alone

package?


I don't know if it will be released standalone.  I did an incomplete 
merge into vpopmail 5.4.14, and am planning to fix the missing bits for 
a 5.4.15 release soon.


--
Tom Collins  -  [EMAIL PROTECTED]
QmailAdmin: http://qmailadmin.sf.net/  Vpopmail: http://vpopmail.sf.net/
You don't need a laptop to troubleshoot high-speed Internet: 
sniffter.com




Re: [vchkpw] vpopmaild status?

2006-01-17 Thread Tom Collins

On Jan 16, 2006, at 11:30 PM, John Simpson wrote:
i'm wondering about vpopmaild... i plan on writing a patch for 
qmail-smtpd which will make it connect to vpopmaild in order to handle 
the AUTH command (basically try to login and use the + or - 
response to approve or deny the AUTH command.) my questions are:


- how close are we to seeing vpopmaild as a live program, either 
included with vpopmail, or released as its own package (to be compiled 
after vpopmail has already been installed, so it uses whatever version 
of libvpopmail is already on the system?)


It's in 5.5.3 on Inter7's web site, and I'm trying to find a little bit 
of time to get it into 5.4.14.  I might just try to get it out this 
morning.


I haven't been involved in the development of vpopmaild, but I believe 
that a few of the developers are using it on production servers.  It 
might be better to package it separately from the main vpopmail 
distribution, that way it could be updated on its own as necessary, and 
be used with any version of vpopmail (as long as the changes don't 
require updates to the libvpopmail API).


--
Tom Collins  -  [EMAIL PROTECTED]
QmailAdmin: http://qmailadmin.sf.net/  Vpopmail: http://vpopmail.sf.net/
You don't need a laptop to troubleshoot high-speed Internet: 
sniffter.com




[vchkpw] vpopmaild status?

2006-01-16 Thread John Simpson
i'm wondering about vpopmaild... i plan on writing a patch for qmail- 
smtpd which will make it connect to vpopmaild in order to handle the  
AUTH command (basically try to login and use the + or -  
response to approve or deny the AUTH command.) my questions are:


- how close are we to seeing vpopmaild as a live program, either  
included with vpopmail, or released as its own package (to be  
compiled after vpopmail has already been installed, so it uses  
whatever version of libvpopmail is already on the system?)


- how fixed is the command structure? i ask because i have written  
a basic program which accepts the login, help, and quit  
commands the same way that http://qmailwiki.inter7.com/Vpopmaild says  
they will work, but uses courier-authlib as the back-end instead of  
libvpopmail. if i know for sure that the login and quit commands  
are set in stone then i can start writing the patch and use my own  
program for testing.


i'm sure quit won't change, that's a no-brainer, but login... for  
all i know somebody may decide to expand it to handle CRAM logins in  
the future, which would necessitate changing the command structure to  
include a third parameter- userid, challenge, and response would all  
be needed in order to verify the password.


as a note for the future, in case somebody does get this idea... let  
me suggest that instead of extending the login verb, you create a  
new cramlogin verb that handles three parameters (or four, with  
md5 or sha1 as another parameter, if it comes to that.)


if anybody is curious, http://qmail.jms1.net/courierauthd.shtml talks  
about my program, and has a download link for the source code (a  
single .c file.) the page isn't finished but the program is running  
on my machine and seems to work correctly when i manually telnet into  
it... which means that it should work for testing a qmail AUTH patch.


and yes, if i get this working, i do plan to release a stand-alone  
version of the patch for people who don't want to use my entire  
combined patch set, just as i did with the validrcptto.cdb patch.


--
| John M. Simpson - KG4ZOW - Programmer At Large |
| http://www.jms1.net/   [EMAIL PROTECTED] |
--
| Mac OS X proves that it's easier to make UNIX  |
| pretty than it is to make Windows secure.  |
--



PGP.sig
Description: This is a digitally signed message part


[vchkpw] Vpopmaild HeisenBug

2006-01-13 Thread Joshua Megerman
I have found a literal HeisenBug in vpopmaild - when using recordio to
watch the conversation for debugging purposes, wait_read() times out
without actually seeing what is passed to it.  Removing recordio solves
the problem - the act of watching vpopmaild actually changes its behavior.

I don't know enough about recordio and how vpopmaild is doing its
interactive reads, but it must have something to do with the file
descriptors.  Perhaps someone with more of a clue than I can look into it
at some point...

Thanks,
Josh
-- 
Joshua Megerman
SJGames MIB #5273 - OGRE AI Testing Division
You can't win; You can't break even; You can't even quit the game.
  - Layman's translation of the Laws of Thermodynamics
[EMAIL PROTECTED]




[vchkpw] Vpopmaild

2005-12-14 Thread robert
Im a little confused on installing the vpopmail daemon. Im trying to
install the vhost php panel and it stated on the website to install the
latest devel with the vpopmail daemon 5.5.3. So my question is, is that
the total install for vpopmail? Or do I have to install vpopmail first
then the 5.5.3 dev code?

Second how do I install the vpopmail daemon? I dont see anything in the
README or INSTALL about it.

Thanks
Robert


[vchkpw] vpopmaild

2005-12-09 Thread Nicklas Bondesson
A few questions:

Where can i find more information on vpopmaild, and who is currently pulling
the strings here?

Nicklas B




Re: [vchkpw] vpopmaild

2005-11-29 Thread Rick Widmer

John Simpson wrote:


first, where can i download the code?


The only place I know of is cvs on SourceForge.


second, is there an official spec for the protocol? the wiki shows \n 
\r as the line endings for client-server commands, but crlf as  
the line endings for server-client responses... hopefully this is  just 
a typo and the line endings for client commands are actually \r \n, 
since that's what a standard telnet command sends when the user  hits 
ENTER and would allow for users to manually telnet to a  vpopmaild 
service and issue commands to test.


