-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Paul Theodoropoulos <[EMAIL PROTECTED]> a miaul� :
>
> Where in the instructions does it say to run the binary as other than root?
It doesn't say hou have to, but it says you can :)
- ---
sqwebmail/SECURITY :
When virtual mailboxes are being used, it is possible to install
SqWebMail setuided to the virtual userid, instead of root. For that to
work, each account's Maildir must be created with the account password
already saved in Maildir/sqwebmail-webpass file, or a virtual domain
mechanism like vchkpw must be used.
On some platforms this may not work without some additional tweaking.
If authenticating with sqwebmail setuided to the virtual userid
doesn't work:
* Verify that the password has been correctly set.
* Remove the source file authlib/changeuidgid.c. Replace everything
in that file with the following three lines of code, exactly as
shown:
void authchangegroup() {}
void authchangeuidgid() {}
void authchangeusername() {}
* Recompile and reinstall.
- ---
Tried that, but then it won't compile (and the .c has changed directory)
>
> At 08:28 AM 06/14/2003, leonard wrote:
> >-----BEGIN PGP SIGNED MESSAGE-----
> >Hash: SHA1
> >
> >
> >Little precision:
> >In the apache-error log, when the binay is nOt chown root, I get:
> >setgid: Operation not permitted
> >[Sat Jun 14 00:42:09 2003] [error] [client 213.186.37.170] Premature end
> >of script headers: /var/www/cgi-bin/sqwebmail
> >
> >Anyone running sqwebmail as the vpopmail user ?
> >
> >
> >- -----BEGIN PGP SIGNED MESSAGE-----
> >
> >Hello,
> >
> >I tried many times to get sqwebmail running as vpopmail vchkpw
> >(chowning the sqwebmail binary), but then the login allways fails.
> >
> >Tried to --without-all auths besides --with-authvchkpw , I even
> >tried chowning the cache directory, I'm starting to think my
> >server is haunted !
> >Too bad because I relly like sqwebmail.
> >
> >Can someone give me a hint ? I'm all out :-)
> >Guillaume
> >
> >- - --
> >-----BEGIN PGP SIGNATURE-----
> >Version: GnuPG v1.2.1 (GNU/Linux)
> >
> >iD8DBQE+6z8BoqOw021SWZYRAi4rAKCRyMPMCvLY0A1VJ0XaJUTUm/BopQCff8+t
> >kBEtSpP2VrkOr9CSRyF7Xsg=
> >=pBFd
> >-----END PGP SIGNATURE-----
>
> Paul Theodoropoulos
> http://www.anastrophe.com
> http://folding.stanford.edu
> The Nicest Misanthrope on the Net
>
>
>
>
- --
Clef 0x6D525996 |> www.keyserver.net pgp.mit.edu pki.surfnet.nl
Fingerprint = 3B64 5F7C B27B A047 AF4F E5FD A2A3 B0D3 6D52 5996
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
iD8DBQE+60YaoqOw021SWZYRAiSQAJ48LGlEb4J8c/i3HQBnyi54houNcgCdFs64
g7i48ytjqkIDGAUEpMryFBw=
=D7TT
-----END PGP SIGNATURE-----
