The qpopper list archive ending on 7 Sep 2000


Topics covered in this issue include:

  1. Re: poppassd with shadow support needed
       Richard J Palmer <richard at merula dot net>
       Wed, 30 Aug 2000 00:01:33 +0100
  2. Re: poppassd with shadow support needed
       Alan Brown <alan at manawatu.gen dot nz>
       Wed, 30 Aug 2000 18:09:27 +1200 (NZST)
  3. Re: poppassd with shadow support needed
       Luigi Casiraghi <Luigi.Casiraghi at weitnauer dot it>
       Wed, 30 Aug 2000 09:17:11 +0200
  4. Re: poppassd with shadow support needed
       Luigi Casiraghi <lcasi at compuserve dot com>
       Wed, 30 Aug 2000 09:07:28 +0200
  5. Re: poppassd with shadow support needed
       Alan Brown <alan at manawatu.gen dot nz>
       Wed, 30 Aug 2000 20:11:14 +1200 (NZST)
  6. Cleaning up the bulldb
       Jason Englander <jason at interl dot net>
       Wed, 30 Aug 2000 15:38:04 -0500 (CDT)
  7. qpopper 3.1b10x1/kerberosV
       Jeremy McLeod <jeremym at chroot dot net>
       Wed, 30 Aug 2000 18:23:01 -0400 (EDT)
  8. Re: qpopper 3.1b10x1/kerberosV
       Jeremy McLeod <jeremym at chroot dot net>
       Wed, 30 Aug 2000 18:28:47 -0400 (EDT)
  9. Re: qpopper 3.1b10x1/kerberosV
       "Kenneth Porter" <shiva at well dot com>
       Wed, 30 Aug 2000 15:57:43 -0700
 10. Re: qpopper 3.1b10x1/kerberosV
       Jeremy McLeod <jeremym at chroot dot net>
       Wed, 30 Aug 2000 19:09:19 -0400 (EDT)
 11. Re: qpopper 3.1b10x1/kerberosV
       Qpopper Support <qpopper at qualcomm dot com>
       Wed, 30 Aug 2000 16:53:54 -0700
 12. Re: qpopper 3.1b10x1/kerberosV
       Jeremy McLeod <jeremym at chroot dot net>
       Wed, 30 Aug 2000 20:02:14 -0400 (EDT)
 13. Re: qpopper 3.1b10x1/kerberosV
       "Kenneth Porter" <shiva at well dot com>
       Wed, 30 Aug 2000 17:39:48 -0700
 14. question
       lemon_3 at 21cn dot com
       Thu, 31 Aug 2000 12:05:27 +0800 (CST)
 15. Re: question
       Hai Xu <hxu at ustc.edu dot cn>
       Thu, 31 Aug 2000 14:45:29 +0800 (CST)
 16. QPopper Compilation Problem on RH Linux 6.2
       Michael Rapp <mdrapp at coe.uh dot edu>
       Thu, 31 Aug 2000 14:16:14 -0500 (CDT)
 17. Re: QPopper Compilation Problem on RH Linux 6.2
       "Kenneth Porter" <shiva at well dot com>
       Thu, 31 Aug 2000 15:33:24 -0700
 18. memory leak?
       eric at telicsolutions dot net (Eric Krichbaum)
       Thu, 31 Aug 2000 20:54:22 -0400
 19. Qpopper and status of user accounts
       Yiannos Pitas <yiannos at ucy.ac dot cy>
       Fri, 01 Sep 2000 11:38:00 +0300
 20. Not qpopper related - eudora 4 question.
       Alan Brown <alan at manawatu.gen dot nz>
       Fri, 1 Sep 2000 22:35:44 +1200 (NZST)
 21. Re: Qpopper and status of user accounts
       Yiannos Pitas <yiannos at ucy.ac dot cy>
       Fri, 01 Sep 2000 14:13:22 +0300
 22. RE: QPopper Compilation Problem on RH Linux 6.2
       Michael Rapp <mdrapp at coe.uh dot edu>
       Fri, 1 Sep 2000 09:59:46 -0500 (CDT)
 23. Re: Not qpopper related - eudora 4 question.
       Qpopper Support <qpopper at qualcomm dot com>
       Fri, 1 Sep 2000 09:08:24 -0700
 24. Re: Not qpopper related - eudora 4 question.
       Alan Brown <alan at manawatu.gen dot nz>
       Sat, 2 Sep 2000 04:22:50 +1200 (NZST)
 25. Re: qpopper 3.1b10x1/kerberosV 
       Ken Hornstein <kenh at cmf.nrl.navy dot mil>
       Fri, 01 Sep 2000 14:18:49 -0400
 26. Possible bug in qpopper 3.1b9 ?
       Rodrigo Luiz Anami <rodrigoa at bestway.com dot br>
       Fri, 01 Sep 2000 15:51:42 -0300
 27. Re: Possible bug in qpopper 3.1b9 ?
       "Jeff A. Earickson" <jaearick at colby dot edu>
       Fri, 1 Sep 2000 15:18:49 -0400 (EDT)
 28. Re: Possible bug in qpopper 3.1b9 ?
       Qpopper Support <qpopper at qualcomm dot com>
       Fri, 1 Sep 2000 14:10:07 -0700
 29. RE: QPopper Compilation Problem on RH Linux 6.2
       "Kenneth Porter" <shiva at well dot com>
       Fri, 01 Sep 2000 15:20:17 -0700
 30. Re: Qpopper and status of user accounts
       Roy <garlic at garlic dot com>
       Sat, 02 Sep 2000 18:19:07 -0700
 31. qpopper newbie question
       "Troy, Frank" <ftroy at UU dot NET>
       Sat, 2 Sep 2000 23:37:34 -0400 
 32. Re: Qpopper and status of user accounts
       Qpopper Support <qpopper at qualcomm dot com>
       Sat, 2 Sep 2000 21:08:03 -0700
 33. Re: authentification and bulld failure
       Roy <garlic at garlic dot com>
       Sun, 03 Sep 2000 14:49:17 -0700
 34. Re: authentification and bulld failure
       Yiannos Pitas <yiannos at ucy.ac dot cy>
       Mon, 04 Sep 2000 08:19:02 +0300
 35. Qpopper 3.1b10 available
       Qpopper Support <qpopper at qualcomm dot com>
       Sun, 3 Sep 2000 22:57:56 -0700
 36. Re: Qpopper 3.1b10 available
       "Kenneth Porter" <shiva at well dot com>
       Mon, 04 Sep 2000 17:55:56 -0700
 37. Re: qpopper newbie question
       "Ed - Popper" <qman at brokendown dot net>
       Mon, 4 Sep 2000 17:50:59 -0700
 38. Qpopper, Pam and FreeBSD
       =?iso-8859-1?Q?Søren_Peter_Skou?= <sps at arrowhead dot dk>
       Tue, 5 Sep 2000 10:31:49 +0200
 39. Re: qpopper newbie question
       Miguel Ruiz <mruiz at holt.k12.mi dot us>
       Tue, 05 Sep 2000 08:14:18 -0400
 40. Re: qpopper newbie question
       Peter Evans <peter at gol dot com>
       Tue, 5 Sep 2000 21:29:53 +0900
 41. Re: Qpopper, Pam and FreeBSD
       Qpopper Support <qpopper at qualcomm dot com>
       Tue, 5 Sep 2000 10:30:58 -0700
 42. Re: Qpopper and status of user accounts
       Roy <garlic at garlic dot com>
       Tue, 05 Sep 2000 16:32:41 -0700
 43. Re: Qpopper and status of user accounts
       Qpopper Support <qpopper at qualcomm dot com>
       Tue, 5 Sep 2000 19:01:50 -0700
 44. Re: Qpopper and status of user accounts
       Yiannos Pitas <yiannos at ucy.ac dot cy>
       Wed, 06 Sep 2000 12:06:21 +0300
 45. Re: Qpopper and status of user accounts
       Qpopper Support <qpopper at qualcomm dot com>
       Wed, 6 Sep 2000 16:37:28 -0700
 46. Re: Qpopper and status of user accounts
       Yiannos Pitas <yiannos at ucy.ac dot cy>
       Thu, 07 Sep 2000 08:50:33 +0300
 47. Qpopper, Pam & Mysql  revisited
       =?iso-8859-1?Q?Søren_Peter_Skou?= <sps at arrowhead dot dk>
       Thu, 7 Sep 2000 16:33:17 +0200
 48. Re: Qpopper, Pam & Mysql  revisited
       mike miller <mikem at ndtel dot com>
       Thu, 07 Sep 2000 09:55:48 -0500
 49. Re: Qpopper, Pam & Mysql  revisited
       Fergal Daly <fergal at esatclear dot ie>
       Thu, 07 Sep 2000 17:48:15 +0100
 50. Re: Qpopper, Pam & Mysql  revisited
       Jack Sasportas <jack at innovativeinternet dot com>
       Thu, 07 Sep 2000 13:06:27 -0400