I don't recall exactly how, but since it works from telnet I'd bet on
the typo.


third, hopefully this is a separate program from vpopmail itself, and  
uses the standard API for libvpopmail. this will allow people (like  
myself) who are interested in getting vpopmaild working to do so  
without having to wait for the rest of vpopmail, and allow the  vpopmail 
core developers to not have to worry about vpopmaild at the  same time 
they're worrying about everything else. as long as the API  doesn't 
change, vpopmaild can be (and IMHO should be) a separate  program.


Not sure what you mean by separate program.  vadddomain, vadduser,
vdeluser and vmoduser are all separate programs, but there isn't much
reason to compile them separately.  Same with vpopmaild.

The standard API isn't all that standard.  There are functions
available in some back-ends that don't exist in others.  At least one
set of optional functions are defined in mysql.c and pgsql.c but have
their own file when you select cdb authentication.

Some say it would be nice to have a static libvpopmail, but currently if
the ./configure options aren't exactly the same between the library and
the programs things are quite likely to break.  Why bother if you have
to compile both sides anyway?


and a suggestion: how about adding a exists [EMAIL PROTECTED]  
command, which would check whether the address is  deliverable 
(meaning it exists as a mailbox, an alias, a .qmail- mailbox file in 
the domain's directory, or the domain has a .qmail- default file which 
doesn't contain bounce-no-mailbox) and return a  yes/no answer of some 
kind... and that one command would not require  a valid login to use.


I like the idea of the exists command, but not the idea of no login.
You should create a user like [EMAIL PROTECTED] that can look at
all domains and login as that user to test an address.



i actually found vpopmaild.c and a README.vpopmaild file which
sorta documents the protocol, in the vpopmail CVS area. my


I'm pretty sure that's the best you will find.  Have you seen
pmailadmin?  http://pmailadmin.sourceforge.net/  It hasn't been updated
in a while, but you might find some new information in the documentation
of the



problem  is that i haven't spent a lot of time dealing with vpopmail's
internal data structures, and to be honest their variable naming
scheme (i.e. TheDomain, ThePassword, etc.) just feels too
microsoft-ish for me. i know it's legal and it works, it just
leaves me feeling like i need to wash my hands after i look at it...


Don't worry, that's not the only convention you'll find in there...
There have been several authors with different styles.





Re: [vchkpw] vpopmaild

2005-11-29 Thread Rick Widmer

Rick Widmer wrote:


I'm pretty sure that's the best you will find.  Have you seen
pmailadmin?  http://pmailadmin.sourceforge.net/  It hasn't been updated
in a while, but you might find some new information in the documentation
of the


oops...

That should continue:

of the Daemon interface.  This is what I used to test vpopmaild after 
Ken built it.


[vchkpw] vpopmaild

2005-11-27 Thread John Simpson

On 2005-11-07, at 1043, Ken Jones wrote:

Cristiano Deana wrote:

Hi,
is 'vpopmaild' project still open?
I have seen  from cvs vpopmaild.c file hasn't been modified since  
dec 2004, why?

And php = vpopmaild?


Yep. It's still active. Last week I started a vpopmaild  
documentation page.

http://www.qmailwiki.org/Vpopmaild


first, where can i download the code?

second, is there an official spec for the protocol? the wiki shows \n 
\r as the line endings for client-server commands, but crlf as  
the line endings for server-client responses... hopefully this is  
just a typo and the line endings for client commands are actually \r 
\n, since that's what a standard telnet command sends when the user  
hits ENTER and would allow for users to manually telnet to a  
vpopmaild service and issue commands to test.


third, hopefully this is a separate program from vpopmail itself, and  
uses the standard API for libvpopmail. this will allow people (like  
myself) who are interested in getting vpopmaild working to do so  
without having to wait for the rest of vpopmail, and allow the  
vpopmail core developers to not have to worry about vpopmaild at the  
same time they're worrying about everything else. as long as the API  
doesn't change, vpopmaild can be (and IMHO should be) a separate  
program.


and a suggestion: how about adding a exists [EMAIL PROTECTED]  
command, which would check whether the address is  
deliverable (meaning it exists as a mailbox, an alias, a .qmail- 
mailbox file in the domain's directory, or the domain has a .qmail- 
default file which doesn't contain bounce-no-mailbox) and return a  
yes/no answer of some kind... and that one command would not require  
a valid login to use.


where this is all going... i would like to write a patch for qmail- 
smtpd which would use vpopmaild to replace both the need for an AUTH  
handler to fork/exec a checkpassword program, and my own  
validrcptto.cdb patch (which rejects mail sent to non-existent  
mailboxes, uses a cdb file containing every valid email address on  
the system, and correctly handles -default aliases... http:// 
qmail.jms1.net/patches/validrcptto.cdb.shtml has more information  
about the patch.)


--
| John M. Simpson - KG4ZOW - Programmer At Large |
| http://www.jms1.net/   [EMAIL PROTECTED] |
--
| Mac OS X proves that it's easier to make UNIX  |
| pretty than it is to make Windows secure.  |
--




PGP.sig
Description: This is a digitally signed message part


Re: [vchkpw] vpopmaild and php

2005-11-07 Thread Ken Jones

Cristiano Deana wrote:

Hi,

is 'vpopmaild' project still open?
I have seen  from cvs vpopmaild.c file hasn't been modified since dec 2004, why?
And php = vpopmaild?


Yep. It's still active. Last week I started a vpopmaild documentation page.
http://www.qmailwiki.org/Vpopmaild/

Ken Jones


[vchkpw] vpopmaild and php

2005-11-04 Thread Cristiano Deana
Hi,

is 'vpopmaild' project still open?
I have seen  from cvs vpopmaild.c file hasn't been modified since dec 2004, why?
And php = vpopmaild?

