Re: [vchkpw] smtp auth

2004-05-24 Thread signo




Hi,

I've installed SPAMCONTROL and i've modified the tcp.smtp file like you
say (:allow,REQUIREAUTH="")

but now nobody can send me e-mail


the sender receive the message:

Your message has encountered delivery problems
to the following recipient(s):

[EMAIL PROTECTED]
Delivery failed
535 authentication failed (#5.7.1)


No recipients were successfully delivered to.

bye, signo


Erwin Hoffmann wrote:

Erwin Hoffmann wrote:

  Hi,

At 10:49 19.05.04 +0200, you wrote:
  
  
   Erwin Hoffmann wrote:Hi,  At 09:46 19.05.04 +0200, signo wrote:
 hello, i ve 2 problems  first: I've installed qmail 1.03 with
qmail-smtpd-auth-043. Now the smth auth  work fine but if i try to send an
email (with Mozilla) without smpt authentication set it  work??!!!??
   Hm. Could you please explain that in more details ?
If i set (in mozilla) 'the server require smtp-auth, he ask me for user
name and passwd, he verify the entries
and if the username/password are correct he send the mail.
 control)!!!

I would like to acceprtONLY mail after a successfull smtp-auth.

  
  
Ok. As I assumed. Look for my SPAMCONTROL patch. It includes SMTP
Authentication.

http://www.fehcom.de/qmail/spamcontrol.html

The README (http://www.fehcom.de/qmail/spamcontrol/README_spamcontrol.html)
tells more (Section 7.4). In your case you to have to set:

:allow,REQUIREAUTH=""

That will do the trick.


regards.
--eh.

Dr. Erwin Hoffmann | FEHCom | http://www.fehcom.de/
Wiener Weg 8, 50858 Cologne | T: +49 221 484 4923 | F: ...24

  






Re: [vchkpw] SMTP Auth HOW? *UPDATE* AMD64

2004-05-24 Thread Linux-Guru
Am Sonntag, 23. Mai 2004 21:28 schrieb blist:

First of all: I have the same problem - also on Dual-Opteron machines.
I also have been in contact with blist and X-ISTENCE...

> Ok,  after the huge number of irrevlent replies to my last thread I am
> attempting to post an update on my SMTP Auth problem.  I have tried just
> most smtp patchs, the on  in the contrib dir of vpopmail and
> http://shupp.org/patches/netqmail-1.05-tls-smtpauth-20040207.patch  I
> have included captures of below.

As far as I found out, all smtp-auth-patches are based on Krzysztof 
Dabrowski's auth-patch (http://members.elysium.pl/brush/qmail-smtpd-auth/).
Some are improved, some are mixed with other features...

>
> Both patches apply without error and compile/install fine.  I am running
> a Dual AMD Opteron system with suse 64 bit.  I have had other people
> look at this situation and there are no solutions.  I can only assume
> the patch has a problem with 64bit systems.  Here is an example of login
> and error and run file:
[...]
I found out, that it doesn't matter what other patches are applied. I got the 
same error when using a vanilla qmail with only the auth-patch and the 
errno-patch applied.
I tried to compile while editing conf-cc and adding there -m32 (for 32-bit), 
but I got errors with this.
When I added -m64, it compiled, but I got the same result at the end => auth 
doesn't work.

When running the following:

exec softlimit -m 5000 tcpserver -vR -l $Server-FQDN -c 1000 -u 89 -g 89 0 
25 /usr/local/bin/recordio sh -c '/var/qmail/bin/qmail-smtpd 
$Server-FQDN /var/vpopmail/bin/vchkpw /usr/bin/true 2>&1'