Date: Wed, 30 Aug 2000 00:01:33 +0100
From: Richard J Palmer <richard at merula dot net>
Subject: Re: poppassd with shadow support needed

I modified a version of poppassd here that I've tweaked to support
shadow passwords. No guarantees but you're welcome to a copy if you
want it.

Richard
-- 
Richard Palmer
Merula Limited
http://www.merula.net


Date: Wed, 30 Aug 2000 18:09:27 +1200 (NZST)
From: Alan Brown <alan at manawatu.gen dot nz>
Subject: Re: poppassd with shadow support needed

On Wed, 30 Aug 2000, Richard J Palmer wrote:

> I modified a version of poppassd here that I've tweaked to support
> shadow passwords. No guarantees but you're welcome to a copy if you
> want it.

Same here, submitted back to Qualcomm a couple of years ago.

AB


Date: Wed, 30 Aug 2000 09:17:11 +0200
From: Luigi Casiraghi <Luigi.Casiraghi at weitnauer dot it>
Subject: Re: poppassd with shadow support needed

Hi Richard,

If is not a problem I will appreciate if you send me a copy.
I asked also to Alan for a copy of his modified poppassd so I will be able also
to match the code.

thanks in advance,

Luigi Casiraghi
luigi.casiraghi at weitnauer dot it

At 00.01 30/08/00 +0100, you wrote:
>I modified a version of poppassd here that I've tweaked to support
>shadow passwords. No guarantees but you're welcome to a copy if you
>want it.
>
>Richard
>--
>Richard Palmer
>Merula Limited
>http://www.merula.net


Date: Wed, 30 Aug 2000 09:07:28 +0200
From: Luigi Casiraghi <lcasi at compuserve dot com>
Subject: Re: poppassd with shadow support needed

At 18.09 30/08/00 +1200, you wrote:
>
>On Wed, 30 Aug 2000, Richard J Palmer wrote:
>
> > I modified a version of poppassd here that I've tweaked to support
> > shadow passwords. No guarantees but you're welcome to a copy if you
> > want it.
>
>Same here, submitted back to Qualcomm a couple of years ago.
>
>AB

Hi Alan, I think they never uploaded your version or I'm not able to find it
on their servers.
If I don't ask too much can you please send me a copy ?
I'm going to ask the same also to Richard just to see match the solution.

bye,

thanks in advance.

P.S: Other than standard passwd check there are other method to authenticate
people when checking mail. What is the most used method today ??. I hear
about database like mysql used for authentication, is it right ??.  If yes 
how does
it work the whole ?

Luigi Casiraghi
luigi.casiraghi at weitnauer dot it
IT



Date: Wed, 30 Aug 2000 20:11:14 +1200 (NZST)
From: Alan Brown <alan at manawatu.gen dot nz>
Subject: Re: poppassd with shadow support needed

On Wed, 30 Aug 2000, Luigi Casiraghi wrote:

> >Same here, submitted back to Qualcomm a couple of years ago.

> Hi Alan, I think they never uploaded your version or I'm not able to find it
> on their servers.

They never posted it.