Thanks

--
Cris, member of G.U.F.I
Italian FreeBSD User Group
http://www.gufi.org/


[vchkpw] vpopmaild anomaly?

2005-04-17 Thread YaP
If i login with system admin privileges and i try to set domain limits 
for a domain not added, no error is issued and the limits are set. Is it 
normal?

Andrea Parrella
-
http://www.losingtime.net


[vchkpw] vpopmaild status

2004-10-29 Thread Charles Sprickman
Hi,
So I've finally updated to 5.4.7, so I'm ready to start playing with 
vpopmaild and the php classes that someone posted here many months ago.

First of all, I wanted to verify that vpopmaild should work with the 
stable version of vpopmail, can anyone confirm?

Next, where do I find it?
I remember Rick was hosting part of a project at 
http://kimberly.developersdesk.com/, but that seems to be gone now.

Where is vpopmaild proper?  Is this a cvs-only thing?
Any other projects involving vpopmaild that I should be aware of?
Thanks,
Charles


Re: [vchkpw] vpopmaild status

2004-10-29 Thread Ken Jones
On Friday 29 October 2004 02:45 pm, Charles Sprickman wrote:
 Hi,

 So I've finally updated to 5.4.7, so I'm ready to start playing with
 vpopmaild and the php classes that someone posted here many months ago.

 First of all, I wanted to verify that vpopmaild should work with the
 stable version of vpopmail, can anyone confirm?

 Next, where do I find it?

 I remember Rick was hosting part of a project at
 http://kimberly.developersdesk.com/, but that seems to be gone now.

 Where is vpopmaild proper?  Is this a cvs-only thing?

 Any other projects involving vpopmaild that I should be aware of?

Yep. I've been talking with Bill Shupp about building a new php interface
using vpopmaild. Hopefully he will be sending me some templates soon.
If not, I will start next week. We were planing on using smarty templates,
a plugin system similar to squirrelmail and squirrelmail style multi-language
method. 

--
Ken Jones


Re: [vchkpw] vpopmaild status

2004-10-29 Thread Charles Sprickman
On Fri, 29 Oct 2004, Ken Jones wrote:
Yep. I've been talking with Bill Shupp about building a new php interface
using vpopmaild. Hopefully he will be sending me some templates soon.
If not, I will start next week. We were planing on using smarty templates,
a plugin system similar to squirrelmail and squirrelmail style multi-language
method.
I did find this:
http://pmailadmin.sf.net/
I grabbed the latest CVS, but it bombs while trying to compile vpopmaild:
gcc -I. -I/usr/local/include/mysql  -I. -I. -I. -g -O2 -Wall -c `test 
-f 'vpopmaild.c' || echo './'`vpopmaild.c
gcc  -g -O2 -Wall   -o vpopmaild  vpopmaild.o libvpopmail.a 
-L/usr/local/lib/mysql  -lmysqlclient -lz -lm -lcrypt
vpopmaild.o: In function `get_lastauth':
/usr/local/src/toaster/vpopmail/cvs/vpopmail/vpopmaild.c(.text+0x3d00): 
undefined reference to `vget_lastauth'
/usr/local/src/toaster/vpopmail/cvs/vpopmail/vpopmaild.c(.text+0x3d15): 
undefined reference to `vget_lastauthip'
gmake[2]: *** [vpopmaild] Error 1
gmake[2]: Leaving directory `/usr/local/src/toaster/vpopmail/cvs/vpopmail'
gmake[1]: *** [all-recursive] Error 1
gmake[1]: Leaving directory `/usr/local/src/toaster/vpopmail/cvs/vpopmail'
gmake: *** [all] Error 2

Should I back off to an earlier version?
Is there any chance this will work against 5.4.7 (perhaps if vpopmaild 
were static)?

Charles
--
Ken Jones


Re: [vchkpw] vpopmaild status

2004-10-29 Thread Charles Sprickman
On Fri, 29 Oct 2004, Charles Sprickman wrote:
I grabbed the latest CVS, but it bombs while trying to compile vpopmaild:
gcc -I. -I/usr/local/include/mysql  -I. -I. -I. -g -O2 -Wall -c `test -f 
'vpopmaild.c' || echo './'`vpopmaild.c
gcc  -g -O2 -Wall   -o vpopmaild  vpopmaild.o libvpopmail.a 
-L/usr/local/lib/mysql  -lmysqlclient -lz -lm -lcrypt
vpopmaild.o: In function `get_lastauth':
/usr/local/src/toaster/vpopmail/cvs/vpopmail/vpopmaild.c(.text+0x3d00): 
undefined reference to `vget_lastauth'
/usr/local/src/toaster/vpopmail/cvs/vpopmail/vpopmaild.c(.text+0x3d15): 
undefined reference to `vget_lastauthip'
gmake[2]: *** [vpopmaild] Error 1
gmake[2]: Leaving directory `/usr/local/src/toaster/vpopmail/cvs/vpopmail'
gmake[1]: *** [all-recursive] Error 1
gmake[1]: Leaving directory `/usr/local/src/toaster/vpopmail/cvs/vpopmail'
gmake: *** [all] Error 2
I think I fixed it, but I'm not much of a C person.  I just kind of cut 
and pasted some ifdefs from vpopmail.c that seem to check whether this was 
configured with lastauth or not:

[EMAIL PROTECTED]/usr/local/src/toaster/vpopmail/cvs/vpopmail]# diff 
vpopmaild.c.dist  vpopmaild.c.fix
97a98
#ifdef ENABLE_AUTH_LOGGING
98a100
#endif
154a157
#ifdef ENABLE_AUTH_LOGGING
155a159
#endif
2163a2168
#ifdef ENABLE_AUTH_LOGGING
2211a2217
#endif
It builds... :)
Charles
Should I back off to an earlier version?
Is there any chance this will work against 5.4.7 (perhaps if vpopmaild were 
static)?