I get:

tcpserver: status: 0/1000
tcpserver: status: 1/1000
tcpserver: pid 23227 from $Client-IP
tcpserver: ok 23227 $Server-FQDN:$Server-IP:25 $Client-FQDN:$Client-IP::4024
 3227 > 220 $Server-FQDN ESMTP
 3227 < EHLO $Client-Name
 3227 > 250-$Server-FQDN
 3227 > 250-AUTH LOGIN CRAM-MD5 PLAIN
 3227 > 250-AUTH=LOGIN CRAM-MD5 PLAIN
 3227 > 250-PIPELINING
 3227 > 250 8BITMIME
 3227 < AUTH LOGIN
 3227 > 334 VXNlcm5hbWU6
 3227 < dGVzdEB0ZXN0LmNvbQ==
 3227 > 334 UGFzc3dvcmQ6
 3227 < dGVzdA==
 3227 > 454 oops, problem with child and I can't auth (#4.3.0)
23227 < [EOF]
tcpserver: end 23227 status 256
tcpserver: status: 0/1000
23227 > [EOF]

All Phrases with "$" are "masked" since there are some people on this list, 
which should not know which one is affected.

It also doen't make any change, if I comment the ability of CRAM-MD5 out in 
the source of the patch.

> If you've read this far, thanks!.  Drop me an e-mail if you have any
> other suggestions.  Thanks!
I'll start a post at the qmail-list and try to get in contact with Krzysztof 
Dabrowski and Erwin Hoffmann (since he seems to have experience and speaks 
the same language than I do, it would be a bit easier).

If somebody would be able and willing to have a look at this patch there would 
surely be some people very pleased.
If somebody wants to try but hasn't 64-bit-hardware, I can provide access to 
my machine since it isn't productive (badly).

As blist already wrote, any suggestions would be apreciated. Since there is 
more than one who would be glad about a solution, please post answers to the 
list.

Greetings

Tobias


[vchkpw] passwords

2004-05-24 Thread Jean Wainer
Hi,

My boss recently noticed something I didnt: vpopmail (noticed on qmailadmin and 
squirrelmail using courier-imap) accepts passwords with garbage at the end.

Lets say, my password is "secret".
If I type "secretJSDSDALSDKJFLASF", qmailadmin will accept it as a valid password. It 
doesnt accept with garbage "inside" the password, or before.

How can I correct that? Is this a known issue? I've tested with vpopmail 5.4.3 + 
qmailadmin 1.2.0 AND also with vpopmail 4.9.10 + qmailadmin 0.45 (our "museum" 
servers), both have the save problem.

I appreciate any help..

--Jw.


[vchkpw] ldap + vpopmail 5.4.3

2004-05-24 Thread Márcio Luciano Donada
Sorry my ingles, i'm from brasilian! Gentlemen, Am new in the list, I use
FreeBSD 4.10-PRERELASE and I would like to know as I can use the vpopmail
with ldap installing way ports. some tip?
Tank-you
Márcio



[vchkpw] Re: SMTP Auth HOW? *UPDATE* AMD64

2004-05-24 Thread Peter Palmreuther
Hello Blist,

On Sunday, May 23, 2004 at 9:28:35 PM you wrote (at least in part):

> ==> /var/log/mail <==
> May 23 15:10:53 ps1 vpopmail[14133]: vchkpw-smtp: invalid user/domain
> characters [EMAIL PROTECTED] :192.168.5.50

Where does the space character after '.com' comes from? Seems there's
something wrong with Base64-decoding / handing decoded values over to
vchkpw. I might be wrong, but all logs similar to this found in my
system logs have ':' instead of ' :'.

I'd say this is a case for strace/truss, to see if qmail already write
the blank into fd #3 or if vchpw insertes it, and in the former case
it's a file for 'dbg' or similar (and a '-g2' compiled qmail), to
figure who inserts it. In the latter case one has to 'dbg' vchpw to
see when this blank appears first.
-- 
Best regards
Peter Palmreuther

"I am not part of the problem. I am a Republican." -- Dan Quayle
trivia --



Re: [vchkpw] ldap + vpopmail 5.4.3

2004-05-24 Thread Bernd
Hi Marcio!