> If I don't ask too much can you please send me a copy ?
> I'm going to ask the same also to Richard just to see match the solution.

http://homepages.manawatu.net.nz/~alanb/poppassd-manawatu.tar.gz

The original version is in ./poppassd and our hacked version is in
./poppassd/LINUX/

It also changes SAMBA passwords.

For both, it interfaces to passwd and smbpasswd.

The readme, dated 13 November 1997:
=========
This program has been hacked and slashed about a bit from the version
originally on ftp.qualcomm.com

It's optimised and tested for Linux (slackware 3.3, 2.0.30) 
along with Samba 1.9.19p2 compiled up with Encrypted lanman passwords.

The general idea is that when a user sets hir password, if this program is
called with the -s switch, it will run smbpasswd as root and synch up the
LANMAN password, should the main password be sucessfully changed. 

This reduces admin headaches at the expense of a slight drop in overall
system security. I feel it's tolerable in light of other precautions I
take to prevent non-local dialup connects to the server. (HINT: 
hosts.allow)  My users are able to access their web pages as a WFW (aka
CIFS or SMB) remote drive in order to facilitate easy updates. We spend an
inordinate amount of time handholding and it's hoped that by allowing the
mount, this will be reduced slightly.

NOTE: This runs passwd as a non-root user and has been modified to
recognise error messages saying that the new password is too
simple/similar, etc, so theoretically it shouldn't allow a luser to set
too dangerous a password. 

Max password length is set to 11 characters, mainly because I found that
xtacacsd 4.1.1 daemon I run only allows that many from the terminal
servers and I haven't had a chance to attack it yet. This is a compile
time option and should probably stay that way.

The program checks and blocks any attempt to change password for userIDs
under 1000. Again, this is a compile time option and is probably best that
way.

Although the Makfile installs this as /usr/sbin/poppassd, I renamed it to
in.epassd. The Official RFC 1700 designation for this service is EPASS and
I wanted it to conform to the naming conventions used for other services
in the Slackware Linux distribution. 

You will need to add the following lines to other config files:

/etc/services
epass           106/tcp         poppassd

/etc/inetd
epass   stream tcp nowait root /usr/sbin/tcpd in.epassd -p -s

/etc/hosts.allow
in.epassd : 127.0.0.1 .yourdomain ww.xx.yy.zz/aa.aa.aa.aa : keepalive
(the last part is your netblock/netmask)

/etc/hosts.deny
in.epassd : ALL


THIS FILE MUST BE RUN OUT OF A TCPWRAPPER!

Your security is SWISS CHEESE if you don't, as poppassd does no checking
of origin address. Do not let anyone outside your local network change
their passwords via this port. It's just too risky to allow.

Don't run this code until you're bloody sure you know how it works and
what it's capable of doing. I accidentally wiped /etc/passwd while
hacking at the original poppassd release on a Sun a few years ago...

Your milage may vary, no guarantees, etc. I didn't write most of the
code, merely poked at it and got a local volunteer to code the bits I
couldn't (which was 90% or so, I'm not a programmer) :-)


If it doesn't work, don't bug me - fix/improve it and submit it back to
Qualcomm. They seem to have become the default custodians of the code. 


Alan Brown, network admin, Manawatu Internet Services, New Zealand.
alan at manawatu.gen dot nz
=========



Date: Wed, 30 Aug 2000 15:38:04 -0500 (CDT)
From: Jason Englander <jason at interl dot net>
Subject: Cleaning up the bulldb

I've got it taken care of where I can clean up the old .popbull files
after qpopper has read them and added the count into the bulldb, but I
don't have any idea how to handle cleaning up the db of accounts that have
been removed.

Anyone have anything in place to do this?

I can probably do it with Perl's GDBM_File, but I would imagine I'll get
the same locking trouble that qpopper was/is having.  ...or even worse, if
GDBM_File doesn't lock it, I could see the bulldb becoming fried.

I'd just let it build up and not worry about accounts in it that no longer
exist, but when a customer signs up and wants a login name that was
formerly used, the new customer would get the old customer's bulletin
count.

I suppose I could just scrap the old bulletins and the bulldb before I
post a new bulletin...  right?

  Jason

-- 
Jason Englander <jason at interl dot net>
Systems Administrator - InterLink L.C.



Date: Wed, 30 Aug 2000 18:23:01 -0400 (EDT)
From: Jeremy McLeod <jeremym at chroot dot net>
Subject: qpopper 3.1b10x1/kerberosV

Hi folks,

I've got qpopper 3.1b10x1 compiled successfully on FreeBSD 4.1 with
Kerberos V support. I've got kuserok() and ksockinst() enabled as
well. popper is in /etc/inetd.conf with the line:

pop3 stream tcp nowait root /usr/local/lib/popper qpopper -s -k -K pop3

Everything seems to be fine, until I actually try to authenticate through
the pop server:

bash# telnet localhost 110
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
user jeremy
-ERR recvauth failed--Bad sendauth version was sent
Connection closed by foreign host.
bash#

relevant snippage from /var/log/maillog:

Aug 30 22:18:20 machine qpopper[3982]: (null) at localhost
(127.0.0.1): -ERR recvauth failed--Bad sendauth version was sent
[pop_init.c:290]
Aug 30 22:18:20 machine qpopper[3982]: localhost: recvauth failed--Bad
sendauth version was sent [pop_init.c:292]

When I tail the kdc logs on the kdc, I see no authentication attempts from
the pop server, which leads me to believe that popper doesn't know where
to send authentication requests. Is this the case? Has anyone encountered
this problem before? Is there somewhere special I need to tell qpopper
where to look for kerberos kdc and realm information?

If anyone needs further info or context, just let me know.

Cheers,

-jeremy
--
QOTD:
	"If you keep an open mind people will throw a lot of garbage in it."


Date: Wed, 30 Aug 2000 18:28:47 -0400 (EDT)
From: Jeremy McLeod <jeremym at chroot dot net>
Subject: Re: qpopper 3.1b10x1/kerberosV

My apologies, it was acutally compiled on OpenBSD 2.7, not FreeBSD.

