Peter Palmreuther wrote:
> What we need is why 'vchkpw' fails to write 'open-smtp' (or
> if it even tries to).
My < notes > are as follows:
16072 ktrace RET ktrace 0
16072 ktrace CALL execve(0xcfbfd8f2,0xcfbfd898,0xcfbfd8a8)
16072 ktrace NAMI "/home/vpopmail/bin/vchkpw"
16072 vchkpw EMUL "native"
16072 vchkpw RET execve 0
16072 vchkpw CALL open(0x10e5,0,0)
16072 vchkpw NAMI "/usr/libexec/ld.so"
16072 vchkpw RET open 4
16072 vchkpw CALL read(0x4,0xcfbfd93c,0x20)
16072 vchkpw GIO fd 4 read 32 bytes
"[EMAIL PROTECTED] \0\0\0\0\0\0\0\0\0\0
\0\0\0\0\0\0\0\0\0\0\0"
16072 vchkpw RET read 32/0x20
16072 vchkpw CALL mmap(0,0xf000,0x5,0x2,0x4,0,0,0)
16072 vchkpw RET mmap 1073819648/0x40013000
16072 vchkpw CALL mmap(0x40020000,0x2000,0x7,0x12,0x4,0,0xd000,0)
16072 vchkpw RET mmap 1073872896/0x40020000
16072 vchkpw CALL issetugid
16072 vchkpw RET issetugid 0
16072 vchkpw CALL __sysctl(0xcfbfd7ac,0x2,0x40021a08,0xcfbfd7a8,0,0)
16072 vchkpw RET __sysctl 0
16072 vchkpw CALL mmap(0,0x8000,0x3,0x1004,0xffffffff,0,0,0)
16072 vchkpw RET mmap 1073881088/0x40022000
16072 vchkpw CALL open(0x40014b74,0,0)
16072 vchkpw NAMI "/var/run/ld.so.hints"
16072 vchkpw RET open 5
16072 vchkpw CALL fstat(0x5,0xcfbfd754)
16072 vchkpw RET fstat 0
16072 vchkpw CALL mmap(0,0x1bcb,0x1,0x4,0x5,0,0,0)
16072 vchkpw RET mmap 1073913856/0x4002a000
16072 vchkpw CALL open(0x4002b093,0,0)
16072 vchkpw NAMI "/usr/lib/libc.so.29.0"
16072 vchkpw RET open 6
16072 vchkpw CALL read(0x6,0xcfbfd834,0x20)
16072 vchkpw GIO fd 6 read 32 bytes
"[EMAIL PROTECTED]
\0\0\0\0\0\0\0\0\0\0\0"
16072 vchkpw RET read 32/0x20
16072 vchkpw CALL mmap(0,0xbd6f0,0x5,0x4,0x6,0,0,0)
16072 vchkpw RET mmap 1073922048/0x4002c000
16072 vchkpw CALL mprotect(0x400b2000,0x9000,0x7)
16072 vchkpw RET mprotect 0
16072 vchkpw CALL mmap(0x400bb000,0x2e6f0,0x3,0x1014,0xffffffff,0,0,0)
16072 vchkpw RET mmap 1074507776/0x400bb000
16072 vchkpw CALL close(0x6)
16072 vchkpw RET close 0
16072 vchkpw CALL __sysctl(0xcfbfd75c,0x2,0x145d0,0xcfbfd758,0,0)
16072 vchkpw RET __sysctl 0
16072 vchkpw CALL __sysctl(0xcfbfd75c,0x2,0x145d4,0xcfbfd758,0,0)
16072 vchkpw RET __sysctl 0
16072 vchkpw CALL __sysctl(0xcfbfd75c,0x2,0x145d8,0xcfbfd758,0,0)
16072 vchkpw RET __sysctl 0
16072 vchkpw CALL __sysctl(0xcfbfd75c,0x2,0x145dc,0xcfbfd758,0,0)
16072 vchkpw RET __sysctl 0
16072 vchkpw CALL __sysctl(0xcfbfd75c,0x2,0x145e0,0xcfbfd758,0,0)
16072 vchkpw RET __sysctl 0
16072 vchkpw CALL __sysctl(0xcfbfd75c,0x2,0x145e4,0xcfbfd758,0,0)
16072 vchkpw RET __sysctl 0
16072 vchkpw CALL __sysctl(0xcfbfd75c,0x2,0x145e8,0xcfbfd758,0,0)
16072 vchkpw RET __sysctl 0
16072 vchkpw CALL __sysctl(0xcfbfd75c,0x2,0x145ec,0xcfbfd758,0,0)
16072 vchkpw RET __sysctl 0
16072 vchkpw CALL munmap(0x4002a000,0x1bcb)
16072 vchkpw RET munmap 0
16072 vchkpw CALL close(0x5)
16072 vchkpw RET close 0
16072 vchkpw CALL close(0x4)
16072 vchkpw RET close 0
16072 vchkpw CALL __sysctl(0xcfbfd8e4,0x2,0x400e96e8,0xcfbfd8e0,0,0)
16072 vchkpw RET __sysctl 0
16072 vchkpw CALL readlink(0x400735f6,0xcfbfd83c,0x3f)
16072 vchkpw NAMI "/etc/malloc.conf"
16072 vchkpw RET readlink -1 errno 2 No such file or directory
< what's the malloc.conf file? >
16072 vchkpw CALL issetugid
16072 vchkpw RET issetugid 0
16072 vchkpw CALL mmap(0,0x1000,0x3,0x1002,0xffffffff,0,0,0)
16072 vchkpw RET mmap 1073913856/0x4002a000
16072 vchkpw CALL break(0x14f3c)
16072 vchkpw RET break 0
16072 vchkpw CALL break(0x14f3c)
16072 vchkpw RET break 0
16072 vchkpw CALL break(0x16000)
16072 vchkpw RET break 0
16072 vchkpw CALL break(0x16000)
16072 vchkpw RET break 0
16072 vchkpw CALL break(0x17000)
16072 vchkpw RET break 0
16072 vchkpw CALL mmap(0,0x1000,0x3,0x1002,0xffffffff,0,0,0)
16072 vchkpw RET mmap 1073917952/0x4002b000
16072 vchkpw CALL mprotect(0x4002b000,0x1000,0x1)
16072 vchkpw RET mprotect 0
