on 8/20/01 7:50 PM, Dave VanAuken at [EMAIL PROTECTED] spake:

> just had a nasty problem, from what I can tell here is the chain of events.
> 
> - virtual user creates pop account POPUSER
> - virtual user then creates maillist POPUSER using [EMAIL PROTECTED] as the
> owner
> - POPUSER maillist files are put in ~/vpopmail/domains/virtual.com/POPUSER
> directory
> - virtual user deletes pop account POPUSER effectively taking the directory
> with
> him
> - links for the POPUSER mail list still exist pointing into limbo
> - qmail admin having all sorts of panic attacks for virtual.com domain
> (understandably)
> 
> should there not be some sort of check and balance against this...  as the
> sysadmin with wheel access it wasn't too difficult to determine what the
> problem
> was, but from a user perspective, it seems too easy to delete out of order and
> cripple the domain.
> 
> comments?

I'm not sure what versions you are running, but vadduser (called) lowers the
case for usernames.  Also, the mailing list directory is made upper case.
This in itself should prevent the scenario described above.

Incidentally, I've added a check (in qmailadmin) for the presence of the pop
user in check_local_user().  Before it only checked for
<domaindir>/.qmail-<user> and <domaindir>/<user>/ when testing if a local
user existed.  I've added it to my 0.76ac version.

Cheers,

Bill Shupp

Reply via email to