Charles
--
Ken Jones



Re: [vchkpw] vpopmaild development

2004-04-14 Thread Rick Widmer


Iavor Raytchev wrote:
[snip]
Tom:
At the very least, vpopmaild discussion should be on vpopmail-devel
instead of the vchkpw list.  I am sure that there are others, like me,
who aren't interested in following the early stages of development and
would prefer not to receive 20-30 messages a day discussing it.
[snip]
May be I am catching up a bit too late. Did the vpopmaild discussion move
somewhere?
Yes we have moved to the sourceforge mailing list:

  http://lists.sourceforge.net/lists/listinfo/vpopmail-devel

If you haven't seen what has been happening since the move, you will be
quite happy, I think.  Ken has 24 functions out of about 32 working, and
I have a PHP object that handles all the low-level socket stuff to
access them.  It requires PHP be compiled with enable-sockets.
There is no archive, but if you want to see all the messages, I could
tar up my copy and send it to you.  (Let me know off list...)
The latest version of my object is at:

   http://kimberly.developersdesk.com/vpopmaild-php-0.0.5.tar.gz

The latest version of Ken's daemon was sent out in an email.  Hopefully
he will be updating CVS with it soon.  The missing areas are IP_MAPs and
management of mailing lists.
Rick





Re: [vchkpw] vpopmaild development

2004-04-14 Thread Tom Collins
On Apr 13, 2004, at 3:43 PM, Rick Widmer wrote:
There is no archive, but if you want to see all the messages, I could
tar up my copy and send it to you.  (Let me know off list...)
The vpopmail-devel list archive is here:

  http://sourceforge.net/mailarchive/forum.php?forum_id=34827

--
Tom Collins  -  [EMAIL PROTECTED]
QmailAdmin: http://qmailadmin.sf.net/  Vpopmail: http://vpopmail.sf.net/
Info on the Sniffter hand-held Network Tester: http://sniffter.com/


RE: [vchkpw] vpopmaild development

2004-04-13 Thread Iavor Raytchev
[snip]
Tom:

At the very least, vpopmaild discussion should be on vpopmail-devel
instead of the vchkpw list.  I am sure that there are others, like me,
who aren't interested in following the early stages of development and
would prefer not to receive 20-30 messages a day discussing it.
[snip]

May be I am catching up a bit too late. Did the vpopmaild discussion move
somewhere?

I would support this for another reason. The vpopmail daemon is quite
important - may be for some it is just a vpopmail 'feature' of vpopmail as
for others it is a door to a whole universe.




[vchkpw] vpopmaild directory specifications

2004-04-08 Thread Ken Jones
Hi,

Looks like the vpopmaild program should support both
full paths and relative paths

Here are three suggested ways of specifying relative
paths. What do you folks think?

user directory relative
[EMAIL PROTECTED]/path

domain directory relative
domain/path

vpopmail home relative
~vpopmail/path

If that looks good to you folks, I'll put it in the daemon
along with support for full paths.

Ken Jones


Re: [vchkpw] vpopmaild directory specifications

2004-04-08 Thread Rick Widmer


Ken Jones wrote:

Here are three suggested ways of specifying relative
paths. What do you folks think?
user directory relative
[EMAIL PROTECTED]/path
domain directory relative
domain/path
I think I can do everything I need to do with just those two. I would 
prefer you NEVER, EVER allow ANY file or directory access above some 
domain's directory.  (~vpopmail/domains/somedomain.com)  Less chance of 
someone hacking your server through the daemon.

If you can supply just those choices, there is no reason to let the 
daemon leak the real directory structure of the server out to the world 
or accept full paths, which would reduce the number of things you have 
to send to the user, and simplify replies from the user.

Just to be sure:

   domain.com/  =   ~vpopmail/domains/domain.com/

   [EMAIL PROTECTED]/ = ~vpopmail/domains/domain.com/rick/

If you have lots of domains and users and have triggered directory 
hashing it might be:

  maybe  ~vpopmaild/domains/C/domain.com/S/rick/

The nice thing is the user doesn't have to know the real path.


vpopmail home relative
~vpopmail/path
Why?

I haven't implemented spam/virus checking yet, so maybe it requires 
access outside the someone's domain directory  , but I would be 
surprised if there was no way to arrange things so you never need access 
above that point.



If you allow full paths, please make sure the daemon can't do nasty 
things like

   write_file /home/vpopmail/bin/vdelivermail

That is a lot more work than just limiting file access to the domain 
directory of a specified domain or below is a big step forward for 
security.  It should also make authorization checks much easier as you 
don't have to parse incoming full paths, and can just verify domain or 
[EMAIL PROTECTED] is valid for the current user.

Rick



[vchkpw] vpopmaild - Missing + in list_users

2004-04-06 Thread Rick Widmer
The status report, about line 1077, in function list_users is missing 
the '+'.



Re: [vchkpw] vpopmaild - return from login, and others

2004-04-06 Thread Ken Jones
On Monday 05 April 2004 11:09 pm, Rick Widmer wrote:
 When I login, the following information is returned:

 vpopmail_dir /mail
 uid 77
 gid 72
 name postmaster
 comment Postmaster
 quota NOQUOTA
 dir /mail/domains/test.com/postmaster
 encrypted_password $1$zkJe.3SH$7HOl1RbwfKcibL67iXjsh/
 clear_text_password password
 domain_admin_privleges
 system_admin_privleges


 Everything except *_privleges is a name-value pair with a space
 separator.  It might be handy to add space 1 to each of the bitmap
 fields that can appear here.  Like this:

 domain_admin_privleges 1
 system_admin_privleges 1

Excellent idea. I'll put this in.


 That way if I pass the whole list through a function that explodes on
 the space, then packs the name value pairs into an (associaive) array
 these entries will be 'true' to PHP. [1] Without the 1, I have to
 identify them and handle them as special cases.



