----- Original Message ----- From: "Jonas Pasche" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Sunday, March 09, 2003 1:39 PM Subject: Re: [vchkpw] tcp.smtp file perms/owns for -enable-roaming-users?
> Hi Jesse, > > > First off, I didn't write the text you just replied to. That was written by the > > other gentleman. > > You're absolutely right; my further posting should have been started > with "Hi Benjamin". :-) > > > -- begin -- > > 4. How do I allow roaming users to use our smtp server without opening > > the machine up to everyone on the internet? > > > > Your startup script for the qmail smtp server must use the > > tcpserver -x file command similar to this startup line. > > > > env - PATH="/var/qmail/bin:/usr/local/bin" \ > > tcpserver -H -R -x /path/to/vpopmail/etc/tcp.smtp.cdb \ > > -c20 -u504 -g503 0 smtp \ > > /var/qmail/bin/qmail-smtpd 2>&1 > /dev/null & > > -- end -- > > > > > > This clearly implies that the tcp.smtp.cdb file is to be created by > > vpopmail (or clearopensmtp) in the /path/to/vpopmail/etc/ directory. > > I agree that it can be understood that way. However, most users (at > least the users that used "Life with qmail" to install qmail) have the > tcp.smtp.cdb in /etc, and the line you quoted simply is confusing and > should have included "/path/to/whereever/you/have/tcp.smtp.cdb". > > The trick is within the configure script. It reads: > > --- begin --- > [...] > tcpserver_file="" > for f in "$vpopmaildir"/etc/tcp.smtp /etc/tcp.smtp /etc/tcprules.d/qmail-smtpd > do > if test -f $f > then > tcpserver_file=$f > break > fi > done > [...] > --- end --- > > So it looks (in exactly in that order) for: > > 1) "$vpopmaildir"/etc/tcp.smtp > 2) /etc/tcp.smtp > 3) /etc/tcprules.d/qmail-smtpd > > Remember, we're at _compile_ time. > > When doing a fresh install, there isn't a tcp.smtp file in 1) in nearly > all cases, but in 2). That's why vpopmail then adapts itself to use > /etc/tcp.smtp and writes to /etc/tcp.smtp.cdb and not to > ~vpopmail/etc/tcp.smtp.cdb. Ah. I see now. It seems to me that the whole ./configure autodetect of tcp.smtp is hokey. I think it would make more sense to specify in the INSTALL docs and in the configure script that there is a DEFAULT location for tcp.smtp. Clearly /etc doesn't work real well because of the default permissions, so I'd suggest "~vpopmail/etc". Then, allow that default to be explicitly overridden by a configure option like "--path-to-tcp-smtp=blah". Then the FAQ entry would be correct, but we could add a note that the default setting can be overridden. Or We could keep the current configure behavior and just make sure that we document it in install, but I think trying to explain the configure behavior would really confuse some people. What do you think? <snip>