Well, it's maybe not the most comfortable way, but for me it works just
fine on FreeBSD 5.2.1:

Just add "--enable-auth-module=ldap" to the "CONFIGURE_ARGS=" of
/usr/ports/mail/vpopmail/Makefile

Give it a try


Greets from Austria

Bernd



On Mon, 2004-05-24 at 16:17, Márcio Luciano Donada wrote:
> Sorry my ingles, i'm from brasilian! Gentlemen, Am new in the list, I use
> FreeBSD 4.10-PRERELASE and I would like to know as I can use the vpopmail
> with ldap installing way ports. some tip?
> Tank-you
> Márcio
> 
> 



Re: [vchkpw] ldap + vpopmail 5.4.3

2004-05-24 Thread Márcio Luciano Donada
Hi, Bernd

#cd /usr/ports/mail/vpopmail
#make -DWITH_ENABLE_AUTH_MODULE=ldap ???

[]'s
Márcio

> Hi Marcio!
>
> Well, it's maybe not the most comfortable way, but for me it works just
> fine on FreeBSD 5.2.1:
>
> Just add "--enable-auth-module=ldap" to the "CONFIGURE_ARGS=" of
> /usr/ports/mail/vpopmail/Makefile
>
> Give it a try
>
>
> Greets from Austria
>
> Bernd



Re: [vchkpw] ldap + vpopmail 5.4.3

2004-05-24 Thread Eduardo M. Bragatto
Márcio Luciano Donada wrote:
Hi, Bernd
#cd /usr/ports/mail/vpopmail
#make -DWITH_ENABLE_AUTH_MODULE=ldap ???
[]'s
Márcio

Hi Marcio!
Well, it's maybe not the most comfortable way, but for me it works just
fine on FreeBSD 5.2.1:
Just add "--enable-auth-module=ldap" to the "CONFIGURE_ARGS=" of
/usr/ports/mail/vpopmail/Makefile
	You must edit the file "Makefile" and add "--enable-auth-module=ldap" 
at the variable CONFIGURE_ARGS.
	Try:

# cd /usr/ports/mail/vpopmail
# vi Makefile
	;)
	--
	Since you seem to have some problems with english, here's the 
portuguese version:

	"Você deve editar o arquivo Makefile e adcionar "--enable-..." à 
variável CONFIGURE_ARGS."

Regards,
Eduardo.


Re: [vchkpw] Re: SMTP Auth HOW? *UPDATE* AMD64

2004-05-24 Thread blist




Peter Palmreuther wrote:
Where
does the space character after '.com' comes from? Seems there's
  something wrong with Base64-decoding / handing decoded values over to
vchkpw. I might be wrong, but all logs similar to this found in my
system logs have ':' instead of ' :'.

I'd say this is a case for strace/truss, to see if qmail already write
the blank into fd #3 or if vchpw insertes it, and in the former case
it's a file for 'dbg' or similar (and a '-g2' compiled qmail), to
figure who inserts it. In the latter case one has to 'dbg' vchpw to
see when this blank appears first.
  

Peter,

Here is a copy of the strace log:

ps1:/service/qmail-smtpd # strace /usr/local/bin/softlimit -m 2000
/usr/local/bin/tcpserver -v -H -R -l 0 -x
/usr/local/vpopmail/etc/tcp.smtp.cdb -c 20 -u 616 -g 616 0 25
/var/qmail/bin/qmail-smtpd /usr/local/vpopmail/bin/vchkpw /bin/true
2>&1
execve("/usr/local/bin/softlimit", ["/usr/local/bin/softlimit", "-m",
"2000", "/usr/local/bin/tcpserver", "-v", "-H", "-R", "-l", "0",
"-x", "/usr/local/vpopmail/etc/tcp.smtp.cdb", "-c", "20", "-u", "616",
"-g", "616", "0", "25", "/var/qmail/bin/qmail-smtpd",
"/usr/local/vpopmail/bin/vchkpw", "/bin/true"], [/* 44 vars */]) = 0
uname({sys="Linux", node="ps1", ...})   = 0
brk(0)  = 0x504000
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1,
0) = 0x2a9556b000
open("/etc/ld.so.preload", O_RDONLY)    = -1 ENOENT (No such file or
directory)
open("/etc/ld.so.cache", O_RDONLY)  = 3
fstat(3, {st_mode=S_IFREG|0644, st_size=43645, ...}) = 0
mmap(NULL, 43645, PROT_READ, MAP_PRIVATE, 3, 0) = 0x2a9556c000
close(3)    = 0
open("/lib64/libc.so.6", O_RDONLY)  = 3
read(3,
"\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\20\335\1"..., 640) =
640
fstat(3, {st_mode=S_IFREG|0755, st_size=1534814, ...}) = 0
mmap(NULL, 2365888, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) =
0x2a9566d000
mprotect(0x2a95791000, 1169856, PROT_NONE) = 0
mmap(0x2a9586d000, 253952, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED,
3, 0x10) = 0x2a9586d000
mmap(0x2a958ab000, 14784, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x2a958ab000
close(3)    = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1,
0) = 0x2a958af000
munmap(0x2a9556c000, 43645) = 0
getrlimit(0x2, 0x7fb410)    = 0
setrlimit(RLIMIT_DATA, {rlim_cur=2000, rlim_max=RLIM_INFINITY}) = 0
getrlimit(0x3, 0x7fb410)    = 0
setrlimit(RLIMIT_STACK, {rlim_cur=2000, rlim_max=RLIM_INFINITY}) = 0
getrlimit(0x8, 0x7fb410)    = 0
setrlimit(RLIMIT_MEMLOCK, {rlim_cur=2000, rlim_max=RLIM_INFINITY})
= 0
getrlimit(0x9, 0x7fb410)    = 0
setrlimit(RLIMIT_AS, {rlim_cur=2000, rlim_max=RLIM_INFINITY}) = 0
execve("/usr/local/bin/tcpserver", ["/usr/local/bin/tcpserver", "-v",
"-H", "-R", "-l", "0", "-x", "/usr/local/vpopmail/etc/tcp.smtp"...,
"-c", "20", "-u", "616", "-g", "616", "0", "25", ...], [/* 44 vars */])
= 0
uname({sys="Linux", node="ps1", ...})   = 0
brk(0)  = 0x50d000
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1,
0) = 0x2a9556b000
open("/etc/ld.so.preload", O_RDONLY)    = -1 ENOENT (No such file or
directory)
open("/etc/ld.so.cache", O_RDONLY)  = 3
fstat(3, {st_mode=S_IFREG|0644, st_size=43645, ...}) = 0
mmap(NULL, 43645, PROT_READ, MAP_PRIVATE, 3, 0) = 0x2a9556c000
close(3)    = 0
open("/lib64/libc.so.6", O_RDONLY)  = 3
read(3,
"\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\20\335\1"..., 640) =
640
fstat(3, {st_mode=S_IFREG|0755, st_size=1534814, ...}) = 0
mmap(NULL, 2365888, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) =
0x2a9566d000
mprotect(0x2a95791000, 1169856, PROT_NONE) = 0
mmap(0x2a9586d000, 253952, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED,
3, 0x10) = 0x2a9586d000
mmap(0x2a958ab000, 14784, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x2a958ab000
close(3)    = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1,
0) = 0x2a958af000
munmap(0x2a9556c000, 43645) = 0
rt_sigprocmask(SIG_BLOCK, [CHLD], NULL, 8) = 0
rt_sigaction(SIGCHLD, {0x401ac0, [], 0x400}, NULL, 8) = 0
rt_sigaction(SIGTERM, {0x401ab0, [], 0x400}, NULL, 8) = 0
rt_sigaction(SIGPIPE, {SIG_IGN}, NULL, 8) = 0
open("/etc/dnsrewrite", O_RDONLY|O_NONBLOCK) = -1 ENOENT (No such file
or directory)
open("/etc/resolv.conf", O_RDONLY|O_NONBLOCK) = 3
read(3, "nameserver 127.0.0.1\nnameserver "..., 64) = 64
read(3, "t\n", 64)  = 2
read(3, "", 64) = 0
close(3)    = 0
socket(PF_INET, SOCK_STREAM, IPPROTO_IP) = 3
fcntl(3, F_GETFL)   = 0x2 (flags O_RDWR|O_LARGEFILE)
fcntl(3, F_SETFL, O_RDWR|O_NONBLOCK)    = 0
setsockopt(3, SOL_SOCKET, SO_REUSEADDR, [-4611694294829367295], 4) = 0
bind(3, {sa

[vchkpw] Re: passwords

2004-05-24 Thread Peter Palmreuther
Hello Jean,

On Monday, May 24, 2004 at 4:12:15 PM you wrote (at least in part):

> My boss recently noticed something I didnt: vpopmail (noticed on
> qmailadmin and squirrelmail using courier-imap) accepts passwords
> with garbage at the end.