 I don't know if this is a good idea or not, but it might be handy if you
 always listed all of the bitmap value names with a 0 or 1.  That allows
 for the possibility of generating the PHP fields from the list of bitmap
 values returned.

I like this idea too. The only downsize I see is the extra lines of
information that are default values. The upside is the client does
not need to preset their array with suspect default values, causing
disagreement on values.


 no_password_change 0
 no_pop 0
 no_webmail 0
 no_imap 0
 bounce_mail 0
 no_relay 0
 no_dialup 0
 user_flag_0 0
 user_flag_1 0
 user_flag_2 0
 user_flag_3 0
 no_smpt 0
 domain_admin_privleges 1
 override_domain_limits 0
 no_spamassasin 0
 delete_spam 0
 system_admin_privleges 0

 Would anyone use that information?


 Rick

 ---


 [1]  This code:

 while( list( , $Line ) = each( $ReturnedLines )) {
 list( $Name, $Value ) = explode( ' ', $Line );
 $LoginUser[ $Name ] = $Value;
 }


 turns the entry listed above into the following PHP array:

 LoginUser = array(
 'vpopmail_dir'   =  '/mail',
 'uid'= '77
 'gid'= '72
 'name'   = 'postmaster
 'comment'= 'Postmaster
 'quota'  = 'NOQUOTA
 'dir'= '/mail/domains/test.com/postmaster
 'encrypted_password' = '$1$zkJe.3SH$7HOl1RbwfKcibL67iXjsh/
 'clear_text_password'= 'password',
 'domain_admin_privleges' = '',
 'system_admin_privleges' = '',
 );


Re: [vchkpw] vpopmaild - Missing + in list_users

2004-04-06 Thread Ken Jones
On Tuesday 06 April 2004 12:58 am, Rick Widmer wrote:
 The status report, about line 1077, in function list_users is missing
 the '+'.

got it. 

Ken


Re: [vchkpw] vpopmaild - Catchall Information

2004-04-06 Thread Ken Jones
On Tuesday 06 April 2004 12:36 am, Rick Widmer wrote:
 Do I have any better way to obtain information on the catchall status
 than reading .qmail-default myself?

That's all we have for now.



 Do I need one?

You'll need to parse it to determine if it calls anything
special and/if it uses the default setup of
| /path/to/vdelivermail `` option

where option is one of
 delete
 bounce-no-mailbox
 email_address
 /full/path/to/catchall/Maildir

Ken


[vchkpw] vpopmaild -- PHP Object to access it

2004-04-06 Thread Rick Widmer
I have a bit of an object for vpopmaild working.  It will login and 
retrieve the list of users, and domains.  The tarball includes an 
example program.  On my system (a 500MHz PII) running both the daemon 
and this program it retrieved 3108 users from a single domain in 10.23 
seconds, and 1563 domains in 0.90 seconds.  I am using CDB.

You can download it here:

   http://kimberly.developersdesk.com/vpopmaild-php.tar.gz

Right now it is based on the initial distribution of vpopmaild, and 
works around the bug I found in list_users.  (Missing +)



The functions I have working so far are listed below:

===

The constructor:

function vpopmaild( $Domain, $User, $Password, $Host='localhost', 
$Port=89 )  {

$Domain, $User, $Password represent the user you want to login as.
$Host and $Port are optional, with defaults.  You should check for
an error message with the error_message() function after attempting
to create a vpopmaild object.  If there is an error present, you
can't do anything else.
===

function Quit() {

You should call this before exiting the program to give the server
a chance to clean up gracefully.  The world probably won't end if
you don't but it is possible that sessions will be closed faster
if you do.
===

function error_message() {

Return the most recent error message, if any, from vpopmaild
operations.  This message will be text, ready for display.
===

function GetLoginUser()  {

Retrive an array full of information about the currently logged in
user.
Array (
[vpopmail_dir] = /mail
[uid] = 77
[gid] = 72
[name] = postmaster
[comment] = Postmaster
[quota] = NOQUOTA
[dir] = /mail/domains/test.com/postmaster
[encrypted_password] = $1$zkJe.3SH$7HOl1RbwfKcibL67iXjsh/
[clear_text_password] = password
[domain_admin_privileges] = 1
[system_admin_privileges] = 1
)
===

function ListUsers( $Domain ) {

Retrieve an array full of information about a domain.  You must be
a system admin to list any domain, or the domain admin of the domain
you wish to list.  The users are in alpha order by Username.
Array (
[04wcyrti] = Array
(
[passwd] = $1$cBacCPRA$LxzczMu7dpn5KjZphYPKU0
[uid] = 1
[gid] = 0
[flags] = 0
[gecos] = Brigitte
[dir] = /mail/domains/test.com/9/04wcyrti
[shell] = NOQUOTA
[clear_pw] = Fisher
)
[095wvsp] = Array
(
[passwd] = $1$2lpyyZHz$XmcuvLSZDbOnIaDD9Yf93.
[uid] = 1
[gid] = 0
[flags] = 0
[gecos] = Antone
[dir] = /mail/domains/test.com/F/095wvsp
[shell] = NOQUOTA
[clear_pw] = Winn
)
)
There is a problem with the program I used to load the addresses which 
caused the last name to appear in the clear_pw field.  The program is 
reflecting what is stored in the files.  Spam is useful for something, I 
built all these test users and domains from the spam I got over a week 
or two.  :)

===

function ListDomains( $Sort = 'HDT' ) {

Retrieve an array full of information about a domain.  You must be
a system admin to use this call.
Order to display domains:

  TDH  = top-level, mid-level, host
  DTH  = mid-level, top-level, host
  HDT  = host, mid-level, top-level
where you usually see

   host.mid-level.top-level

   mail.developersdesk.com

Want all the .com together - use TDH
Want domain.com, domain.net, domain.org together - use DTH
Want them all mixed up in host name order - use HDT
If DomainOrder is not specified, you get HDT.