Auf Aug 30, 2000, an 18:23, Jeremy McLeod besagt dieses:

>Hi folks,
>
>I've got qpopper 3.1b10x1 compiled successfully on FreeBSD 4.1 with
>Kerberos V support. I've got kuserok() and ksockinst() enabled as
>well. popper is in /etc/inetd.conf with the line:
>
>pop3 stream tcp nowait root /usr/local/lib/popper qpopper -s -k -K pop3
>
>Everything seems to be fine, until I actually try to authenticate through
>the pop server:
>
>bash# telnet localhost 110
>Trying 127.0.0.1...
>Connected to localhost.
>Escape character is '^]'.
>user jeremy
>-ERR recvauth failed--Bad sendauth version was sent
>Connection closed by foreign host.
>bash#
>
>relevant snippage from /var/log/maillog:
>
>Aug 30 22:18:20 machine qpopper[3982]: (null) at localhost
>(127.0.0.1): -ERR recvauth failed--Bad sendauth version was sent
>[pop_init.c:290]
>Aug 30 22:18:20 machine qpopper[3982]: localhost: recvauth failed--Bad
>sendauth version was sent [pop_init.c:292]
>
>When I tail the kdc logs on the kdc, I see no authentication attempts from
>the pop server, which leads me to believe that popper doesn't know where
>to send authentication requests. Is this the case? Has anyone encountered
>this problem before? Is there somewhere special I need to tell qpopper
>where to look for kerberos kdc and realm information?
>
>If anyone needs further info or context, just let me know.
>
>Cheers,
>
>-jeremy
>--
>QOTD:
>	"If you keep an open mind people will throw a lot of garbage in it."
>

-jeremy
--
"I don't think so," said Ren'e Descartes.  Just then, he vanished.


From: "Kenneth Porter" <shiva at well dot com>
Date: Wed, 30 Aug 2000 15:57:43 -0700
Subject: Re: qpopper 3.1b10x1/kerberosV

On Wed, 30 Aug 2000 18:23:01 -0400 (EDT), Jeremy McLeod wrote:

>I've got qpopper 3.1b10x1 compiled successfully on FreeBSD 4.1 with
>Kerberos V support.

Is this a private release? I only see 3.1b9 on the FTP site.

Ken
mailto:shiva at well dot com
http://www.sewingwitch.com/ken/
http://www.harrybrowne2000.org/



Date: Wed, 30 Aug 2000 19:09:19 -0400 (EDT)
From: Jeremy McLeod <jeremym at chroot dot net>
Subject: Re: qpopper 3.1b10x1/kerberosV

It's in the xpopper/ directory.

Auf Aug 30, 2000, an 15:57, Kenneth Porter besagt dieses:

>On Wed, 30 Aug 2000 18:23:01 -0400 (EDT), Jeremy McLeod wrote:
>
>>I've got qpopper 3.1b10x1 compiled successfully on FreeBSD 4.1 with
>>Kerberos V support.
>
>Is this a private release? I only see 3.1b9 on the FTP site.
>
>Ken
>mailto:shiva at well dot com
>http://www.sewingwitch.com/ken/
>http://www.harrybrowne2000.org/
>
>

-jeremy
--
If you don't say anything, you won't be called on to repeat it.
		-- Calvin Coolidge


Date: Wed, 30 Aug 2000 16:53:54 -0700
From: Qpopper Support <qpopper at qualcomm dot com>
Subject: Re: qpopper 3.1b10x1/kerberosV

At 7:09 PM -0400 8/30/00, Jeremy McLeod wrote:

>  It's in the xpopper/ directory.

Files in the xpopper directory are generally only there for a short 
period of time.  When I am unable to reproduce something here, I 
may ask the person experiencing the problem to try a temp version 
of Qpopper and see if it fixes the problem.  These temp versions 
have an "x" suffix to the version, and are placed in the xpopper 
directory until I hear back.  Then they are deleted.

Date: Wed, 30 Aug 2000 20:02:14 -0400 (EDT)
From: Jeremy McLeod <jeremym at chroot dot net>
Subject: Re: qpopper 3.1b10x1/kerberosV

Auf Aug 30, 2000, an 16:53, Qpopper Support besagt dieses:

>At 7:09 PM -0400 8/30/00, Jeremy McLeod wrote:
>
>>  It's in the xpopper/ directory.
>
>Files in the xpopper directory are generally only there for a short 
>period of time.  When I am unable to reproduce something here, I 
>may ask the person experiencing the problem to try a temp version 
>of Qpopper and see if it fixes the problem.  These temp versions 
>have an "x" suffix to the version, and are placed in the xpopper 
>directory until I hear back.  Then they are deleted.

I tried using various other 3.1b versions as well, starting at 9 and going
on down. They all compiled fine(I had to change -lcrypto to -lk5crypto in
the Makefiles to get that to happen), and they all give me the same error
when I try to authenticate.

-jeremy
--
A lot of people I know believe in positive thinking, and so do I.  
I believe everything positively stinks.
-- Lew Col


From: "Kenneth Porter" <shiva at well dot com>
Date: Wed, 30 Aug 2000 17:39:48 -0700
Subject: Re: qpopper 3.1b10x1/kerberosV

On Wed, 30 Aug 2000 18:23:01 -0400 (EDT), Jeremy McLeod wrote:

>localhost: recvauth failed--Bad sendauth version was sent [pop_init.c:292]

The API that fails is krb5_compat_recvauth, which takes a long list of
parameters. I don't have Kerberos installed so I can't look it up, but
maybe the docs for that API will give some clue as to what parameter is
bad and you can look at pop_init.c to see where that param came from.