16072 vchkpw CALL mprotect(0x4002b000,0x1000,0x3)
16072 vchkpw RET mprotect 0
16072 vchkpw CALL mprotect(0x4002b000,0x1000,0x1)
16072 vchkpw RET mprotect 0
16072 vchkpw CALL read(0x3,0x14d30,0x9b)
16072 vchkpw GIO fd 3 read 46 bytes
"[EMAIL PROTECTED]<[EMAIL PROTECTED]>\0"
16072 vchkpw RET read 46/0x2e
16072 vchkpw CALL read(0x3,0x14d5e,0x6d)
16072 vchkpw RET read 0
16072 vchkpw CALL close(0x3)
16072 vchkpw RET close 0
16072 vchkpw CALL mprotect(0x4002b000,0x1000,0x3)
16072 vchkpw RET mprotect 0
16072 vchkpw CALL mprotect(0x4002b000,0x1000,0x1)
16072 vchkpw RET mprotect 0
16072 vchkpw CALL open(0xcfbfd61c,0,0x1b6)
16072 vchkpw NAMI "/var/qmail/users/cdb"
16072 vchkpw RET open 3
16072 vchkpw CALL lseek(0x3,0,0x740,0,0)
16072 vchkpw RET lseek 1856/0x740
16072 vchkpw CALL read(0x3,0xcfbfd5c4,0x8)
16072 vchkpw GIO fd 3 read 8 bytes
"4
\0\0\^B\0\0\0"
16072 vchkpw RET read 8
16072 vchkpw CALL lseek(0x3,0,0xa3c,0,0)
16072 vchkpw RET lseek 2620/0xa3c
16072 vchkpw CALL read(0x3,0xcfbfd5c4,0x8)
16072 vchkpw GIO fd 3 read 8 bytes
"\M-hY\M-zE\0\b\0\0"
16072 vchkpw RET read 8
16072 vchkpw CALL lseek(0x3,0,0x800,0,0)
16072 vchkpw RET lseek 2048/0x800
16072 vchkpw CALL read(0x3,0xcfbfd5c4,0x8)
16072 vchkpw GIO fd 3 read 8 bytes
"
\0\0\0001\0\0\0"
16072 vchkpw RET read 8
16072 vchkpw CALL read(0x3,0xcfbfd55c,0xa)
16072 vchkpw GIO fd 3 read 10 bytes
"!nesys.it-"
16072 vchkpw RET read 10/0xa
16072 vchkpw CALL fstat(0x3,0xcfbfd4a0)
16072 vchkpw RET fstat 0
16072 vchkpw CALL break(0x17000)
16072 vchkpw RET break 0
16072 vchkpw CALL break(0x19000)
16072 vchkpw RET break 0
16072 vchkpw CALL mprotect(0x4002b000,0x1000,0x3)
16072 vchkpw RET mprotect 0
16072 vchkpw CALL mprotect(0x4002b000,0x1000,0x1)
16072 vchkpw RET mprotect 0
16072 vchkpw CALL read(0x3,0x17000,0x2000)
16072 vchkpw GIO fd 3 read 562 bytes
"nesys.it\089\089\0/home/vpopmail/domains/nesys.it\0-\0\f\0\0\0005\0\0\0!nes
ys.info-nesys.info\089\089\0/home/vp\
opmail/domains/nesys.info\0-\0\v\0\0\0003\0\0\0!nesys.biz-nesys.biz\089\089\
0/home/vpopmail/domains/nesys.biz\0\
-\0\^T\0\0\0E\0\0\0!labotte.ravenna.it-labotte.ravenna.it\089\089\0/home/vpo
pmail/domains/labotte.ravenna.it\0-\
\0\f\0\0\0005\0\0\0!ladyman.tv-ladyman.tv\089\089\0/home/vpopmail/domains/la
dyman.tv\0-\0\^N\0\0\09\0\0\0!inetm\
ark.net-inetmark.net\089\089\0/home/vpopmail/domains/inetmark.net\0-\0\0\0\0
\0\^A\0\0\0-\0\0\0\0\0\0\0\0\^DyI\
\^E\M^L\b\0\0\0\0\0\0\0\0\0\0\^E\^U\0\0\M-K
\0\0\0\0\0\0\0\0\0\0\^W!\M-#\^U3 \0\0\0\0\0\0\0\0\0\0;\
\M-_\M-J\M-b|
\0\0\0\0\0\0\0\0\0\0\M^[\M-+\a\M-.C\b\0\0\M-0\M^B\M-8I\M-R\b\0\0\0\0\0\0\0\0
\0\0\0\0\0\0\0\0\0\
\0\M-hY\M-zE\0\b\0\0"
< my domains >
16072 vchkpw RET read 562/0x232
16072 vchkpw CALL break(0x19000)
16072 vchkpw RET break 0
16072 vchkpw CALL break(0x1a000)
16072 vchkpw RET break 0
16072 vchkpw CALL close(0x3)
16072 vchkpw RET close 0
16072 vchkpw CALL geteuid
16072 vchkpw RET geteuid 89/0x59
16072 vchkpw CALL getpid
16072 vchkpw RET getpid 16072/0x3ec8
16072 vchkpw CALL open(0x13fd4,0,0x1b6)
16072 vchkpw NAMI "/home/vpopmail/domains/nesys.it/vpasswd.cdb"
16072 vchkpw RET open 3
16072 vchkpw CALL lseek(0x3,0,0x198,0,0)
16072 vchkpw RET lseek 408/0x198
16072 vchkpw CALL read(0x3,0xcfbfd824,0x8)
16072 vchkpw GIO fd 3 read 8 bytes
"5\^W\0\0\^B\0\0\0"
16072 vchkpw RET read 8
16072 vchkpw CALL lseek(0x3,0,0x173d,0,0)
16072 vchkpw RET lseek 5949/0x173d
16072 vchkpw CALL read(0x3,0xcfbfd824,0x8)
16072 vchkpw GIO fd 3 read 8 bytes
"3\M-/s|\M^B\^U\0\0"
16072 vchkpw RET read 8
16072 vchkpw CALL lseek(0x3,0,0x1582,0,0)
16072 vchkpw RET lseek 5506/0x1582
16072 vchkpw CALL read(0x3,0xcfbfd824,0x8)
16072 vchkpw GIO fd 3 read 8 bytes
"\^D\0\0\0Z\0\0\0"
16072 vchkpw RET read 8
16072 vchkpw CALL read(0x3,0xcfbfd7bc,0x4)
16072 vchkpw GIO fd 3 read 4 bytes
"test"
16072 vchkpw RET read 4