This example data uses DTH mode.  The data is DomainName = ParentName,
If they both match, the domain is real, if they are different it
is an alias of ParentName.
Array
(
[0-0-mydomain.com] = 0-0-mydomain.com
[0-0-mydomain.net] = 0-0-mydomain.com
[0-0-mydomain.org] = 0-0-mydomain.com
[0800commerce.nl] = 0800commerce.nl
[fun.21cn.com] = fun.21cn.com
[private.21cn.com] = private.21cn.com
[263.net] = 263.net
[2dayhealth.com] = 2dayhealth.com
)
===

The next two functions are used to create the login user information
block, and may get merged into the constructor, unless they are useful
parsing other incoming structures.
function ParseUser( $UserBlock ) {

function ReadBlock( $List ) {







Re: [vchkpw] vpopmaild - errors on login

2004-04-06 Thread Marcin Soltysiak

- Original Message - 
 I see you have different error messages during login for:
 
 
 invalid email address
 
 user does not exist
 
 invalid password
 
 
 
 It might be better to return the same message for all so the hostile 
 hacker can't learn as much about your users.

Good point. I'd suggest 

- ERR XXX Login invalid

 to stdout and detailed info to syslog

Solt


Re: [vchkpw] vpopmaild - return from login, and others

2004-04-06 Thread Marcin Soltysiak

- Original Message - 
From: Rick Widmer [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, April 06, 2004 6:09 AM
Subject: [vchkpw] vpopmaild - return from login, and others


 When I login, the following information is returned:

 vpopmail_dir /mail
 uid 77
 gid 72
 name postmaster
 comment Postmaster
 quota NOQUOTA
 dir /mail/domains/test.com/postmaster
 encrypted_password $1$zkJe.3SH$7HOl1RbwfKcibL67iXjsh/
 clear_text_password password
 domain_admin_privleges
 system_admin_privleges


 Everything except *_privleges is a name-value pair with a space
 separator.  It might be handy to add space 1 to each of the bitmap
 fields that can appear here.  Like this:

 domain_admin_privleges 1
 system_admin_privleges 1

 That way if I pass the whole list through a function that explodes on
 the space, then packs the name value pairs into an (associaive) array
 these entries will be 'true' to PHP. [1] Without the 1, I have to
 identify them and handle them as special cases.



 I don't know if this is a good idea or not, but it might be handy if you
 always listed all of the bitmap value names with a 0 or 1.  That allows
 for the possibility of generating the PHP fields from the list of bitmap
 values returned.


 no_password_change 0
 no_pop 0
 no_webmail 0
 no_imap 0
 bounce_mail 0
 no_relay 0
 no_dialup 0
 user_flag_0 0
 user_flag_1 0
 user_flag_2 0
 user_flag_3 0
 no_smpt 0
 domain_admin_privleges 1
 override_domain_limits 0
 no_spamassasin 0
 delete_spam 0
 system_admin_privleges 0

 Would anyone use that information?


 Rick

 --
-


 [1]  This code:

 while( list( , $Line ) = each( $ReturnedLines )) {
 list( $Name, $Value ) = explode( ' ', $Line );
 $LoginUser[ $Name ] = $Value;
 }


 turns the entry listed above into the following PHP array:

 LoginUser = array(
 'vpopmail_dir'   =  '/mail',
 'uid'= '77
 'gid'= '72
 'name'   = 'postmaster
 'comment'= 'Postmaster
 'quota'  = 'NOQUOTA
 'dir'= '/mail/domains/test.com/postmaster
 'encrypted_password' = '$1$zkJe.3SH$7HOl1RbwfKcibL67iXjsh/
 'clear_text_password'= 'password',
 'domain_admin_privleges' = '',
 'system_admin_privleges' = '',
 );


anyway if you check like:

if($LoginUser['system_admin_privileges']) {
  .
}

it doesnt quote matter if it is set to 0 or not set.

Solt



[vchkpw] vpopmaild - PHP object

2004-04-06 Thread Rick Widmer
I just uploaded a new PHP object to interface to the vpopmaild daemon.

   http://kimberly.developersdesk.com/vpopmaild-php.tar.gz

vpopmail.pobj is the source code for the actual object.

README lists all available methods in the object.

example.php is a command line PHP program that tests the object, and 
gives examples of how to use it.

example.output is a cut down listing of the example program output on my 
server.  I have 3108 users and 1563 domains in the test data I am using.

The example program requires a CLI (Command Line) version of PHP that 
was ./configured with  enable-streams.  If you add a little HTML, it 
should run to a web browser too.

It now supports all the currently existing functions of vpopmaild that 
return data:

login, user_info, list_dir, read_file, list_domains, list_users, 
get_limits, get_lastauth, get_lastauthip, quit.

I will work on the functions that take action tomorrow:

add_user, del_user, mod_user, add_domain, mk_dir, rm_file, set_limits, 
del_limits.

You can expect them to take parameters like ( $Domain, $User, 
$Whatever... ), always in that order.  Where possible you will be able 
to retrieve an array of data from one of the data return functions, 
adjust the contents of that array and pass it to one of these functions 
to adjust things in the mail system.

There are other functions defined in vpopmaild that don't contain any 
code yet.  I will work on them as soon as I get a version of the daemon 
that actually supports them:

dom_info, write_file, list_lists, get_ip_map, add_ip_map, del_ip_map, 
show_ip_map, add_list, del_list, mod_list.



Re: [vchkpw] vpopmaild - PHP object

2004-04-06 Thread Marcin Soltysiak

- Original Message - 
From: Rick Widmer [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, April 06, 2004 12:49 PM
Subject: [vchkpw] vpopmaild - PHP object


 I just uploaded a new PHP object to interface to the vpopmaild daemon.

 http://kimberly.developersdesk.com/vpopmaild-php.tar.gz


 vpopmail.pobj is the source code for the actual object.

