Please respond to the list, not directly to me. Although I would like to help, chances are the list will be able to help also.
-----Original Message----- From: George Leatherman [mailto:[EMAIL PROTECTED] Sent: Tuesday, June 29, 2004 4:49 PM To: Samuel Hill Subject: Re: Upper Case NOT Allowed in UserName Authentication I don't beleive you understand my problem - let my try to explain it a little differently from the start. I do appreciate your help! I am presently using Linux 6.0 with qmail installed using tmda-cgi... All works well. I use the file method for authentification. The reason I say this is because I use Upper and lower case charactures in my customer's usernames and passwords. The configurations works well. Now I have upgraded hardware and software to Linux9.1 from RedHat. I've upgraded from 1.03qmail to 1.05 Netqmail and have installed the latest TMDA and lastest TMDA-cgi with the Blue patch. Here's my configure.ini file: (Note that I do switch between file and program to authenticate so you see both here) (dp0 S'AuthFile' p1 S'None' p2 sS'VUser' p3 S'vpopmail' p4 sS'AuthType' p5 S'program' p6 sS'SessionExp' p7 S'300' p8 sS'Target' p9 S'/var/www/cgi-bin/tmda.cgi' p10 sS'DispDir' p11 S'/display' p12 sS'SessionOdds' p13 S'0.01' p14 sS'Python' p15 S'/usr/local/bin/python' p16 sS'VLookup' p17 S'None' p18 sS'AuthArg' p19 S'/var/qmail/bin/checkpwd -slogin' p20 sS'Perm' p21 S'6711' p22 sS'CC' p23 S'gcc' p24 sS'Base' p25 S'../tmda-1.0.3' p26 sS'InstPath' p27 S'/root/tmda-cgi-0.13/' p28 sS'Mode' p29 S'system-wide' p30 sS'AuthURI' p31 S'pop3://localhost' p32 sS'Path' p33 S'/root/tmda-cgi-0.13/' p34 sS'AuthProg' p35 g20 sS'Config' p36 S'/home/~/Maildir/tmdacfg' p37 sS'SessionPrefix' p38 S'/tmp/TMDASession.' p39 I run it and then make, make install.... My users have a computer generated username and password. Upper and lower case mixture. Such example: User = Zy277abX Password = aaBbAz92 He has a nologin account. Qmail uses the Maildir format. When he connects to the tmda.cgi login page and enters his Username and password, he gets the WRONG PASSWORD page and the source indicates: Username zy277abx not found in system. str='getpwnam(): name not found: zy277abx' Why is the Username changing from Zy277abX to zy277abx ? Why is it saying that he does not have an account? He can pick up his email using Outlook Express and his Username/Password. OK, now for me I have a simple username and password ALL LOWERCASE... It works fine for me....I am transported to the Pending Page. The ONLY difference in the two accounts is that his Username as a mixture of Upper and lower charactures whilst my is solely lowercase. Therefore my dillema. Something has changed in the authentification methods of either Linux6 to Linux9 or from TMDA-cgi-.old to new. Thanks Sam for your time and effort.Take Care, George ----- Original Message ----- From: "Samuel Hill" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, June 29, 2004 2:23 PM Subject: RE: Upper Case NOT Allowed in UserName Authentication > You want the following, probably, on compile time... > > How should I authentication user logins? > Program > > What is the authentication command? > /var/qmail/bin/vchkpw > > ------------------------ > I am assuming you have vpopmail installed on the box and the users are > on that box, correct? If you use pop3, and it works, why not use that? > > Sam > > > -----Original Message----- > From: George Leatherman [mailto:[EMAIL PROTECTED] > Sent: Tuesday, June 29, 2004 4:14 PM > To: Samuel Hill > Subject: Re: Upper Case NOT Allowed in UserName Authentication > > > virtual users="None" > > ----- Original Message ----- > From: "Samuel Hill" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Tuesday, June 29, 2004 2:01 PM > Subject: RE: Upper Case NOT Allowed in UserName Authentication > > > > What mailer are you using? > > > > QMAIL, What? > > Is it vpopmail or are you