16072 vchkpw CALL fstat(0x3,0xcfbfd710)
16072 vchkpw RET fstat 0
16072 vchkpw CALL mprotect(0x4002b000,0x1000,0x3)
16072 vchkpw RET mprotect 0
16072 vchkpw CALL mprotect(0x4002b000,0x1000,0x1)
16072 vchkpw RET mprotect 0
16072 vchkpw CALL read(0x3,0x16000,0x2000)
16072 vchkpw GIO fd 3 read 839 bytes
"$1$49VYI$62tMz.raXMJhj.YYxmQx8/:1:0:Test:/home/vpopmail/domains/nesys.it/te
st:NOQUOTA:test\b\0\0\0t\0\0\0traini\
ng$1$G8UrJ$TExcn1dIDCiLxN3Gt5fzc/:1:0:Nesys Education
Center:/home/vpopmail/domains/nesys.it/training:NOQUOTA:x\
xxxxxxx
\0\0\0h\0\0\0webmaster$1$sTbHy$jxaJeKl6Em.ztyYQnTL6M/:1:0:Webmaster:/home/vp
opmail/domains/nesys.it/web\
master:NOQUOTA:xxxxxxxx\^A88T\M-&\^R\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\^E!
A\M-c\M-Y
\0\0\0\0\0\0\0\0\0\0
\M-C+'l\^V\0\0\^Q\M-*(\M^P\M-%\^O\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\^X\M-7
%Ne \0\0\0\
\0\0\0\0\0\0\0003\M-/s|[EMAIL PROTECTED]"
:2W\v\0\0\0\0\0\0\0\0\0\0GL\M^C\M^^\
\M-Y\f\0\0\0\0\0\0\0\0\0\0j\M-l\^\
\M-p\b\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0mY\M^G\v6\^N\0\0\0\0\0\0\0\0\0\0w\
M-QM\M-=\M-(\^N\0\0\0\0\0\0\0\0\0\0\
x\^Y0\v3\^P\0\0\M^An\M^A\M-g\M^G\^T\0\0\0\0\0\0\0\0\0\0\M^Ef\M^Z\M^S\M-1\^Q\
0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\
\M^F5=m\M-&\^P\0\0\0\0\0\0\0\0\0\0\M^W1\0O]
\0\0\M-$nY\0\M-G\r\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\M-%/\M-L\^_\M-h\^U\0\
[EMAIL PROTECTED]
\^R\0\0\0\0\0\0\0\0\0\0\M-.=W
c\f\0\0\0\0\0\0\0\0\0\0\M-A\M-QT\M-ML\r\0\0\0\0\0\0\0\0\0\0\M-H\^U\M^F\M-N.\
^Q\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\
\0\0\M-c\M-0;\M->
\^T\0\0\0\0\0\0\0\0\0\0\M-c*Yb-\^O\0\0\M-c\^By|\M^X\^S\0\0\M-e\^T\^^
x\b\0\0\M-e\M^L\M-o\M-l\M-[
\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\M-hw\M^G\v"\^S\0\0\0\0\
0\0\
\0\0\0\0\M-k\M-3q|\M-k\v\0\0\0\0\0\0\0\0\0\0\M-sa\M^G\v\^C\^U\0\0"
< I've xxxxxxxx the passwords >
16072 vchkpw RET read 839/0x347
16072 vchkpw CALL close(0x3)
16072 vchkpw RET close 0
16072 vchkpw CALL open(0xcfbfd5bc,0,0x1b6)
16072 vchkpw NAMI "/home/vpopmail/domains/nesys.it/.qmailadmin-limits"
16072 vchkpw RET open 3
16072 vchkpw CALL fstat(0x3,0xcfbfd320)
16072 vchkpw RET fstat 0
16072 vchkpw CALL mprotect(0x4002b000,0x1000,0x3)
16072 vchkpw RET mprotect 0
16072 vchkpw CALL mprotect(0x4002b000,0x1000,0x1)
16072 vchkpw RET mprotect 0
16072 vchkpw CALL read(0x3,0x16000,0x2000)
16072 vchkpw GIO fd 3 read 89 bytes
"maxpopaccounts: 100
maxaliases: 0
maxforwards: 0
maxautoresponders: 0
maxmailinglists: 0
"
16072 vchkpw RET read 89/0x59
16072 vchkpw CALL read(0x3,0x16000,0x2000)
16072 vchkpw RET read 0
16072 vchkpw CALL close(0x3)
16072 vchkpw RET close 0
16072 vchkpw CALL chown(0xcfbfd5bc,0x59,0x59)
16072 vchkpw NAMI "/home/vpopmail/domains/nesys.it/.qmailadmin-limits"
16072 vchkpw RET chown 0
16072 vchkpw CALL chmod(0xcfbfd5bc,0x180)
16072 vchkpw NAMI "/home/vpopmail/domains/nesys.it/.qmailadmin-limits"
16072 vchkpw RET chmod 0
16072 vchkpw CALL geteuid
16072 vchkpw RET geteuid 89/0x59
16072 vchkpw CALL getpid
16072 vchkpw RET getpid 16072/0x3ec8
16072 vchkpw CALL open(0x13fd4,0,0x1b6)
16072 vchkpw NAMI "/home/vpopmail/domains/nesys.it/vpasswd.cdb"
16072 vchkpw RET open 3
16072 vchkpw CALL lseek(0x3,0,0x198,0,0)
16072 vchkpw RET lseek 408/0x198
16072 vchkpw CALL read(0x3,0xcfbfd7b4,0x8)
16072 vchkpw GIO fd 3 read 8 bytes
"5\^W\0\0\^B\0\0\0"
16072 vchkpw RET read 8
16072 vchkpw CALL lseek(0x3,0,0x173d,0,0)
16072 vchkpw RET lseek 5949/0x173d
16072 vchkpw CALL read(0x3,0xcfbfd7b4,0x8)
16072 vchkpw GIO fd 3 read 8 bytes
"3\M-/s|\M^B\^U\0\0"
16072 vchkpw RET read 8
16072 vchkpw CALL lseek(0x3,0,0x1582,0,0)
16072 vchkpw RET lseek 5506/0x1582
16072 vchkpw CALL read(0x3,0xcfbfd7b4,0x8)
16072 vchkpw GIO fd 3 read 8 bytes
"\^D\0\0\0Z\0\0\0"
16072 vchkpw RET read 8
16072 vchkpw CALL read(0x3,0xcfbfd74c,0x4)
