Re: vpopmail system user feature breaks mail users ability to change passwords

[Brian Kolaci]

I fixed this in my copy last week...

in vmysql.c and vcdb.c, you'll need
to look for the lines:

        myuid = geteuid();
        if ( myuid != VPOPMAILUID && myuid != 0 ) {

and change them to:

        vget_assign(domain, NULL, 156, &uid, &gid );

        myuid = geteuid();
        if ( myuid != VPOPMAILUID && myuid != 0 && myuid != uid) {

In one of the functions, you'll also need
to declare uid & gid.

I just haven't gotten around to submitting the patch...

Thanks,

Brian

  > Mailing-List: contact [EMAIL PROTECTED]; run by ezmlm
  > Delivered-To: mailing list [EMAIL PROTECTED]
  > X-Server-Uuid: 6b1d535a-5b27-11d3-bf09-00902786a6a3
  > From: "Matt Simerson" <[EMAIL PROTECTED]>
  > To: "'[EMAIL PROTECTED]'" <[EMAIL PROTECTED]>
  > Subject: vpopmail system user feature breaks mail users ability to change 
passwords
  > Date: Thu, 30 Nov 2000 20:01:49 -0700
  > X-WSS-ID: 1639CB3D204190-01-01
  > 
  > Using vpopmail 4.9.6, qmailadmin 0.39, sqwebmail 1.0.3, and courier-imap
  > 1.2.2. 
  > 
  > Sqwebmail and Courier-IMAP are both compiled using the new preauthvchkpw.c
  > file. 
  > 
  > I'm using vpopmail's feature so that each domain is created under a unique
  > system user name. So, domain.com is owned by sytem user "domain" and
  > domain2.com is owned by the system user "domain2", etc...
  > 
  > Nearly everything works just great with just one notable exception. Nobody
  > whose account exists under an account other than vpopmail.vchkpw is able to
  > change their passwords. :-(  They authenticate just fine, everything works,
  > but when they log in via the qmailadmin interface or the sqwebmail interface
  > and attempt to change the password for mailboxes, it fails. 
  > 
  > Sqwebmail fails silently, qmailadmin produces a -22 error.
  > 
  > Matt
  >