Ken
mailto:shiva at well dot com
http://www.sewingwitch.com/ken/
http://www.harrybrowne2000.org/



Date: Thu, 31 Aug 2000 12:05:27 +0800 (CST)
From: lemon_3 at 21cn dot com
Subject: question

 Hi,all
i modify my authencitate.c file in this way:
#define MAILSPOOLDIR "/var/mail/"
#define MAILSPOOLHOME "/Mailbox"
and
ln -s /export/home/user/Mailbox  /var/mail/user

i use m4 to make my sendmail.cf file,
in my *.mc file
i add FEATURE this way:
FEATURE(`local_procmail')
in ostype
define(`PROCMAIL_MAILER_PATH',/usr/bin/procmail)

the mail can be delivered to /export/home/user/Mailbox, but  Outlook Express5.0 can not get the mail from mailserver
WHY?
I once used qmail , Outlook Express can get mail from /export/home/user/Mailbox, 
does this can prove my pop3 server has no problem?

I use:   solaris7, sendmail8.9.3, procmail3.15, qpopper3.0, Outlook Express5.0

this maybe is not procmail  question ,but do help me

thanks very much


----------------------------------------------
ª²‚ ¼²ˆ 21CN µÁײ² ºœ¦µÕ„ http://www.21cn.com
Thank you for using 21cn.com Email system


Date: Thu, 31 Aug 2000 14:45:29 +0800 (CST)
From: Hai Xu <hxu at ustc.edu dot cn>
Subject: Re: question

Hi,

To deliever mail to $HOME/Mailbox, you should not change authencitate.c
All u should do is modify /etc/procmailrc. Add default entry:

DEFAULT=$HOME/Mailbox

Hazy

>  Hi,all
> i modify my authencitate.c file in this way:
> #define MAILSPOOLDIR "/var/mail/"
> #define MAILSPOOLHOME "/Mailbox"
> and
> ln -s /export/home/user/Mailbox  /var/mail/user
> 
> i use m4 to make my sendmail.cf file,
> in my *.mc file
> i add FEATURE this way:
> FEATURE(`local_procmail')
> in ostype
> define(`PROCMAIL_MAILER_PATH',/usr/bin/procmail)
> 
> the mail can be delivered to /export/home/user/Mailbox, but  Outlook Expr=
ess5.0 can not get the mail from mailserver
> WHY?
> I once used qmail , Outlook Express can get mail from /export/home/user/M=
ailbox, 
> does this can prove my pop3 server has no problem?
> 
> I use:   solaris7, sendmail8.9.3, procmail3.15, qpopper3.0, Outlook Expre=
ss5.0
> 
> this maybe is not procmail  question ,but do help me
> 
> thanks very much
> 
> 
> ----------------------------------------------
> »¶Ó­Ê¹Óà 21CN µç×ÓÓʼþϵͳ http:/=
/www.21cn.com
> Thank you for using 21cn.com Email system
> 
> 


Date: Thu, 31 Aug 2000 14:16:14 -0500 (CDT)
From: Michael Rapp <mdrapp at coe.uh dot edu>
Subject: QPopper Compilation Problem on RH Linux 6.2

Greetings all,

I am fairly new Linux system administration and I am having trouble
compiling QPopper.

Running "./configure --enable-specialauth" works fine; however, make seems
to die on me.  Here is the make transcript:
[root@coe qpopper3.0 dot 2]# make
cd ./popper  && make all
make[1]: Entering directory `/usr/src/qpopper3.0.2/popper'
gcc -c -I.. -I.. -I. -I../mmangle -I../common \
-g -O2 -fpcc-struct-return  -DHAVE_CONFIG_H  -DLINUX -DUNIX pop_dele.c -o
pop_dele.o
In file included from /usr/include/bits/posix1_lim.h:126,
                 from /usr/include/limits.h:30,
                 from
/usr/lib/gcc-lib/i386-redhat-linux/egcs-2.91.66/include/limits.h:117,
                 from
/usr/lib/gcc-lib/i386-redhat-linux/egcs-2.91.66/include/syslimits.h:7,
                 from
/usr/lib/gcc-lib/i386-redhat-linux/egcs-2.91.66/include/limits.h:11,
                 from /usr/include/bits/socket.h:31,
                 from /usr/include/sys/socket.h:34,
                 from popper.h:50,
                 from pop_dele.c:24:
/usr/include/bits/local_lim.h:27: linux/limits.h: No such file or
directory
In file included from /usr/include/sys/socket.h:34,
                 from popper.h:50,
                 from pop_dele.c:24:
/usr/include/bits/socket.h:295: asm/socket.h: No such file or directory
make[1]: *** [pop_dele.o] Error 1
make[1]: Leaving directory `/usr/src/qpopper3.0.2/popper'
make: *** [popper_server] Error 2
[root@coe qpopper3.0 dot 2]#

I've checked and I have the following RPMs installed: egcs, cpp, binutils,
kernel-source, glibc-devel, and make.  I am running Red Hat Linux 6.2,
Kernel 2.2.16-3smp.

Any suggestions?

+========================================================+
| /*/-=[ Michael Rapp ]=-/*/     Technology Specialist   |
|  Center for Information Technology in Education (CITE) |
|    College of Education        University of Houston   |
+========================================================+


From: "Kenneth Porter" <shiva at well dot com>
Date: Thu, 31 Aug 2000 15:33:24 -0700
Subject: Re: QPopper Compilation Problem on RH Linux 6.2

On Thu, 31 Aug 2000 14:16:14 -0500 (CDT), Michael Rapp wrote:

>/usr/include/bits/local_lim.h:27: linux/limits.h: No such file or
>directory
>/usr/include/bits/socket.h:295: asm/socket.h: No such file or directory

>I've checked and I have the following RPMs installed: egcs, cpp, binutils,
>kernel-source, glibc-devel, and make.  I am running Red Hat Linux 6.2,
>Kernel 2.2.16-3smp.

Those two files are in the kernel-headers package. (Found by querying
my copies: "rpm -qf /usr/include/linux/limits.h")

Ken
mailto:shiva at well dot com
http://www.sewingwitch.com/ken/
http://www.harrybrowne2000.org/



Date: Thu, 31 Aug 2000 20:54:22 -0400
From: eric at telicsolutions dot net (Eric Krichbaum)
Subject: memory leak?

I can't seem to track down the leak.