16072 vchkpw GIO fd 3 read 4 bytes
"test"
16072 vchkpw RET read 4
16072 vchkpw CALL fstat(0x3,0xcfbfd6a0)
16072 vchkpw RET fstat 0
16072 vchkpw CALL mprotect(0x4002b000,0x1000,0x3)
16072 vchkpw RET mprotect 0
16072 vchkpw CALL mprotect(0x4002b000,0x1000,0x1)
16072 vchkpw RET mprotect 0
16072 vchkpw CALL read(0x3,0x16000,0x2000)
16072 vchkpw GIO fd 3 read 839 bytes
"$1$49VYI$62tMz.raXMJhj.YYxmQx8/:1:0:Test:/home/vpopmail/domains/nesys.it/te
st:NOQUOTA:test\b\0\0\0t\0\0\0traini\
ng$1$G8UrJ$TExcn1dIDCiLxN3Gt5fzc/:1:0:Nesys Education
Center:/home/vpopmail/domains/nesys.it/training:NOQUOTA:x\
xxxxxxx
\0\0\0h\0\0\0webmaster$1$sTbHy$jxaJeKl6Em.ztyYQnTL6M/:1:0:Webmaster:/home/vp
opmail/domains/nesys.it/web\
master:NOQUOTA:xxxxxxxx\^A88T\M-&\^R\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\^E!
A\M-c\M-Y
\0\0\0\0\0\0\0\0\0\0
\M-C+'l\^V\0\0\^Q\M-*(\M^P\M-%\^O\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\^X\M-7
%Ne \0\0\0\
\0\0\0\0\0\0\0003\M-/s|[EMAIL PROTECTED]"
:2W\v\0\0\0\0\0\0\0\0\0\0GL\M^C\M^^\
\M-Y\f\0\0\0\0\0\0\0\0\0\0j\M-l\^\
\M-p\b\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0mY\M^G\v6\^N\0\0\0\0\0\0\0\0\0\0w\
M-QM\M-=\M-(\^N\0\0\0\0\0\0\0\0\0\0\
x\^Y0\v3\^P\0\0\M^An\M^A\M-g\M^G\^T\0\0\0\0\0\0\0\0\0\0\M^Ef\M^Z\M^S\M-1\^Q\
0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\
\M^F5=m\M-&\^P\0\0\0\0\0\0\0\0\0\0\M^W1\0O]
\0\0\M-$nY\0\M-G\r\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\M-%/\M-L\^_\M-h\^U\0\
[EMAIL PROTECTED]
\^R\0\0\0\0\0\0\0\0\0\0\M-.=W
c\f\0\0\0\0\0\0\0\0\0\0\M-A\M-QT\M-ML\r\0\0\0\0\0\0\0\0\0\0\M-H\^U\M^F\M-N.\
^Q\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\
\0\0\M-c\M-0;\M->
\^T\0\0\0\0\0\0\0\0\0\0\M-c*Yb-\^O\0\0\M-c\^By|\M^X\^S\0\0\M-e\^T\^^
x\b\0\0\M-e\M^L\M-o\M-l\M-[
\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\M-hw\M^G\v"\^S\0\0\0\0\
0\0\
\0\0\0\0\M-k\M-3q|\M-k\v\0\0\0\0\0\0\0\0\0\0\M-sa\M^G\v\^C\^U\0\0"
< I've xxxxxxxx the passwords >
16072 vchkpw RET read 839/0x347
16072 vchkpw CALL close(0x3)
16072 vchkpw RET close 0
16072 vchkpw CALL open(0xcfbfd54c,0,0x1b6)
16072 vchkpw NAMI "/home/vpopmail/domains/nesys.it/.qmailadmin-limits"
16072 vchkpw RET open 3
16072 vchkpw CALL fstat(0x3,0xcfbfd2b0)
16072 vchkpw RET fstat 0
16072 vchkpw CALL mprotect(0x4002b000,0x1000,0x3)
16072 vchkpw RET mprotect 0
16072 vchkpw CALL mprotect(0x4002b000,0x1000,0x1)
16072 vchkpw RET mprotect 0
16072 vchkpw CALL read(0x3,0x16000,0x2000)
16072 vchkpw GIO fd 3 read 89 bytes
"maxpopaccounts: 100
maxaliases: 0
maxforwards: 0
maxautoresponders: 0
maxmailinglists: 0
"
16072 vchkpw RET read 89/0x59
16072 vchkpw CALL read(0x3,0x16000,0x2000)
16072 vchkpw RET read 0
16072 vchkpw CALL close(0x3)
16072 vchkpw RET close 0
16072 vchkpw CALL chown(0xcfbfd54c,0x59,0x59)
16072 vchkpw NAMI "/home/vpopmail/domains/nesys.it/.qmailadmin-limits"
16072 vchkpw RET chown 0
16072 vchkpw CALL chmod(0xcfbfd54c,0x180)
16072 vchkpw NAMI "/home/vpopmail/domains/nesys.it/.qmailadmin-limits"
16072 vchkpw RET chmod 0
16072 vchkpw CALL open(0x16000,0x602,0x1b6)
16072 vchkpw NAMI "/home/vpopmail/domains/nesys.it/test/lastauth"
16072 vchkpw RET open 3
16072 vchkpw CALL fstat(0x3,0xcfbfd530)
16072 vchkpw RET fstat 0
16072 vchkpw CALL mprotect(0x4002b000,0x1000,0x3)
16072 vchkpw RET mprotect 0
16072 vchkpw CALL mprotect(0x4002b000,0x1000,0x1)
16072 vchkpw RET mprotect 0
16072 vchkpw CALL close(0x3)
16072 vchkpw RET close 0
16072 vchkpw CALL chown(0x16000,0x59,0x59)
16072 vchkpw NAMI "/home/vpopmail/domains/nesys.it/test/lastauth"
16072 vchkpw RET chown 0
16072 vchkpw CALL gettimeofday(0xcfbfd5a8,0)
16072 vchkpw RET gettimeofday 0
16072 vchkpw CALL open(0x833c,0x602,0x1b6)
16072 vchkpw NAMI "/home/vpopmail/etc/open-smtp.lock"
16072 vchkpw RET open -1 errno 13 Permission denied
< probably the problem is here?