using some sort of sendmail thing? > > > > Sam > > > > > > -----Original Message----- > > From: George Leatherman [mailto:[EMAIL PROTECTED] > > Sent: Tuesday, June 29, 2004 4:02 PM > > To: Samuel Hill > > Subject: Re: Upper Case NOT Allowed in UserName Authentication > > > > > > Thank You for responding.... > > > > I do have customers with Upper/Lower case usernames and passwords > > and > > > they do know that they are case sensitive. But apparently something > > along the authentification doesn't. > > > > I've used both checkpassword-pam and /etc/tmda-cgi clear text but > > neither accept Upper Case. > > > > I entered JOE as the username - why is getpwnam() returning it in > > LOWER case? > > str='getpwnam(): name not found: joe' > > > > > > Here's a snip from a wrong password (I thought that any program that > > returns 0 is authenticated) > > > > Capturing the debug stream... > > Setting up file authentication with file '/etc/tmdauth' Setting up > > checkpw authentication with '/var/qmail/bin/checkpwd -sradius' Auth > > program is '/var/qmail/bin/checkpwd -sradius -sradius' Trying > > checkpw method UID = 0, EUID = 0 Successful pipe(). Successful > > fork(), PID = 6566 PID = 6566, status = 256 Authentication returned: > > 0 > > > > > > > > Thank you Sam! > > George > > > > > > > > > > ----- Original Message ----- > > From: "Samuel Hill" <[EMAIL PROTECTED]> > > To: <[EMAIL PROTECTED]> > > Sent: Tuesday, June 29, 2004 12:58 PM > > Subject: RE: Upper Case NOT Allowed in UserName Authentication > > > > > > > I think it is pretty standard security to be strict on > > > username/password and case. What is wrong with just telling your > users > > > > > that the username and password is case sensitive? > > > > > > You can modify the html template (in the template directory) with > > > a statement. > > > > > > Is the problem that your users have some with upper case > > > usernames/passwords? > > > > > > PS. I think your emails are in html or something, people will not > > > respond to those. > > > > > > Sam > > > > > > -----Original Message----- > > > From: [EMAIL PROTECTED] > > > [mailto:[EMAIL PROTECTED] > > > On Behalf Of George Leatherman > > > Sent: Tuesday, June 29, 2004 2:09 PM > > > To: [EMAIL PROTECTED] > > > Subject: Upper Case NOT Allowed in UserName Authentication > > > > > > > > > Howdy, > > > > > > I've installed the latest tmda and tmda-cgi with Blue patch on a > > > Linux9.1 machine. I use /etc/tmda mode 400 for plaintext > > > username/password authentification - simple enough but ALL > > > username/password combinations MUST be in lower case before it > > is > > > authenticated. > > > Any username/password charactures in UPPER case results in WRONG > > > PASSWORD with the source message of > > > > > > Username z2ycrnuc not found in system. > > > str='getpwnam(): name not found: z2ycrnuc' > > > > > > The username I inputed was Z2yCRnuc > > > > > > > > > I've tried checkpassword-pam also > "/var/qmail/bin/checkpassword-pam > > > -slogin" > > > This reports the same after recompiling. Using checkpassword with > > POP3 > > > I do > > > get authenticated. > > > > > > Is there a workaround or am I not seeing something I should? I > > > appreciate your help with this great program and any comments with > be > > > absorbed too! > > > > > > George > > > > > > _____________________________________________ > > > tmda-users mailing list ([EMAIL PROTECTED]) > > > http://tmda.net/lists/listinfo/tmda-users > > > > > > > > > _____________________________________________ > > tmda-users mailing list ([EMAIL PROTECTED]) > > http://tmda.net/lists/listinfo/tmda-users > > > > _____________________________________________ > tmda-users mailing list ([EMAIL PROTECTED]) > http://tmda.net/lists/listinfo/tmda-users > _____________________________________________ tmda-users mailing list ([EMAIL PROTECTED]) http://tmda.net/lists/listinfo/tmda-users