The box: PIII 850, 512 meg Ram, 36 gig scsi (/var is 32 gig)
Redhat 6.2 stock server install + 2.2.16-3, qpopper 3.1b9 (also tried 
3.02), pam_radius_auth (from freeradius.org), sendmail 8.11.0

Busy system.  ~11000 users.  SMTP outgoing traffic is on another box.

Questions:  Could the problem be in the file system (11000 files in one 
dir?) and if so can someone tell me how to make sendmail/procmail 
hash_spool to use that setting in qmail?

or

Does anyone know of any other patches that should be put on to relieve this?

I already set /proc/sys/fs/file-max and inode-max up but still eventually 
use and abuse all available ram.

Thanks in advance,
Eric
--------------------------------------------------------------------------------------------------
New software available at http://www.telicsolutions.net/soft
If you have ICQ you can message me at ICQ#:9736582
Eric Krichbaum, MCSE, MCP+IS, ASE, CCNA, A+, CNA, developer
--------------------------------------------------------------------------------------------------


Date: Fri, 01 Sep 2000 11:38:00 +0300
From: Yiannos Pitas <yiannos at ucy.ac dot cy>
Subject: Qpopper and status of user accounts

I am running the latest version of qpopper (4.21) on an AIX box but have
a problem
with security. Qpopper still allows users to fetch their email even when
one of the following
holds:

1. The user's password has expired,
2. The user's unsuccefull login attempts have reached their maximun,
3. The user's account has been locked by the sytem administrator,
4  The user's workstation is not registered in the DNS address space.

In the release notes, it is mentioned that at some point (since release
2.1.4-b2)
the password expiration issue has been fixed for linux and so at that
point
Linux, Solaris and unixware checked for password epxiration.
This is what it is?  AIX was left out?

Regards,

Yiannos Pitas

---------------------------------------------------------------------
Yiannos Pitas,                  |  Tel: 357-2-892136
Computer Center,                |       357-9-429774 (mobile)
University Of Cyprus,           |  Fax: 357-2-756082 
Kallipoleos 75,                 |  email: yiannos at ucy.ac dot cy
2100 Nicosia,                   |  http://www.ucy.ac.cy/
CYPRUS.                         |  
---------------------------------------------------------------------

Date: Fri, 1 Sep 2000 22:35:44 +1200 (NZST)
From: Alan Brown <alan at manawatu.gen dot nz>
Subject: Not qpopper related - eudora 4 question.

Has anyone else been receiving complaints from users running Eudora in
adware mode that their Eudora clients have been unable to gather
adverts, so reverted to freeware mode?

Many of my users are reporting it and I can't see any firewalls in the way.

AB


Date: Fri, 01 Sep 2000 14:13:22 +0300
From: Yiannos Pitas <yiannos at ucy.ac dot cy>
Subject: Re: Qpopper and status of user accounts

Yiannos Pitas wrote:
> 
> I am running the latest version of qpopper (4.21) on an AIX box but have
Make that 3.0.2!  

Yiannos

> a problem
> with security. Qpopper still allows users to fetch their email even when
> one of the following
> holds:
> 
> 1. The user's password has expired,
> 2. The user's unsuccefull login attempts have reached their maximun,
> 3. The user's account has been locked by the sytem administrator,
> 4  The user's workstation is not registered in the DNS address space.
> 
> In the release notes, it is mentioned that at some point (since release
> 2.1.4-b2)
> the password expiration issue has been fixed for linux and so at that
> point
> Linux, Solaris and unixware checked for password epxiration.
> This is what it is?  AIX was left out?
> 
> Regards,
> 
> Yiannos Pitas
> 
> ---------------------------------------------------------------------
> Yiannos Pitas,                  |  Tel: 357-2-892136
> Computer Center,                |       357-9-429774 (mobile)
> University Of Cyprus,           |  Fax: 357-2-756082
> Kallipoleos 75,                 |  email: yiannos at ucy.ac dot cy
> 2100 Nicosia,                   |  http://www.ucy.ac.cy/
> CYPRUS.                         |
> ---------------------------------------------------------------------

-- 
---------------------------------------------------------------------
Yiannos Pitas,                  |  Tel: 357-2-892136
Computer Center,                |       357-9-429774 (mobile)
University Of Cyprus,           |  Fax: 357-2-756082 
Kallipoleos 75,                 |  email: yiannos at ucy.ac dot cy
2100 Nicosia,                   |  http://www.ucy.ac.cy/
CYPRUS.                         |  
---------------------------------------------------------------------

Date: Fri, 1 Sep 2000 09:59:46 -0500 (CDT)
From: Michael Rapp <mdrapp at coe.uh dot edu>
Subject: RE: QPopper Compilation Problem on RH Linux 6.2

Thanks Ken for responding about the kernel-headers.  As it turns out, I
indeed forgot to install that part when I upgraded the Kernel a few weeks
ago.  

However, I now get a different compilation error when I run make:

[root@coe qpopper3.0 dot 2]# make
cd ./popper  && make all
make[1]: Entering directory `/usr/src/qpopper3.0.2/popper'
gcc -c -I.. -I.. -I. -I../mmangle -I../common \
-g -O2 -fpcc-struct-return  -DHAVE_CONFIG_H  -DLINUX -DUNIX pop_init.c -o
pop_init.o
pop_init.c: In function `pop_init':
pop_init.c:340: `MAXHOSTNAMELEN' undeclared (first use in this function)
pop_init.c:340: (Each undeclared identifier is reported only once
pop_init.c:340: for each function it appears in.)
make[1]: *** [pop_init.o] Error 1
make[1]: Leaving directory `/usr/src/qpopper3.0.2/popper'
make: *** [popper_server] Error 2
[root@coe qpopper3.0 dot 2]#

I'm using the straight download of QPopper 3.0.2 from Qualcomm, so I
haven't modified the package in any way (other than running ./configure
--enable-specialauth, which seems to run fine).  Again my system:  Red Hat
Linux 6.2, Kernel 2.2.16-3smp.

I looked at the pop_init.c file in the popper directory, and it doesn't
seem corrupt, but I don't know enough about C to understand it well enough
to know why MAXHOSTNAMELEN is undeclared.