-rw-r--r-- 1 vpopmail vchkpw 0 Jan 15 15:40 open-smtp
-rw-r--r-- 1 root wheel 0 Jan 15 01:22 open-smtp.lock
What's open-smtp.lock file ? >
16072 vchkpw CALL setgid(0x59)
16072 vchkpw RET setgid 0
16072 vchkpw CALL setuid(0x59)
16072 vchkpw RET setuid 0
16072 vchkpw CALL chdir(0x12c22)
16072 vchkpw NAMI "/home/vpopmail/domains/nesys.it/test"
16072 vchkpw RET chdir 0
16072 vchkpw CALL close(0xffffffff)
16072 vchkpw RET close -1 errno 9 Bad file descriptor
< another problem? >
16072 vchkpw CALL execve(0xcfbfd9ee,0xcfbfd998,0x16000)
16072 vchkpw NAMI "/var/qmail/bin/qmail-pop3d"
16072 qmail-pop3d EMUL "native"
16072 qmail-pop3d RET execve 0
16072 qmail-pop3d CALL open(0x10e5,0,0)
16072 qmail-pop3d NAMI "/usr/libexec/ld.so"
16072 qmail-pop3d RET open 3
16072 qmail-pop3d CALL read(0x3,0xcfbfd954,0x20)
16072 qmail-pop3d GIO fd 3 read 32 bytes
"[EMAIL PROTECTED] \0\0\0\0\0\0\0\0\0\0
\0\0\0\0\0\0\0\0\0\0\0"
16072 qmail-pop3d RET read 32/0x20
16072 qmail-pop3d CALL mmap(0,0xf000,0x5,0x2,0x3,0,0,0)
16072 qmail-pop3d RET mmap 1073766400/0x40006000
16072 qmail-pop3d CALL mmap(0x40013000,0x2000,0x7,0x12,0x3,0,0xd000,0)
16072 qmail-pop3d RET mmap 1073819648/0x40013000
16072 qmail-pop3d CALL issetugid
16072 qmail-pop3d RET issetugid 0
16072 qmail-pop3d CALL __sysctl(0xcfbfd7c4,0x2,0x40014a08,0xcfbfd7c0,0,0)
16072 qmail-pop3d RET __sysctl 0
16072 qmail-pop3d CALL mmap(0,0x8000,0x3,0x1004,0xffffffff,0,0,0)
16072 qmail-pop3d RET mmap 1073827840/0x40015000
16072 qmail-pop3d CALL open(0x40007b74,0,0)
16072 qmail-pop3d NAMI "/var/run/ld.so.hints"
16072 qmail-pop3d RET open 4
16072 qmail-pop3d CALL fstat(0x4,0xcfbfd76c)
16072 qmail-pop3d RET fstat 0
16072 qmail-pop3d CALL mmap(0,0x1bcb,0x1,0x4,0x4,0,0,0)
16072 qmail-pop3d RET mmap 1073860608/0x4001d000
16072 qmail-pop3d CALL open(0x4001e093,0,0)
16072 qmail-pop3d NAMI "/usr/lib/libc.so.29.0"
16072 qmail-pop3d RET open 5
16072 qmail-pop3d CALL read(0x5,0xcfbfd84c,0x20)
16072 qmail-pop3d GIO fd 5 read 32 bytes
"[EMAIL PROTECTED]
\0\0\0\0\0\0\0\0\0\0\0"
16072 qmail-pop3d RET read 32/0x20
16072 qmail-pop3d CALL mmap(0,0xbd6f0,0x5,0x4,0x5,0,0,0)
16072 qmail-pop3d RET mmap 1073868800/0x4001f000
16072 qmail-pop3d CALL mprotect(0x400a5000,0x9000,0x7)
16072 qmail-pop3d RET mprotect 0
16072 qmail-pop3d CALL
mmap(0x400ae000,0x2e6f0,0x3,0x1014,0xffffffff,0,0,0)
16072 qmail-pop3d RET mmap 1074454528/0x400ae000
16072 qmail-pop3d CALL close(0x5)
16072 qmail-pop3d RET close 0
16072 qmail-pop3d CALL __sysctl(0xcfbfd774,0x2,0x400acb6c,0xcfbfd770,0,0)
16072 qmail-pop3d RET __sysctl 0
16072 qmail-pop3d CALL __sysctl(0xcfbfd774,0x2,0x400acb70,0xcfbfd770,0,0)
16072 qmail-pop3d RET __sysctl 0
16072 qmail-pop3d CALL __sysctl(0xcfbfd774,0x2,0x400acb74,0xcfbfd770,0,0)
16072 qmail-pop3d RET __sysctl 0
16072 qmail-pop3d CALL __sysctl(0xcfbfd774,0x2,0x400acb78,0xcfbfd770,0,0)
16072 qmail-pop3d RET __sysctl 0
16072 qmail-pop3d CALL __sysctl(0xcfbfd774,0x2,0x400acb7c,0xcfbfd770,0,0)
16072 qmail-pop3d RET __sysctl 0
16072 qmail-pop3d CALL __sysctl(0xcfbfd774,0x2,0x400acb80,0xcfbfd770,0,0)
16072 qmail-pop3d RET __sysctl 0
16072 qmail-pop3d CALL __sysctl(0xcfbfd774,0x2,0x400acb84,0xcfbfd770,0,0)
16072 qmail-pop3d RET __sysctl 0
16072 qmail-pop3d CALL __sysctl(0xcfbfd774,0x2,0x400acb88,0xcfbfd770,0,0)
16072 qmail-pop3d RET __sysctl 0
16072 qmail-pop3d CALL munmap(0x4001d000,0x1bcb)
16072 qmail-pop3d RET munmap 0
16072 qmail-pop3d CALL close(0x4)
16072 qmail-pop3d RET close 0
16072 qmail-pop3d CALL close(0x3)
16072 qmail-pop3d RET close 0
16072 qmail-pop3d CALL __sysctl(0xcfbfd8fc,0x2,0x400dc6e8,0xcfbfd8f8,0,0)
