Re: Virtual User, symlink, Mutt...
Kit Halsted wrote: Hi- I'm using Qmail 1.03 vpopmail 4.9.6-1 on OpenBSD 2.8 -stable. Everything works as expected I'm a happy camper. Of course, there is one problem, or I wouldn't be writing... I have virtualized our primary domain so shell users won't be sending their passwords all over the net in cleartext. This is fine with 5 out of 6 consultants, but one guy used telnet Pine extensively on our old system really wants that functionality. I'm thinking it'll be fine, just set him up for ssh Mutt set a symlink for /home/vpopmail/domains/ourdomain.com/user/Maildir in /home/user. Of course, he gets a permission denied error. I know the virtual user Maildir has to be owned by vpopmail:vchkpw. Is this a Catch-22, or does anybody know of a workaround for this? TIA, -Kit The easiest work around is to add a forward from the virtual account to his local /etc/passwd account. Either of these two forwards should work [EMAIL PROTECTED] user Where user = his shell login. Ken Jones
Re: Virtual User, symlink, Mutt...
Kari Suomela wrote: Friday February 23 2001 11:34, Kit Halsted wrote to All: KH out of 6 consultants, but one guy used telnet Pine extensively KH on KH our old system really wants that functionality. I'm thinking KH it'll KH be fine, just set him up for ssh Mutt set a symlink for KH /home/vpopmail/domains/ourdomain.com/user/Maildir in /home/user. KH Of If the user uses Pine exclusively, you can forward all mail to his /home/user/Maildir. Naturally he will not be able to pop in for it. He should be able to pop in for it. vchkpw supports /etc/passwd accounts. The only restriction is he has to use Maildir and not Mailbox. Ken Jones
Re: Virtual User, symlink, Mutt...
At 12:27 PM -0500 2/23/01, Kari Suomela wrote: Friday February 23 2001 11:34, Kit Halsted wrote to All: KH out of 6 consultants, but one guy used telnet Pine extensively KH on KH our old system really wants that functionality. I'm thinking KH it'll KH be fine, just set him up for ssh Mutt set a symlink for KH /home/vpopmail/domains/ourdomain.com/user/Maildir in /home/user. KH Of If the user uses Pine exclusively, you can forward all mail to his /home/user/Maildir. Naturally he will not be able to pop in for it. Thanks, but I'm looking for a way to enable POP _and_ shell. I guess I could do it with a cron job, but I'd prefer something more elegant. Thanks, -Kit
Re: Virtual User, symlink, Mutt...
Sorry, I really should have been more clear. Here's what I'm looking for: A user, let's call him Patrick, has to get POP mail at night when he gets home. He also has to be able to read mail via SSH Mutt during the day. Here's the kicker: it is strictly forbidden for users on this system to send shell passwords out in cleartext, so a .qmail file forwarding to his home dir is out. Use of APOP is also out for various reasons. Have I painted myself into a corner, or is there some permissions magic I can work on his vpopmail Maildir to pull this off? Thanks, -Kit At 12:57 PM -0600 2/23/01, Ken Jones wrote: Kit Halsted wrote: Hi- I'm using Qmail 1.03 vpopmail 4.9.6-1 on OpenBSD 2.8 -stable. Everything works as expected I'm a happy camper. Of course, there is one problem, or I wouldn't be writing... I have virtualized our primary domain so shell users won't be sending their passwords all over the net in cleartext. This is fine with 5 out of 6 consultants, but one guy used telnet Pine extensively on our old system really wants that functionality. I'm thinking it'll be fine, just set him up for ssh Mutt set a symlink for /home/vpopmail/domains/ourdomain.com/user/Maildir in /home/user. Of course, he gets a permission denied error. I know the virtual user Maildir has to be owned by vpopmail:vchkpw. Is this a Catch-22, or does anybody know of a workaround for this? TIA, -Kit The easiest work around is to add a forward from the virtual account to his local /etc/passwd account. Either of these two forwards should work [EMAIL PROTECTED] user Where user = his shell login. Ken Jones
RE: Virtual User, symlink, Mutt...
At 1:40 PM -0700 2/23/01, Matt Simerson wrote: Does it have to be Mutt or can he use Pine? I'm not sure. Pine was pulled from the OpenBSD ports for security reasons, I respect that. OTOH, if Pine can do this I might be willing to take the risk. What can Pine do? -Kit Matt -Original Message- From: Kit Halsted [mailto:[EMAIL PROTECTED]] Sent: Friday, February 23, 2001 11:25 AM To: Ken Jones Cc: [EMAIL PROTECTED] Subject: Re: Virtual User, symlink, Mutt... Sorry, I really should have been more clear. Here's what I'm looking for: A user, let's call him Patrick, has to get POP mail at night when he gets home. He also has to be able to read mail via SSH Mutt during the day. Here's the kicker: it is strictly forbidden for users on this system to send shell passwords out in cleartext, so a .qmail file forwarding to his home dir is out. Use of APOP is also out for various reasons. Have I painted myself into a corner, or is there some permissions magic I can work on his vpopmail Maildir to pull this off? Thanks, snip
RE: Virtual User, symlink, Mutt...
Well, what I've done for one of my domains (my personal one) is use vpopmail's multiple uid/gid so that my mail domain is in my personal home directory. So, in this example I'm set up like this: /usr/home/matt/ (that me) /usr/home/matt/domains/simerson.net (one of my domains) /usr/home/matt/Maildir (symlinked to /usr/home/matt/domains/simerson.net/matt/Maildir Since I own all the files within the domain simerson.net, I can use pine to read the mail in that Maildir. I suppose Mutt could also do that if it reads Maildir's. Matt -Original Message- From: Kit Halsted [mailto:[EMAIL PROTECTED]] Sent: Friday, February 23, 2001 4:16 PM To: Matt Simerson; '[EMAIL PROTECTED]' Subject: RE: Virtual User, symlink, Mutt... At 1:40 PM -0700 2/23/01, Matt Simerson wrote: Does it have to be Mutt or can he use Pine? I'm not sure. Pine was pulled from the OpenBSD ports for security reasons, I respect that. OTOH, if Pine can do this I might be willing to take the risk. What can Pine do? -Kit Matt -Original Message- From: Kit Halsted [mailto:[EMAIL PROTECTED]] Sent: Friday, February 23, 2001 11:25 AM To: Ken Jones Cc: [EMAIL PROTECTED] Subject: Re: Virtual User, symlink, Mutt... Sorry, I really should have been more clear. Here's what I'm looking for: A user, let's call him Patrick, has to get POP mail at night when he gets home. He also has to be able to read mail via SSH Mutt during the day. Here's the kicker: it is strictly forbidden for users on this system to send shell passwords out in cleartext, so a .qmail file forwarding to his home dir is out. Use of APOP is also out for various reasons. Have I painted myself into a corner, or is there some permissions magic I can work on his vpopmail Maildir to pull this off? Thanks, snip