Any suggestions?

+========================================================+
| /*/-=[ Michael Rapp ]=-/*/     Technology Specialist   |
|  Center for Information Technology in Education (CITE) |
|    College of Education        University of Houston   |
+========================================================+


Date: Fri, 1 Sep 2000 09:08:24 -0700
From: Qpopper Support <qpopper at qualcomm dot com>
Subject: Re: Not qpopper related - eudora 4 question.

At 10:35 PM +1200 9/1/00, Alan Brown wrote:

>  Has anyone else been receiving complaints from users running Eudora in
>  adware mode that their Eudora clients have been unable to gather
>  adverts, so reverted to freeware mode?
>
>  Many of my users are reporting it and I can't see any firewalls in the way.
>
>  AB

Make sure they are using the latest available Eudora (4.3.3) -- I 
think there were some problems in the first adware release.

Date: Sat, 2 Sep 2000 04:22:50 +1200 (NZST)
From: Alan Brown <alan at manawatu.gen dot nz>
Subject: Re: Not qpopper related - eudora 4 question.

On Fri, 1 Sep 2000, Qpopper Support wrote:

> Make sure they are using the latest available Eudora (4.3.3) -- I 
> think there were some problems in the first adware release.

Will do.

Is there any good reason why the 4.* versions aren't at ftp.qualcomm.com
along with the older versions? 

AB


Subject: Re: qpopper 3.1b10x1/kerberosV
Date: Fri, 01 Sep 2000 14:18:49 -0400
From: Ken Hornstein <kenh at cmf.nrl.navy dot mil>

>I've got qpopper 3.1b10x1 compiled successfully on FreeBSD 4.1 with
>Kerberos V support. I've got kuserok() and ksockinst() enabled as
>well. popper is in /etc/inetd.conf with the line:
>
>pop3 stream tcp nowait root /usr/local/lib/popper qpopper -s -k -K pop3
>
>Everything seems to be fine, until I actually try to authenticate through
>the pop server:
>
>bash# telnet localhost 110
>Trying 127.0.0.1...
>Connected to localhost.
>Escape character is '^]'.
>user jeremy
>-ERR recvauth failed--Bad sendauth version was sent

Yes, that's what should happen when you try doing that.  I did that
Kerberos support, so let me speak to it.

The Kerberos support in qpopper is what us folks in the Kerberos community
like to call "real" Kerberos support.  By that, we mean that it requires
the use of a Kerberos ticket for authentication, and has all of the
advantages of doing that (forward secrecy, single sign-on, mutual
authentication, not cleartext, etc etc).

The big disadvantage here is that it requires a modified client that
knows how to squirt out the necessary blob of data required by the
Kerberos-aware qpopper.  Surprise, surprise; the major consumer of
this is Eudora, which provides a plug-in interface to do this at
connection start time.  There are patches (and in some cases, native
support) for doing this for other mailers (but Eudora is the only
commercial product that I'm aware of that does ANY form of Kerberos
authentication).

Now, it sounds like what YOU want is to verify a password against
a Kerberos password database.  This is what we in the Kerberos community
call "Kerberos Password Verification".  We also call it a lot of other
things that perhaps aren't suitable for a public mailing list, but
a common one is "Giant Security Hole", or "How to Get All the
Disadvantages of Kerberos, but None of the Advantages".

Now, if you are going into this with your eyes open, and understand
the risks associated with this ... then hey, I guess I won't really
say any more (other than to wonder why would you bother).  Let's
put further snide comments aside, though, and concentrate on something
that's actually useful for your situation.

If you want to do "Kerberos Password Verification", then that code
hasn't been written.  You'd need to write it.  You could use the
examples in the Kerberos login program as a starting point.

In an aside, I would be negligent if I didn't mention that the current
protocol used in qpopper (sometimes called KPOP), is completely non-
standard and has some noticable drawbacks (like no way to do session
encryption).  I've written the code to do Kerberos authentication via
the IETF standards-track mechanism, which I've posted about here (this
is the SASL stuff using the Cyrus SASL library).  The big sticking
point is that there's no way within Eudora to do the proper type of
authentication.  If you have interest in support for "real" Kerberos
authentication, then I'd encourage you to send email to the Eudora
support people and ask for GSSAPI SASL support for POP and IMAP.
(The current sense I've gotten from them is not enough customers are
interested in it).

--Ken

Date: Fri, 01 Sep 2000 15:51:42 -0300
From: Rodrigo Luiz Anami <rodrigoa at bestway.com dot br>
Subject: Possible bug in qpopper 3.1b9 ?

--=====================_139883558==_.ALT
Content-Type: text/plain; charset="iso-8859-1"; format=flowed
Content-Transfer-Encoding: quoted-printable


Hi there !

I set a quota for our users for 15 MB. But the popper log below shows 
something strange, note that this user have problem to get his messages 
with a 8-mbyte-mailbox. Is it a bug ? Another thing, it's not true that 
this version has a special treatment for quota system that permits users to=
 
download their messages even in overquota situation ?