16072 qmail-pop3d RET __sysctl 0
16072 qmail-pop3d CALL readlink(0x400665f6,0xcfbfd854,0x3f)
16072 qmail-pop3d NAMI "/etc/malloc.conf"
16072 qmail-pop3d RET readlink -1 errno 2 No such file or directory
< always the malloc.conf file. I haven't >
16072 qmail-pop3d CALL issetugid
16072 qmail-pop3d RET issetugid 0
16072 qmail-pop3d CALL mmap(0,0x1000,0x3,0x1002,0xffffffff,0,0,0)
16072 qmail-pop3d RET mmap 1073860608/0x4001d000
16072 qmail-pop3d CALL break(0x6cc8)
16072 qmail-pop3d RET break 0
16072 qmail-pop3d CALL break(0x6cc8)
16072 qmail-pop3d RET break 0
16072 qmail-pop3d CALL break(0x8000)
16072 qmail-pop3d RET break 0
16072 qmail-pop3d CALL break(0x8000)
16072 qmail-pop3d RET break 0
16072 qmail-pop3d CALL break(0x9000)
16072 qmail-pop3d RET break 0
16072 qmail-pop3d CALL mmap(0,0x1000,0x3,0x1002,0xffffffff,0,0,0)
16072 qmail-pop3d RET mmap 1073864704/0x4001e000
16072 qmail-pop3d CALL mprotect(0x4001e000,0x1000,0x1)
16072 qmail-pop3d RET mprotect 0
16072 qmail-pop3d CALL mprotect(0x4001e000,0x1000,0x3)
16072 qmail-pop3d RET mprotect 0
16072 qmail-pop3d CALL mprotect(0x4001e000,0x1000,0x1)
16072 qmail-pop3d RET mprotect 0
16072 qmail-pop3d CALL sigaction(0xe,0xcfbfd90c,0)
16072 qmail-pop3d RET sigaction 0
16072 qmail-pop3d CALL sigaction(0xd,0xcfbfd90c,0)
16072 qmail-pop3d RET sigaction 0
16072 qmail-pop3d CALL chdir(0xcfbfda13)
16072 qmail-pop3d NAMI "Maildir"
16072 qmail-pop3d RET chdir 0
16072 qmail-pop3d CALL gettimeofday(0xcfbfd800,0)
16072 qmail-pop3d RET gettimeofday 0
16072 qmail-pop3d CALL open(0x264d,0x4,0)
16072 qmail-pop3d NAMI "tmp"
16072 qmail-pop3d RET open 3
16072 qmail-pop3d CALL fstat(0x3,0xcfbfd5dc)
16072 qmail-pop3d RET fstat 0
16072 qmail-pop3d CALL fcntl(0x3,0x2,0x1)
16072 qmail-pop3d RET fcntl 0
16072 qmail-pop3d CALL fstatfs(0x3,0xcfbfd63c)
16072 qmail-pop3d RET fstatfs 0
16072 qmail-pop3d CALL break(0x9000)
16072 qmail-pop3d RET break 0
16072 qmail-pop3d CALL break(0xa000)
16072 qmail-pop3d RET break 0
16072 qmail-pop3d CALL getdirentries(0x3,0x8000,0x1000,0x7054)
16072 qmail-pop3d RET getdirentries 512/0x200
16072 qmail-pop3d CALL getdirentries(0x3,0x8000,0x1000,0x7054)
16072 qmail-pop3d RET getdirentries 0
16072 qmail-pop3d CALL lseek(0x3,0,0,0,0)
16072 qmail-pop3d RET lseek 0
16072 qmail-pop3d CALL close(0x3)
16072 qmail-pop3d RET close 0
16072 qmail-pop3d CALL gettimeofday(0xcfbfd840,0)
16072 qmail-pop3d RET gettimeofday 0
16072 qmail-pop3d CALL open(0x289e,0x4,0)
16072 qmail-pop3d NAMI "new"
16072 qmail-pop3d RET open 3
16072 qmail-pop3d CALL fstat(0x3,0xcfbfd57c)
16072 qmail-pop3d RET fstat 0
16072 qmail-pop3d CALL fcntl(0x3,0x2,0x1)
16072 qmail-pop3d RET fcntl 0
16072 qmail-pop3d CALL fstatfs(0x3,0xcfbfd5dc)
16072 qmail-pop3d RET fstatfs 0
16072 qmail-pop3d CALL getdirentries(0x3,0x8000,0x1000,0x7054)
16072 qmail-pop3d RET getdirentries 512/0x200
16072 qmail-pop3d CALL stat(0x61fc,0xcfbfd7f8)
16072 qmail-pop3d NAMI
"new/1074177960.M303595P13440V00000007I00298BC8_0.observe.nesys.it,S=1214"
16072 qmail-pop3d RET stat 0
16072 qmail-pop3d CALL getdirentries(0x3,0x8000,0x1000,0x7054)
16072 qmail-pop3d RET getdirentries 0
16072 qmail-pop3d CALL lseek(0x3,0,0,0,0)
16072 qmail-pop3d RET lseek 0
16072 qmail-pop3d CALL close(0x3)
16072 qmail-pop3d RET close 0
16072 qmail-pop3d CALL open(0x28a2,0x4,0x10)
16072 qmail-pop3d NAMI "cur"
16072 qmail-pop3d RET open 3
16072 qmail-pop3d CALL fstat(0x3,0xcfbfd57c)
16072 qmail-pop3d RET fstat 0
16072 qmail-pop3d CALL fcntl(0x3,0x2,0x1)
16072 qmail-pop3d RET fcntl 0
