Only a few minutes reading the code gave me SITE_ADMIN access on
qmailadmin, but nothing in it is working. I'll go ahead with creating a
new project just for managing sites.
Best regards
Michael Boman
Michael Boman wrote:
>
> Hello everyone,
> I just want to tell you all that I am working now on a global admin,
> where you can add domains, add alias domains, delete domains, change the
> .qmailadmin-limits file and change the password for the postmaster
> (without knowing the current one).
>
> I know that this is a very wanted features, and I'll do my best to
> create a good tool. Basically I'll take the current version of
> qmailadmin (0.32) and strip out all the normal user administration
> stuff. The reason why I do this is that I don't want to re-invent the
> wheel here, re-use as much code as I can. This way the some code can be
> shared as well, keeping it easier to maintain (hopefully anyway).
>
> As this could be a mayor security risk (the CGI _has_ to be suid root
> for an example, and the power it give quite impressive - it sure can
> ruin your day if there is any mistakes using it) I am thinking about
> enforce SSL encryption so at least the password won't leak out.
>
> I need your co-operation to test it out, do code audit's and give me
> general feedback.
>
> I'd also grateful if someone could come up with a nice user interface,
> based on the current qmailadmin interface - and a web page (my interest
> will be on coding =) )..
>
> In the beginning it will be a strip down qmailadmin 0.32 version, with
> domain administration instead of user administration.
>
> I'll place the project at sourceforge so anyone can help us out,
> hopefully there will be a snapshot/release at inter7.com's page as well
> to link the things together.
>
> I am hoping to get Ken's blessing over this project, making it a part in
> the vchkpw suite.
>
> Now to the technical questions:
> I haven't seen any function in the API that will return me all the
> domains the vchkpw authorization module is taking care of. Am I blind,
> or do we need to add it to the API? If so, what do you think would be
> the right approach to glob all the domains?
>
> Ken, if you don't mind - could I use qmailadmin mailing list for this
> project, or would you like to keep them separated?
>
> Best regards
> Michael Boman
>
> PS
> Expect to see something in the beginning of next week, planning to work
> on this during the weekend.
> DS
>
> PPS
> Ken, wouldn't it be time to clean out all the super-postmaster code
> from qmailadmin? It's not in use, and you have indicated that you want a
> separate program and therefor have no plans to use it at all. And by
> removing the code we get a smaller binary AND less code to maintain.
> This should result in fewer possibilities of security risks.
>
> I'll send you the alfa's and beta's as soon as I made them work. And as
> soon as my sourceforge account has been activated I'll keep my work
> there.
>
> DDS
>
> --
> W I Z O F F I C E . C O M L I M I T E D - Your Online Office Wizard
> 16 Tannery Lane, Crystal Time Building, #04-00, Singapore 347778
> Voice : (+65) 844 3228 [extension 118] Fax : (+65) 842 7228
> Pager : (+65) 92 93 29 49 ICQ : 5566009
> Mobile: (+65) 98 55 17 34
> eMail : mailto:[EMAIL PROTECTED] URL : http://www.wizoffice.com
--
W I Z O F F I C E . C O M L I M I T E D - Your Online Office Wizard
16 Tannery Lane, Crystal Time Building, #04-00, Singapore 347778
Voice : (+65) 844 3228 [extension 118] Fax : (+65) 842 7228
Pager : (+65) 92 93 29 49 ICQ : 5566009
Mobile: (+65) 98 55 17 34
eMail : mailto:[EMAIL PROTECTED] URL : http://www.wizoffice.com
S/MIME Cryptographic Signature