> Lets say, my password is "secret".
> If I type "secretJSDSDALSDKJFLASF", qmailadmin will accept it as
> a valid password. It doesnt accept with garbage "inside" the
> password, or before.

Please create a test account with password 'password', test this
account and if it is authenticated with "garbage at the end" please
post the encrypted password from 'vpasswd' of this account.

I assume your installation does not use MD5 routines in 'crypt()'
function, and therefore your passwords are limited to a maximum of 8
characters. All passwords with exactly 8 characters (so NOT 'secret'
as this are only 6) than will be accepted if the first 8 characters of
input match. This is due to the fact 'crypt()', using only DES, only
takes the first 8 characters. A MD5-enabled 'crypt()' will not suffer
this limitations

> How can I correct that?

vpopmail should, when available, use automatically MD5-password. To be
sure recompile vpopmail (don't forget a 'make clean' before) with all
your configure options PLUS '--enable-md5-passwords'. If you have any
'--disable-md5-passwords' option set, remove it.

I don't know a save way to figure if your libcrypt.so supports
MD5-passwords, but I've found that
'strings /lib/libcrypt.so.1 |grep -i md5'

returned 'md5-crypt.c' and '__md5_crypt_r', which I'd take as a hint
my libcrypt is MD5-enabled and the encrypted passwords in my vpasswd
confirm this assumption.

> Is this a known issue?

Not I'm aware of.

> I've tested with vpopmail 5.4.3 + qmailadmin 1.2.0 AND also with
> vpopmail 4.9.10 + qmailadmin 0.45 (our "museum" servers), both have
> the save problem.

Maybe the 'museum' might be the problem: if their libcrypt is too old
it might be it's not yet aware of MD5, who knows.
-- 
Best regards
Peter Palmreuther

Use it up ... Wear it out.  Make it do ... Or do without.



[vchkpw] Re: SMTP Auth HOW? *UPDATE* AMD64

2004-05-24 Thread Peter Palmreuther
Hello Blist,

On Monday, May 24, 2004 at 4:47:43 PM you wrote (at least in part):

>>I'd say this is a case for strace [...]
> Here is a copy of the strace log:

Please replace your strace call by

strace -fF -s 4096 -o /tmp/qmail.log -e write ...

(replace '...' with 'softlimit -m ...' and so on).

else we'll not see what qmail hands over to vchkpw.
-- 
Best regards
Peter Palmreuther

SLIDING DOWN THE RAZOR BLADES OF LIFE



Re: [vchkpw] Re: passwords

2004-05-24 Thread Jean Wainer
> Please create a test account with password 'password', test this
> account and if it is authenticated with "garbage at the end" please
> post the encrypted password from 'vpasswd' of this account.

It didnt.


> I assume your installation does not use MD5 routines in 'crypt()'
> function, and therefore your passwords are limited to a maximum of 8
> characters. All passwords with exactly 8 characters (so NOT 'secret'
> as this are only 6) than will be accepted if the first 8 characters of
> input match. This is due to the fact 'crypt()', using only DES, only
> takes the first 8 characters. A MD5-enabled 'crypt()' will not suffer
> this limitations
Very interesting.
It seems that the problem occured only with the migrated domains from other servers 
(the "museum" ones). Accounts created in the new server, or accounts which had its 
password changed in the new server does not have this problem.

> Maybe the 'museum' might be the problem: if their libcrypt is too old
> it might be it's not yet aware of MD5, who knows.

I guess that was it.

Thanks a lot, Peter!

Is it possible to convert all "old" passwords from the old format (MD5-disabled 
crypt()) to the new format?

--Jw.