16072 qmail-pop3d CALL fstatfs(0x3,0xcfbfd5dc)
16072 qmail-pop3d RET fstatfs 0
16072 qmail-pop3d CALL getdirentries(0x3,0x8000,0x1000,0x7054)
16072 qmail-pop3d RET getdirentries 512/0x200
16072 qmail-pop3d CALL getdirentries(0x3,0x8000,0x1000,0x7054)
16072 qmail-pop3d RET getdirentries 0
16072 qmail-pop3d CALL lseek(0x3,0,0,0,0)
16072 qmail-pop3d RET lseek 0
16072 qmail-pop3d CALL close(0x3)
16072 qmail-pop3d RET close 0
16072 qmail-pop3d CALL stat(0x61fc,0xcfbfd8e8)
16072 qmail-pop3d NAMI
"new/1074177960.M303595P13440V00000007I00298BC8_0.observe.nesys.it,S=1214"
16072 qmail-pop3d RET stat 0
16072 qmail-pop3d CALL select(0x2,0,0xcfbfd868,0,0xcfbfd860)
16072 qmail-pop3d RET select 1
16072 qmail-pop3d CALL write(0x1,0x64c0,0x6)
16072 qmail-pop3d GIO fd 1 wrote 6 bytes
"+OK \r
"
16072 qmail-pop3d RET write 6
16072 qmail-pop3d CALL select(0x1,0xcfbfd828,0,0,0xcfbfd820)
16072 qmail-pop3d RET select 1
16072 qmail-pop3d CALL read(0,0x6318,0x80)
16072 qmail-pop3d GIO fd 0 read 6 bytes
"STAT\r
"
16072 qmail-pop3d RET read 6
16072 qmail-pop3d CALL select(0x2,0,0xcfbfd818,0,0xcfbfd810)
16072 qmail-pop3d RET select 1
16072 qmail-pop3d CALL write(0x1,0x64c0,0xc)
16072 qmail-pop3d GIO fd 1 wrote 12 bytes
"+OK 1 1214\r
"
16072 qmail-pop3d RET write 12/0xc
16072 qmail-pop3d CALL select(0x1,0xcfbfd828,0,0,0xcfbfd820)
16072 qmail-pop3d RET select 1
16072 qmail-pop3d CALL read(0,0x6318,0x80)
16072 qmail-pop3d GIO fd 0 read 6 bytes
"UIDL\r
"
16072 qmail-pop3d RET read 6
16072 qmail-pop3d CALL select(0x2,0,0xcfbfd7e8,0,0xcfbfd7e0)
16072 qmail-pop3d RET select 1
16072 qmail-pop3d CALL write(0x1,0x64c0,0x6)
16072 qmail-pop3d GIO fd 1 wrote 6 bytes
"+OK \r
"
16072 qmail-pop3d RET write 6
16072 qmail-pop3d CALL select(0x2,0,0xcfbfd808,0,0xcfbfd800)
16072 qmail-pop3d RET select 1
16072 qmail-pop3d CALL write(0x1,0x64c0,0x4b)
16072 qmail-pop3d GIO fd 1 wrote 75 bytes
"1
1074177960.M303595P13440V00000007I00298BC8_0.observe.nesys.it,S=1214\r
.\r
"
16072 qmail-pop3d RET write 75/0x4b
16072 qmail-pop3d CALL select(0x1,0xcfbfd828,0,0,0xcfbfd820)
16072 qmail-pop3d RET select 1
16072 qmail-pop3d CALL read(0,0x6318,0x80)
16072 qmail-pop3d GIO fd 0 read 6 bytes
"LIST\r
"
16072 qmail-pop3d RET read 6
16072 qmail-pop3d CALL select(0x2,0,0xcfbfd7e8,0,0xcfbfd7e0)
16072 qmail-pop3d RET select 1
16072 qmail-pop3d CALL write(0x1,0x64c0,0x6)
16072 qmail-pop3d GIO fd 1 wrote 6 bytes
"+OK \r
"
16072 qmail-pop3d RET write 6
16072 qmail-pop3d CALL select(0x2,0,0xcfbfd808,0,0xcfbfd800)
16072 qmail-pop3d RET select 1
16072 qmail-pop3d CALL write(0x1,0x64c0,0xb)
16072 qmail-pop3d GIO fd 1 wrote 11 bytes
"1 1214\r
.\r
"
16072 qmail-pop3d RET write 11/0xb
16072 qmail-pop3d CALL select(0x1,0xcfbfd828,0,0,0xcfbfd820)
16072 qmail-pop3d RET select 1
16072 qmail-pop3d CALL read(0,0x6318,0x80)
16072 qmail-pop3d GIO fd 0 read 8 bytes
"RETR 1\r
"
16072 qmail-pop3d RET read 8
16072 qmail-pop3d CALL open(0x61fc,0x4,0x619c)
16072 qmail-pop3d NAMI
"new/1074177960.M303595P13440V00000007I00298BC8_0.observe.nesys.it,S=1214"
16072 qmail-pop3d RET open 3
16072 qmail-pop3d CALL select(0x2,0,0xcfbfd808,0,0xcfbfd800)
16072 qmail-pop3d RET select 1
16072 qmail-pop3d CALL write(0x1,0x64c0,0x6)
16072 qmail-pop3d GIO fd 1 wrote 6 bytes
"+OK \r
"
16072 qmail-pop3d RET write 6
16072 qmail-pop3d CALL read(0x3,0x68c8,0x400)
16072 qmail-pop3d GIO fd 3 read 1024 bytes
"Received: (qmail 28700 invoked by uid 1008); 15 Jan 2004 14:46:00
-0000
Received: from [EMAIL PROTECTED] by observe.nesys.it by uid 1001
with qmail-scanner-1.20
(f-prot: 4.0.0/3.13.3. spamassassin: 2.60.
