Hi 

Thanks for Brian Candler, Paul L. Allen, Petri
Riihikallio and Sam Varshavchik for replies and
comments. 

I�m delighted that Mr. Sam is looking into eliminating
the setuid requirements of SqWebMail.

I have noted from the replies following should be done
to run the SqWebMail under Apache suEXEC:

1.      chown the authdaemond socket to that user
2.      chown all your mail domains and their contents and
sqwebmail to the same user and group
3.      Make sqwebmail an ordinary script not a setuid one
4.      Make /var/cache/sqwebmail and contents owned by the
same uid that you used for sqwebmail
5.      The maildirs also have to be WRITEable by sqwebmail
6.      Use the --with-cacheowner configure option to
control the ownership of the cache

I have done the necessary changes and noted the
following:

1.      The SqWebMail ran under Apache suEXEC and displayed
the login page
2.      Does not read templates from the location
SQWEBMAIL_TEMPLATEDIR environment variable points to
and instead it reads from its default location
/usr/local/share/sqwebmail/html
3.      I have entered an invalid user id and password,
then the  SqWebMail crashes with a Server Error 500
(Premature end of script headers) without complaining
invalid userid/password.

So what have I missed? Appreciate your comments.

Thanks
Sagara


__________________________________
Do you Yahoo!?
The New Yahoo! Shopping - with improved product search
http://shopping.yahoo.com

Reply via email to