Hello everyone,
I just want to tell you all that I am working now on a global admin,
where you can add domains, add alias domains, delete domains, change the
.qmailadmin-limits file and change the password for the postmaster
(without knowing the current one).
I know that this is a very wanted features, and I'll do my best to
create a good tool. Basically I'll take the current version of
qmailadmin (0.32) and strip out all the normal user administration
stuff. The reason why I do this is that I don't want to re-invent the
wheel here, re-use as much code as I can. This way the some code can be
shared as well, keeping it easier to maintain (hopefully anyway).
As this could be a mayor security risk (the CGI _has_ to be suid root
for an example, and the power it give quite impressive - it sure can
ruin your day if there is any mistakes using it) I am thinking about
enforce SSL encryption so at least the password won't leak out.
I need your co-operation to test it out, do code audit's and give me
general feedback.
I'd also grateful if someone could come up with a nice user interface,
based on the current qmailadmin interface - and a web page (my interest
will be on coding =) )..
In the beginning it will be a strip down qmailadmin 0.32 version, with
domain administration instead of user administration.
I'll place the project at sourceforge so anyone can help us out,
hopefully there will be a snapshot/release at inter7.com's page as well
to link the things together.
I am hoping to get Ken's blessing over this project, making it a part in
the vchkpw suite.
Now to the technical questions:
I haven't seen any function in the API that will return me all the
domains the vchkpw authorization module is taking care of. Am I blind,
or do we need to add it to the API? If so, what do you think would be
the right approach to glob all the domains?
Ken, if you don't mind - could I use qmailadmin mailing list for this
project, or would you like to keep them separated?
Best regards
Michael Boman
PS
Expect to see something in the beginning of next week, planning to work
on this during the weekend.
DS
PPS
Ken, wouldn't it be time to clean out all the super-postmaster code
from qmailadmin? It's not in use, and you have indicated that you want a
separate program and therefor have no plans to use it at all. And by
removing the code we get a smaller binary AND less code to maintain.
This should result in fewer possibilities of security risks.
I'll send you the alfa's and beta's as soon as I made them work. And as
soon as my sourceforge account has been activated I'll keep my work
there.
DDS
--
W I Z O F F I C E . C O M L I M I T E D - Your Online Office Wizard
16 Tannery Lane, Crystal Time Building, #04-00, Singapore 347778
Voice : (+65) 844 3228 [extension 118] Fax : (+65) 842 7228
Pager : (+65) 92 93 29 49 ICQ : 5566009
Mobile: (+65) 98 55 17 34
eMail : mailto:[EMAIL PROTECTED] URL : http://www.wizoffice.com
S/MIME Cryptographic Signature
