Re: [vchkpw] [not-OT] Pop3 auth and Courier-Imap (pop3s)

2003-12-23 Thread Tom Collins
On Dec 23, 2003, at 6:44 AM, Andrea Riela wrote:
QUESTION

My question now is: how could I say Courier, use vchkpw_ssl and not
vchkpw? It's possible to change the path to vchkpw in the Courier-Imap
config, or I've to change the vchkpw in vchkpw_nossl and my
/var/qmail/supervise/qmail-pop3d/run script?
If you're using courier, it will be harder to accomplish your goals.  
Courier-IMAP links libvpopmail in instead of using vchkpw.  So, like 
Jeremy explained in another email, you'll have to do the following:

Configure, make and install vpopmail without roaming user support.
Configure, make and install courier-imap.  Rename this copy to 
something like courier-imap-noroaming.
`make clean` your vpopmail source, reconfigure, make and install 
without roaming user support.
`make clean` your courier-imap source, reconfigure, make and install.

Now, heavily edit /usr/lib/courier-imap/libexec/imapd.rc so it starts 
the noroaming version for non-SSL connections, and the other version 
for SSL connections.  It won't be easy -- you're going to have to do a 
lot of tweaking to that RC file.  It might be easier to switch to 
another IMAP server (like Binc), but I really don't know.

You may want to reconsider your reasons for setting this policy.  It 
will be difficult to maintain (if you ever upgrade vpopmail, you'll 
have to recompile it and courier twice).  It will probably lead to more 
support calls as well.  Consider SMTP AUTH with CRAM-MD5 (which doesn't 
work at the moment, but should hopefully once I apply a patch to the 
last release).

--
Tom Collins  -  [EMAIL PROTECTED]
QmailAdmin: http://qmailadmin.sf.net/  Vpopmail: http://vpopmail.sf.net/
Info on the Sniffter hand-held Network Tester: http://sniffter.com/


Re: [vchkpw] [not-OT] Pop3 auth

2003-12-23 Thread Andrea Riela
 If you're using courier, it will be harder to accomplish your goals.  
 Courier-IMAP links libvpopmail in instead of using vchkpw.  So, like 
 Jeremy explained in another email, you'll have to do the following:

Ok, I reconside my policy.
I've to do this: users pop3 with ssl auth could relay their emails with my
smtp server, users pop3 without ssl auth no.
I've created two vchkpw binaries, but I need two daemons, pop3d and pop3ds.
The pop3d daemon that I use is the qmail pop3d; as pop3ds, I suppose
Courier-Imap pop3d-ssl is the solution.

It's a wrong policy?
Thanks for your patience and support
Regards
Andrea



Re: [vchkpw] [not-OT] Pop3 auth

2003-12-22 Thread Jeremy Kitchen
On Mon, 2003-12-22 at 08:30, Andrea Riela wrote:
 Hi folks,
 I need your suggestions.
 
 I've to do that: I would open my smtp relay for pop3 users with ssl auth.
 That is, the pop3 users couldn't use my smtp relay, pop3-ssl users ya.
 
 I've to implement two vchkpw binaries? Or wich type of solution?
 Could you send me your advices?

yes, two vchkpw binaries, one with and one without
--enable-roaming-users=y

-Jeremy
-- 
Jeremy Kitchen [EMAIL PROTECTED]