Re: [vchkpw] Re: SMTP Auth HOW? *UPDATE* AMD64

2004-05-24 Thread blist




Peter Palmreuther wrote:

  
Please replace your strace call by

strace -fF -s 4096 -o /tmp/qmail.log -e write ...

(replace '...' with 'softlimit -m ...' and so on).

else we'll not see what qmail hands over to vchkpw.
  


3906  write(2, "tcpserver: status: 0/20\n", 24) = 24
3906  write(2, "tcpserver: status: 1/20\n", 24) = 24
10092 write(2, "tcpserver: pid 10092 from 192.168.5.50\n", 39) = 39
10092 write(2, "tcpserver: ok 10092 0:192.168.5.50:25
:192.168.5.50::32817\n", 59) = 59
10092 write(1, "220 box.prostream.net ESMTP\r\n", 29) = 29
10092 write(1, "504 auth type unimplemented (#5.5.1)\r\n", 38) = 38
10092 write(1,
"250-box.prostream.net\r\n250-PIPELINING\r\n250-8BITMIME\r\n250 AUTH
LOGIN PLAIN CRAM-MD5\r\n", 84) = 84
10092 write(1, "334 VXNlcm5hbWU6\r\n", 18) = 18
10092 write(1, "334 UGFzc3dvcmQ6\r\n", 18) = 18
10092 write(4, "[EMAIL PROTECTED]", 27) = 27
10412 write(2, "domain invalid brooksroy.com\n\n", 30) = 30
10412 write(5, "\33\0\0\1\215 \0\0\0root\0W_OYDVUA\0vpopmail", 31) = 31
10412 write(5, "\v\1\0\0\3INSERT INTO vlog set user=\"brooks\",
passwd=\"jj\n\", domain=\"brooksroy.com\n\",
logon=\"[EMAIL PROTECTED]", remoteip=\"192.168.5.50\",
message=\"vchkpw-smtp: invalid user/domain characters
[EMAIL PROTECTED]:192.168.5.50\", error=3,
timestamp=1085433138", 271) = 271
10412 write(5, "\1\0\0\0\1", 5) = 5
10092 --- SIGCHLD (Child exited) @ 0 (0) ---
10092 write(1, "535 authentication failed (#5.7.1)\r\n", 36) = 36





[vchkpw] Filtering SPAM

2004-05-24 Thread Morten Rønseth




Hi all,

I'm trying to filter incoming mail using the following mail-filter:

-
VPOP="| /home/vpopmail/bin/vdelivermail '' [EMAIL PROTECTED]"
VHOME=`/home/vpopmail/bin/vuserinfo -d [EMAIL PROTECTED]

# try filtering it using user-defined rules
if (/^X-Spam-Flag: *YES/)
{
    exception {
    include $VHOME/Maildir/.mailfilter
    }
    # then send it to the .SPAM folder
    exception {
    to "$VHOME/Maildir/.SPAM/"
    }
    # or try delivering it to the Trash folder
    exception {
    to "$VHOME/Maildir/.Trash/"
    }
    # if not go on with delivery
    exception {
    to "$VPOP"
    }
}
else
{
    exception {
    include $VHOME/Maildir/.mailfilter
    }
    # if not go on with delivery
    exception {
    to "$VPOP"
    }
}
---
It is called from .qmail-default as in

"| /usr/local/bin/maildrop mailfilter"


Now, if mail is sent to an account using the exact account name, mail
is delivered as it should be. However, If I send mail to an account
using an alias (via fastforward), mail doesn't get delivered. Why? I'm
using 

VPOP="|
/home/vpopmail/bin/vdelivermail '' [EMAIL PROTECTED]"

which is the same as in the (old) .qmail-default file. The mail-filter
is chown'ed vpopmail:vchkpw and the log file says local delivery is
delivering "...to local [EMAIL PROTECTED]".
But nothing ever arrives.

Anybody knows why this isn't working?



