On Apr 14, 2006, at 9:57 AM, Ken Jones wrote:
kengheng wrote:
When I add a domain using vadddomain -u <domain>, I have to change the permission of /var/qmail/vpopmail/etc/vpopmail.mysql to o+r ?

Yes. By default, and for security reasons,
the ~vpopmail/etc/vpopmail.mysql file is only readable
by the vpopmail user.

If you add any domain under a different user, that user
will need access to that file.

You could either grant access to all users, or you could
make sure the vchkpw group has access and include the new
user in the vchkpw group.

Note that making it world-readable opens up a dangerous security hole. If someone can get access to the server, they can learn the username and password for the entire vpopmail database. If that server just does email, and only admins have access/accounts, then it's less of a risk. Doing it on a server that does web hosting and allows users to upload their own cgi scripts would be very dangerous.

Tom Collins  -  [EMAIL PROTECTED]
QmailAdmin: http://qmailadmin.sf.net/  Vpopmail: http://vpopmail.sf.net/

Reply via email to