 README lists all available methods in the object.

 example.php is a command line PHP program that tests the object, and
 gives examples of how to use it.


Did I miss something:

User info for logged in user: Array
(
[vpopmail_dir] = /home/vpopmail
[uid] = 399
[gid] = 399
[name] = office
[comment] = office
[quota] = NOQUOTA
[dir] = /home/vpopmail/domains/imedia.com.pl/office
[encrypted_password] = $1$L6UBr$.EzXzXSDy1PZiCiNT6Erm.
[clear_text_password] = 
[domain_admin_privileges] = 1
[system_admin_privileges] = 1
)

Domain List: (64)
Array
(

)

Command string: list_users dom1.pl

socket_write returned: 24
read returned: -ERR XXX not authorized for domain

User List: (0)
Command string: list_users dom2.pl

socket_write returned: 24
read returned: -ERR XXX not authorized for domain

User List: (0)
Command string: list_users imedia.com.pl

socket_write returned: 25
read returned: OK

extra read returned:
demo:$1$yUVUM$i4xHyCMsahaaOAAYViuQ81:0:0:0:demo:/home/vpopmail/domains/imedi
a.com.pl/demo:1048576.00:

User List: (12)
Array
(
...
)

Although I am sysadmin I cannot list users in other domains.

What is funny, [EMAIL PROTECTED] does not appear in UserList array amd it
is only account that had quota set.

Solt



[vchkpw] vpopmaild - BUG: SA_ADMIN cannot get user_info

2004-04-06 Thread Marcin So³tysiak
Although logged as SA_ADMIN user cannot get user_info from oter domains.
Here is a patch:


--- vpopmail-5.5.2-orig/vpopmaild.c Tue Apr  6 01:03:22 2004
+++ vpopmail-5.5.2/vpopmaild.c  Tue Apr  6 16:47:50 2004
@@ -563,7 +563,7 @@
 return(-1);
   }

-  if ( (AuthVpw.pw_gidQA_ADMIN)  (strcmp(TheDomain,TmpDomain))!=0 ) {
+  if ( ((AuthVpw.pw_gid  QA_ADMIN)  (strcmp(TheDomain,TmpDomain))!=0) 
!(AuthVpw.pw_gid  SA_ADMIN) ) {
 snprintf(WriteBuf,sizeof(WriteBuf),
   RET_ERR XXX not authorized for domain\n);
 return(-1);


BTW. Since vpopmaild is very young it will need a heavy develoopment. It
would be resonable to create a separate category in bugtraq.

Solt



[vchkpw] vpopmaild development

2004-04-06 Thread Tom Collins
On Apr 6, 2004, at 10:57 AM, Marcin So³tysiak wrote:
BTW. Since vpopmaild is very young it will need a heavy develoopment. 
It
would be resonable to create a separate category in bugtraq.
I'll put my vote in for initial development to take place in a separate 
CVS repository from the main vpopmail release, with discussion taking 
place on its own list.

At the very least, vpopmaild discussion should be on vpopmail-devel 
instead of the vchkpw list.  I am sure that there are others, like me, 
who aren't interested in following the early stages of development and 
would prefer not to receive 20-30 messages a day discussing it.

--
Tom Collins  -  [EMAIL PROTECTED]
QmailAdmin: http://qmailadmin.sf.net/  Vpopmail: http://vpopmail.sf.net/
Info on the Sniffter hand-held Network Tester: http://sniffter.com/


Re: [vchkpw] vpopmaild development

2004-04-06 Thread Paul Oehler
Tom Wrote:
At the very least, vpopmaild discussion should be on vpopmail-devel
instead of the vchkpw list.  I am sure that there are others, like me,
who aren't interested in following the early stages of development and
would prefer not to receive 20-30 messages a day discussing it.

-

Pardon my ignorance, but where is this aformentioned vpopmail-devel mailing
list?  I'm having trouble tracking it down.

Thanks,
Paul



Re: [vchkpw] vpopmaild - errors on login

2004-04-06 Thread X-Istence
Marcin Soltysiak wrote:
- Original Message - 

I see you have different error messages during login for:

invalid email address

user does not exist

invalid password



It might be better to return the same message for all so the hostile 
hacker can't learn as much about your users.


Good point. I'd suggest 

- ERR XXX Login invalid

 to stdout and detailed info to syslog

Solt


Its using tcpserver, so why not to multilog. I personally try to limit 
as much as possible the use of syslog.

X-Istence


Re: [vchkpw] vpopmaild - errors on login

2004-04-06 Thread Marcin Soltysiak

- Original Message - 
From: X-Istence [EMAIL PROTECTED]
 Marcin Soltysiak wrote:
  - Original Message - 
  
 I see you have different error messages during login for:
 
 
 invalid email address
 
 user does not exist
 
 invalid password
 
 
 
 It might be better to return the same message for all so the hostile 
 hacker can't learn as much about your users.
  
  
  Good point. I'd suggest 
  
  - ERR XXX Login invalid
  
   to stdout and detailed info to syslog
 Its using tcpserver, so why not to multilog. I personally try to limit 
 as much as possible the use of syslog.
Sure. I meant (syslog|multilog|anylog) facility on server side. :-)

Solt


Re: [vchkpw] vpopmaild development

2004-04-06 Thread Marcin Soltysiak

- Original Message - 
From: Tom Collins [EMAIL PROTECTED]
On Apr 6, 2004, at 10:57 AM, Marcin So³tysiak wrote:
 BTW. Since vpopmaild is very young it will need a heavy develoopment.
 It
 would be resonable to create a separate category in bugtraq.