Clear:RC:0(212.216.176.206):SA:0(0.0/6.9):.
Processed in 0.235665 secs); 15 Jan 2004 14:46:00 -0000
Received: from unknown (HELO vsmtp12.tin.it) (212.216.176.206)
by 0 with SMTP; 15 Jan 2004 14:45:59 -0000
Received: from Avatar (80.180.15.150) by vsmtp12.tin.it (7.0.019)
id 3FE0347C004E0626 for [EMAIL PROTECTED]; Thu, 15 Jan 2004
15:45:59 +0100
From: "Dott. Andrea Riela" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Subject: Test
Date: Thu, 15 Jan 2004 15:45:58 +0100
Message-ID: <[EMAIL PROTECTED]>
MIME-Version: 1.0
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook, Build 10.0.4510
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
Importance: Normal
X-Spam-C"
< message donwloaded >
16072 qmail-pop3d RET read 1024/0x400
16072 qmail-pop3d CALL select(0x2,0,0xcfbfd7b8,0,0xcfbfd7b0)
16072 qmail-pop3d RET select 1
16072 qmail-pop3d CALL write(0x1,0x64c0,0x3fa)
16072 qmail-pop3d GIO fd 1 wrote 1018 bytes
"Received: (qmail 28700 invoked by uid 1008); 15 Jan 2004 14:46:00
-0000\r
Received: from [EMAIL PROTECTED] by observe.nesys.it by uid 1001
with qmail-scanner-1.20 \r
(f-prot: 4.0.0/3.13.3. spamassassin: 2.60.
Clear:RC:0(212.216.176.206):SA:0(0.0/6.9):. \r
Processed in 0.235665 secs); 15 Jan 2004 14:46:00 -0000\r
Received: from unknown (HELO vsmtp12.tin.it) (212.216.176.206)\r
by 0 with SMTP; 15 Jan 2004 14:45:59 -0000\r
Received: from Avatar (80.180.15.150) by vsmtp12.tin.it (7.0.019)\r
id 3FE0347C004E0626 for [EMAIL PROTECTED]; Thu, 15 Jan 2004
15:45:59 +0100\r
From: "Dott. Andrea Riela" <[EMAIL PROTECTED]>\r
To: <[EMAIL PROTECTED]>\r
Subject: Test\r
Date: Thu, 15 Jan 2004 15:45:58 +0100\r
Message-ID: <[EMAIL PROTECTED]>\r
MIME-Version: 1.0\r
Content-Type: text/plain;\r
charset="us-ascii"\r
Content-Transfer-Encoding: 7bit\r
X-Priority: 3 (Normal)\r
X-MSMail-Priority: Normal\r
X-Mailer: Microsoft Outlook, Build 10.0.4510\r
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165\r
"
16072 qmail-pop3d RET write 1018/0x3fa
16072 qmail-pop3d CALL read(0x3,0x68c8,0x400)
16072 qmail-pop3d GIO fd 3 read 190 bytes
"hecker-Version: SpamAssassin 2.60 (1.212-2003-09-23-exp) on
observe.nesys.it
X-Spam-Level:
X-Spam-Status: No, hits=0.0 required=6.9 tests=none autolearn=no
version=2.60
X-Spam-Report:
"
16072 qmail-pop3d RET read 190/0xbe
16072 qmail-pop3d CALL read(0x3,0x68c8,0x400)
16072 qmail-pop3d RET read 0
16072 qmail-pop3d CALL select(0x2,0,0xcfbfd7e8,0,0xcfbfd7e0)
16072 qmail-pop3d RET select 1
16072 qmail-pop3d CALL write(0x1,0x64c0,0xe6)
16072 qmail-pop3d GIO fd 1 wrote 230 bytes
"Importance: Normal\r
X-Spam-Checker-Version: SpamAssassin 2.60 (1.212-2003-09-23-exp) on
\r
observe.nesys.it\r
X-Spam-Level: \r
X-Spam-Status: No, hits=0.0 required=6.9 tests=none autolearn=no
version=2.60\r
X-Spam-Report: \r
\r
\r
\r
.\r
"
16072 qmail-pop3d RET write 230/0xe6
16072 qmail-pop3d CALL close(0x3)
16072 qmail-pop3d RET close 0
16072 qmail-pop3d CALL select(0x1,0xcfbfd828,0,0,0xcfbfd820)
16072 qmail-pop3d RET select 1
16072 qmail-pop3d CALL read(0,0x6318,0x80)
16072 qmail-pop3d GIO fd 0 read 8 bytes
"DELE 1\r
"
16072 qmail-pop3d RET read 8
16072 qmail-pop3d CALL select(0x2,0,0xcfbfd818,0,0xcfbfd810)
16072 qmail-pop3d RET select 1
16072 qmail-pop3d CALL write(0x1,0x64c0,0x6)
16072 qmail-pop3d GIO fd 1 wrote 6 bytes
"+OK \r
"
16072 qmail-pop3d RET write 6
16072 qmail-pop3d CALL select(0x1,0xcfbfd828,0,0,0xcfbfd820)
16072 qmail-pop3d RET select 1
16072 qmail-pop3d CALL read(0,0x6318,0x80)
16072 qmail-pop3d GIO fd 0 read 6 bytes
"QUIT\r
"
16072 qmail-pop3d RET read 6
16072 qmail-pop3d CALL unlink(0x61fc)
16072 qmail-pop3d NAMI
"new/1074177960.M303595P13440V00000007I00298BC8_0.observe.nesys.it,S=1214"
16072 qmail-pop3d RET unlink 0
16072 qmail-pop3d CALL select(0x2,0,0xcfbfd808,0,0xcfbfd800)
16072 qmail-pop3d RET select 1
16072 qmail-pop3d CALL write(0x1,0x64c0,0x6)
16072 qmail-pop3d GIO fd 1 wrote 6 bytes
"+OK \r
"
16072 qmail-pop3d RET write 6
16072 qmail-pop3d CALL exit(0)
Thanks for all
Regards
Andrea
