On Wed, 26 Mar 2003 15:39:00 -0500, "Jesse D. Guardiani"
<[EMAIL PROTECTED]> wrote:

> Well, there is one difference between tmda-ofmipd and tmda-cgi that will
> require a different plan of action: The password retrieval.

Actually, it wouldn't REQUIRE that.  tmda-cgi allows passwords to be
pulled from either a central file or from a file located in the same
directory as the user's config file.

I am sure it would be more convenient to pull passwords via vchkpw,
but I really don't know how to do that.  I believe vchkpw uses the
same interface as checkpwd, but I haven't clue one on how to spawn a
checkpwd program and then write to its file descriptor #3 in Python.

Does anyone out there on this list know how to do it?  I see popen2
and the like will let you send to FD#1, but I don't see anything for
FD#3.

> tmda-ofmipd was already rigged to get a vpopmail password via IMAP or
> checkpassword program.
> 
> You'll need some way to check vpopmail passwords on the fly. One password
> for all virtual users won't cut it.

It wouldn't be that.  It would be one password for each login name.
With the current setup, we would put those passwords in /etc/tmda-cgi
or in /home/virtuser/.tmda/tmda-cgi.

> I suggest using DJB's checkpassword interface because vpopmail's vchkpw
> program is compatible with it(I think):
> 
> http://cr.yp.to/checkpwd.html

That only allows us to pull passwords from /etc/passwd.  Wouldn't help
any with virtual users.

> It's pretty standard by now. But unfortunately I'm pretty unfamiliar
> with it, so I'd have to do some reading before I could help you implement
> something that could actually interact with vpopmail's vchkpw program.

Yeah, I just don't know how to do it.

> I suppose you'll need another configuration option to specify the
> checkpassword program of choice too.

If we added another form of password authentication, yeah.

> Ummm.. I'm not sure what you're asking. I only see a page to generate
> dated/sender/keyword addresses at that link.

There's a menu on the left that lets you look through all the pages.
This page not only shows how I want to make tmda-cgi look, but it
should give you an idea of what features I'm planning to add.

> I haven't had a chance to look at tmda-cgi's capabilities yet, but as
> long as my vpopmail users can log in and tmda-cgi allows for the viewing,
> approving, and deleting of pending emails, I'd be happy to use it.

Yup.  That's what it does.

> I'd like for my users to be able to edit their whitelists and blacklists
> too, but that's about it.

Not currently... well, you can add to the lists, but you can't edit
them.  I do plan to add this eventually.  If you looked at the
webpages I gave you, you'd see the sample screens.

> I already have a script that automates the removal of stale pending
> email for vpopmail users,

I want to integrate this too so that users can pick how long the
pending files stick around (http://wolfhome.com/~gre7g/layout2a.htm).

> and any additional functionality would just
> be icing on the cake.

Gotcha.

Gre7g.
_________________________________________________
tmda-workers mailing list ([EMAIL PROTECTED])
http://tmda.net/lists/listinfo/tmda-workers

Reply via email to