Re: [vchkpw] phpbb authenticating to vpopmail/mysql
On 2006-10-27, at 2226, Matt Cornell wrote: I just finished working up this phpbb installation that authenticates (and updates the password) from amy vpopmail-mysql backend. Although I have taken more then my fair share of knowledge from open sources it's only lately that I am getting ready to give back. I thought I would ask first before I cleaned and wrote it up for the general public - is anyone even remotely interested in something like this? i'm sure there are people who would be interested, but you're more apt to find them on a phpbb mailing list rather than the vpopmail mailing list. also, a suggestion- i don't know whether your stuff works by running vchkpw or by somehow calling the libvpopmail functions directly, but you may want to have it use vpopmaild. this saves the overhead of a fork() and two exec()s, and allows you to upgrade vpopmail without having to re-write (or re-compile) your stuff. Sorry if this is too off-topic or whatever - I figured this crowd would have better initial input then a phpbb crowd. from the technical end, yes. however, i'll be honest- i suspect most of the people here also read bugtraq and know how often new security holes are found in phpbb, and therefore aren't overly interested in running phpbb on our servers. -- | John M. Simpson - KG4ZOW - Programmer At Large | | http://www.jms1.net/ [EMAIL PROTECTED] | -- | Mac OS X proves that it's easier to make UNIX | | pretty than it is to make Windows secure. | -- PGP.sig Description: This is a digitally signed message part
Re: Re: [vchkpw] phpbb authenticating to vpopmail/mysql
Hello I am on annual leave until November 5th 2006. If you have an urgent query please leave a voicemail on 07940574707 and I will get back to you as soon as possible. Regards Gerard Earley
Re: Re: Re: [vchkpw] phpbb authenticating to vpopmail/mysql
Hello I am on annual leave until November 5th 2006. If you have an urgent query please leave a voicemail on 07940574707 and I will get back to you as soon as possible. Regards Gerard Earley
Re: [vchkpw] phpbb authenticating to vpopmail/mysql
sounds good were can we check it out? Thanks, Remo Matt Cornell wrote: I just finished working up this phpbb installation that authenticates (and updates the password) from amy vpopmail-mysql backend. Although I have taken more then my fair share of knowledge from open sources it's only lately that I am getting ready to give back. I thought I would ask first before I cleaned and wrote it up for the general public - is anyone even remotely interested in something like this? Sorry if this is too off-topic or whatever - I figured this crowd would have better initial input then a phpbb crowd. - matt
Re: [vchkpw] phpbb authenticating to vpopmail/mysql
John Simpson wrote: you're more apt to find them on a phpbb mailing list rather than the vpopmail mailing list.I just didn't want to get into explaining what vpopmail/qmail was if it was a completely ridiculous idea. also, a suggestion- i don't know whether your stuff works by running vchkpw or by somehow calling the libvpopmail functions Two things... I actually just directly query the mysql backend that vpopmail uses with the phpbb authentication scripts. And, having typed that last line out loud, I see that this is fairly off-topic AND that I probably should have used vpopmaild! Thank you. I can't believe I didn't stumble onto that when I was trying to hatch up a solution. from the technical end, yes. however, i'll be honest- i suspect most of the people here also read bugtraq and know how often new security holes are found in phpbb, and therefore aren't overly interested in running phpbb on our servers.Indeed... the phpbb is on another server so the 'most' that [c|sh]ould be compromised is that web server's chroot and the table for that domain's mail.Thanks again for the input,Matt
[vchkpw] phpbb authenticating to vpopmail/mysql
I just finished working up this phpbb installation that authenticates (and updates the password) from amy vpopmail-mysql backend. Although I have taken more then my fair share of knowledge from open sources it's only lately that I am getting ready to give back. I thought I would ask first before I cleaned and wrote it up for the general public - is anyone even remotely interested in something like this? Sorry if this is too off-topic or whatever - I figured this crowd would have better initial input then a phpbb crowd. - matt