I'll put my vote in for initial development to take place in a separate
CVS repository from the main vpopmail release, with discussion taking
place on its own list.
+1

Solt



Re: [vchkpw] vpopmaild - PHP object

2004-04-06 Thread Rick Widmer


Marcin Soltysiak wrote:

Although I am sysadmin I cannot list users in other domains.
I have already reported this to Ken.


What is funny, [EMAIL PROTECTED] does not appear in UserList array amd it
is only account that had quota set.
This may be a new bug.



Re: [vchkpw] vpopmaild development

2004-04-06 Thread Rick Widmer


Paul Oehler wrote:

Tom Wrote:
At the very least, vpopmaild discussion should be on vpopmail-devel
instead of the vchkpw list.  I am sure that there are others, like me,
who aren't interested in following the early stages of development and
would prefer not to receive 20-30 messages a day discussing it.
-

Pardon my ignorance, but where is this aformentioned vpopmail-devel mailing
list?  I'm having trouble tracking it down.


   http://sourceforge.net/projects/vpopmail/

Then click on the Lists link, to subscribe to the list.

I just signed up, but the last time I signed up for a SourceForge
mailing list, it took most of a day before it would let me post.
Rick





Re: [vchkpw] vpopmaild - PHP object

2004-04-06 Thread Marcin Soltysiak
 Marcin Soltysiak wrote:

  Although I am sysadmin I cannot list users in other domains.

 I have already reported this to Ken.


  What is funny, [EMAIL PROTECTED] does not appear in UserList array amd
it
  is only account that had quota set.

 This may be a new bug.

It seems to be the firt entry on list_users..I've check od few domains and
everyoan behaved same way.
Solt



Re: [vchkpw] vpopmaild - PHP object

2004-04-06 Thread Marcin Soltysiak

- Original Message - 
From: Marcin Soltysiak [EMAIL PROTECTED]
  Marcin Soltysiak wrote:
 
   Although I am sysadmin I cannot list users in other domains.
 
  I have already reported this to Ken.
 
 
   What is funny, [EMAIL PROTECTED] does not appear in UserList array
amd
 it
   is only account that had quota set.
 
  This may be a new bug.

 It seems to be the firt entry on list_users..I've check od few domains and
 everyoan behaved same way.

Ok, I've found... the class make unnecessary read from socket between
reading +OK and first entry from list. Same as for list_domains.

Solt



Re: [vchkpw] vpopmaild - PHP object

2004-04-06 Thread Rick Widmer


Marcin Soltysiak wrote:

What is funny, [EMAIL PROTECTED] does not appear in UserList array amd
it

is only account that had quota set.
This may be a new bug.


It seems to be the firt entry on list_users..I've check od few domains and
everyoan behaved same way.


In the ListUsers() function try uncommenting the echos.  Then see if
your missing item appears in the 'extra read returned' entry.  The
'extra reads' are something that I need on my system to keep things in
sync, but I don't understand why they are there.
I have an extra blank line I need to remove, but I don't see it when I
telnet in.
We should probably move to the SourceForge vpopmail-devel list.

   http://lists.sourceforge.net/lists/listinfo/vpopmail-devel

Rick






[vchkpw] vpopmaild - errors on login

2004-04-05 Thread Rick Widmer
I see you have different error messages during login for:

invalid email address

user does not exist

invalid password



It might be better to return the same message for all so the hostile 
hacker can't learn as much about your users.



Rick



[vchkpw] vpopmaild - return from login, and others

2004-04-05 Thread Rick Widmer
When I login, the following information is returned:

   vpopmail_dir /mail
   uid 77
   gid 72
   name postmaster
   comment Postmaster
   quota NOQUOTA
   dir /mail/domains/test.com/postmaster
   encrypted_password $1$zkJe.3SH$7HOl1RbwfKcibL67iXjsh/
   clear_text_password password
   domain_admin_privleges
   system_admin_privleges
Everything except *_privleges is a name-value pair with a space 
separator.  It might be handy to add space 1 to each of the bitmap 
fields that can appear here.  Like this:

   domain_admin_privleges 1
   system_admin_privleges 1
That way if I pass the whole list through a function that explodes on 
the space, then packs the name value pairs into an (associaive) array 
these entries will be 'true' to PHP. [1] Without the 1, I have to 
identify them and handle them as special cases.



I don't know if this is a good idea or not, but it might be handy if you 
always listed all of the bitmap value names with a 0 or 1.  That allows 
for the possibility of generating the PHP fields from the list of bitmap 
values returned.

   no_password_change 0
   no_pop 0
   no_webmail 0
   no_imap 0
   bounce_mail 0
   no_relay 0
   no_dialup 0
   user_flag_0 0
   user_flag_1 0
   user_flag_2 0
   user_flag_3 0
   no_smpt 0
   domain_admin_privleges 1
   override_domain_limits 0
   no_spamassasin 0
   delete_spam 0
   system_admin_privleges 0
Would anyone use that information?

Rick

---

[1]  This code:

while( list( , $Line ) = each( $ReturnedLines )) {
   list( $Name, $Value ) = explode( ' ', $Line );
   $LoginUser[ $Name ] = $Value;
   }
turns the entry listed above into the following PHP array:

LoginUser = array(
   'vpopmail_dir'   =  '/mail',
   'uid'= '77
   'gid'= '72
   'name'   = 'postmaster
   'comment'= 'Postmaster
   'quota'  = 'NOQUOTA
   'dir'= '/mail/domains/test.com/postmaster
   'encrypted_password' = '$1$zkJe.3SH$7HOl1RbwfKcibL67iXjsh/
   'clear_text_password'= 'password',
   'domain_admin_privleges' = '',
   'system_admin_privleges' = '',
   );



[vchkpw] vpopmaild - Catchall Information

2004-04-05 Thread Rick Widmer
Do I have any better way to obtain information on the catchall status
than reading .qmail-default myself?
Do I need one?