Cheers,



-Morten






[vchkpw] Re: passwords

2004-05-24 Thread Peter Palmreuther
Hello Jean,

On Monday, May 24, 2004 at 8:25:42 PM you wrote (at least in part):

>> I assume your installation does not use MD5 routines in 'crypt()'
>> function, [...]
> Very interesting.
> It seems that the problem occured only with the migrated domains
> from other servers (the "museum" ones). Accounts created in the new
> server, or accounts which had its password changed in the new server
> does not have this problem.

Would make sense.

> Thanks a lot, Peter!

You're welcome.

> Is it possible to convert all "old" passwords from the old format
> (MD5-disabled crypt()) to the new format?

If you have plain passwords enabled: yes. Should be sufficient to
delete the encrypted passwords from vpasswd (empty the second field)
with 'awk') and let the users log in again. Authentication will/should
succeed, because the clear password is still there and encrypted
password will be set, as vchkpw recognizes it is empty.

This is from the top of my head, I haven't tested recently or with one
of the latest releases, so you're advised to test yourself with a
non-important account before applying the change globally.

Don't forget to run 'vmkpasswd $DOMAIN' after you modified the
'vpasswd' file(s) and before you try to login (e.g. via POP3).
-- 
Best regards
Peter Palmreuther

If the probability of success is not almost one, then it is damn near
zero.



Re: [vchkpw] Re: SMTP Auth HOWTO?

2004-05-24 Thread Linux-Guru
Am Sonntag, 23. Mai 2004 03:02 schrieb Eric Ziegast:
> I know this is a shameless plug, but I'm a happy customer.
>
> Have Inter7 do a SugarBox install for less time/money than
> it takes to figure it out using online resources and googled
> howtos.  I didn't have to second-guess or debug anything.
> Within 4 hours of the consultant logging in via SSH, I had
> SMTP-AUTH, POP-before-SMTP, SMTP/SSL, POP3, POP3/SSL, IMAP,
> IMAP/SSL, CRAM-MD5 and a complement of TinyDNS and SqWebMail
> all working together.  Within another hour, he had MySQL
> replication and redundancy working.  He left all the source
> code on my box so that I could make modifications and
> customizations later using "make install" and even build
> additional servers later.
>
> If you don't make a living installing Qmail/Vpopmail servers,
> it's less expensive and more practical to just let someone
> else do it.  I've installed qmail/vpopmail from scratch before
> and believe that it can be a PITA to get done right.
>
> --
> Eric Ziegast

Hi Eric,

I could bet, it was on a 32bit environment... :-)
IMHO it's been only partly a good deal to take Inter7-support. First of all, 
it saved you time and money. But especially, if you don't know the internals 
of such a system and are using it in productive environment e.g. as ISP or in 
a "bigger" company you might be left alone unless you pay for support every 
time.
I set up all the stuff on other servers a couple of times before and I would 
do it the same way again: from the bleeding edge.
This was the way I learned how it works and which helps me to solve problems 
in daily business with these machines.
But: if you like it the way you did, ok - I like it the other way...

Just my $.05...

Greetings

Tobias


[vchkpw] SMTPAUTH + Unable to write pipes

2004-05-24 Thread Andrew Averin
I have netqmail-1.05 + toaster-0.6
+vchkuser_mysql-0.6+vpopmail-5.4.3+mysql 4.0.18

Starting script for qmail:

TCPSERVER=/usr/local/bin/tcpserver
PATH=/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin
export PATH
start (){
echo  "Starting Qmail"
/var/qmail/bin/qmail-start ./Mailbox /var/qmail/bin/splogger qmail &

$TCPSERVER -v -D -R -l0  -x /home/vpopmail/etc/tcp.smtp.cdb  -u 88 -g 83 0 25 \
/usr/bin/tcp-env tcp-env rblsmtpd -rlist.dsbl.org /usr/bin/qmail-smtpd mx.XXX.ru\
/home/vpopmail/bin/vchkpw  /bin/true  0 2>&1 | /var/qmail/bin/splogger smtp &
}


Without auth everuthing goes fine, but while auth I got an error
"oops, Unable to write pipe and I can't auth (#4.3.0)"

What am I doing wrong?

Thank you an advance.
Andrew Averin
mailto:[EMAIL PROTECTED]