Sep  1 09:09:19 voyager popper[13136]: rafaelmp at 200.246.38.174 
(200.246.38.174): -ERR Unknow
n command: "xsender".
Sep  1 09:09:39 voyager popper[13136]: Stats: rafaelmp 0 0 344 8153963 
200.246.38.174 200.246.3
8.174
Sep  1 09:09:39 voyager popper[13136]: rafaelmp at 200.246.38.174 
(200.246.38.174): -ERR Overqu
ota copying messages to Mailspool. Temp drop unchanged (122)
Sep  1 09:11:18 voyager popper[13743]: Stats: rafaelmp 0 0 344 8153963 
200.246.38.174 200.246.3
8.174
Sep  1 09:11:18 voyager popper[13743]: rafaelmp at 200.246.38.174 
(200.246.38.174): -ERR Overqu
ota copying messages to Mailspool. Temp drop unchanged (122)
Sep  1 09:13:20 voyager popper[14629]: Stats: rafaelmp 0 0 344 8153963 
200.246.38.174 200.246.3
8.174
Sep  1 09:13:21 voyager popper[14629]: rafaelmp at 200.246.38.174 
(200.246.38.174): -ERR Overqu
ota copying messages to Mailspool. Temp drop unchanged (122)
Sep  1 09:15:26 voyager popper[15276]: Stats: rafaelmp 0 0 344 8153963 
200.246.38.174 200.246.3
8.174
Sep  1 09:15:26 voyager popper[15276]: rafaelmp at 200.246.38.174 
(200.246.38.174): -ERR Overqu
ota copying messages to Mailspool. Temp drop unchanged (122)
Sep  1 09:16:22 voyager popper[15707]: Stats: rafaelmp 0 0 344 8153963 
200.246.38.174 200.246.3
8.174
Sep  1 09:16:22 voyager popper[15707]: rafaelmp at 200.246.38.174 
(200.246.38.174): -ERR Overqu
ota copying messages to Mailspool. Temp drop unchanged (122)
Sep  1 09:17:25 voyager popper[15932]: Stats: rafaelmp 0 0 344 8153963 
200.246.38.174 200.246.38.174

[]'s
_________________________________________________________________
Eng° Rodrigo Luiz Anami                   rodrigoa at bestway.com dot br
Administrador de Sistemas    Voz:(19) 736 3721 Cel:(19) 9123 9995
Best Way Internet Provider                (19) 736 3700 (Campinas)
http://www.bestway.com.br                (19) 736 3727 (FAX)
webmaster at bestway.com dot br          0800 112262 (Outras Localidades)

--=====================_139883558==_.ALT
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<html><br>
<div>Hi there !</div>
<br>
<div>I set a quota for our users for 15 MB. But the popper log below
shows something strange, note that this user have problem to get his
messages with a 8-mbyte-mailbox. Is it a bug ? Another thing, it's not
true that this version has a special treatment for quota system that
permits users to download their messages even in overquota situation
?</div>
<br>
<br>
<div>Sep  1 09:09:19 voyager popper[13136]: rafaelmp at
200.246.38.174 (200.246.38.174): -ERR Unknow</div>
<div>n command: "xsender".</div>
<div>Sep  1 09:09:39 voyager popper[13136]: Stats: rafaelmp 0 0 344
8153963 200.246.38.174 200.246.3</div>
<div>8.174</div>
<div>Sep  1 09:09:39 voyager popper[13136]: rafaelmp at
200.246.38.174 (200.246.38.174): -ERR Overqu</div>
<div>ota copying messages to Mailspool. Temp drop unchanged (122)</div>
<div>Sep  1 09:11:18 voyager popper[13743]: Stats: rafaelmp 0 0 344
8153963 200.246.38.174 200.246.3</div>
<div>8.174</div>
<div>Sep  1 09:11:18 voyager popper[13743]: rafaelmp at
200.246.38.174 (200.246.38.174): -ERR Overqu</div>
<div>ota copying messages to Mailspool. Temp drop unchanged (122)</div>
<div>Sep  1 09:13:20 voyager popper[14629]: Stats: rafaelmp 0 0 344
8153963 200.246.38.174 200.246.3</div>
<div>8.174</div>
<div>Sep  1 09:13:21 voyager popper[14629]: rafaelmp at
200.246.38.174 (200.246.38.174): -ERR Overqu</div>
<div>ota copying messages to Mailspool. Temp drop unchanged (122)</div>
<div>Sep  1 09:15:26 voyager popper[15276]: Stats: rafaelmp 0 0 344
8153963 200.246.38.174 200.246.3</div>
<div>8.174</div>
<div>Sep  1 09:15:26 voyager popper[15276]: rafaelmp at
200.246.38.174 (200.246.38.174): -ERR Overqu</div>
<div>ota copying messages to Mailspool. Temp drop unchanged (122)</div>
<div>Sep  1 09:16:22 voyager popper[15707]: Stats: rafaelmp 0 0 344
8153963 200.246.38.174 200.246.3</div>
<div>8.174</div>
<div>Sep  1 09:16:22 voyager popper[15707]: rafaelmp at
200.246.38.174 (200.246.38.174): -ERR Overqu</div>
<div>ota copying messages to Mailspool. Temp drop unchanged (122)</div>
<div>Sep  1 09:17:25 voyager popper[15932]: Stats: rafaelmp 0 0 344
8153963 200.246.38.174 200.246.38.174</div>
<br>
[]'s
<br>

<tt>_________________________________________________________________<br>
Eng° Rodrigo Luiz
Anami            =
;      
rodrigoa at bestway.com dot br<br>
Administrador de Sistemas    Voz:(19) 736 3721 Cel:(19)
9123 9995<br>
Best Way Internet
Provider           
    (19) 736 3700 (Campinas)<br>
<a href="http://www.bestway.com.br/" eudora="autourl">http://www.bestway=
.com.br</a>           =
;    
 (19) 736 3727 (FAX)<br>
webmaster at bestway.com dot br        &nbs=
p;
0800 112262 (Outras Localidades)<br>
</html>

--=====================_139883558==_.ALT--


Date: Fri, 1 Sep 2000 15:18:49 -0400 (EDT)
From: "Jeff A. Earickson" <jaearick at colby dot edu>
Subject: Re: Possible bug in qpopper 3.1b9 ?

Hi,
   If you are not running in SERVER mode, then I'll bet that your 
pop dropfile directories are on the same filesystem as your mail
spool files.  Remember that qpopper will make a copy of the mailbox
to the dropfile directory -- so the quota has to be 2X the max mailbox
size (16 MB here) for things to work.  Suggestions:

a) Raise the quota,
b) Have your dropfiles on a different filesystem.
c) Use SERVER mode (it works with 3.1b9, I use it on our system).

** Jeff A. Earickson, Ph.D                         PHONE: 207-872-3659
** Senior UNIX Sysadmin, Information Technology    EMAIL: jaearick at colby dot ed=
u
** Colby College, 4214 Mayflower Hill,               FAX: 207-872-3555
** Waterville ME, 04901-8842
---------------------------------------------------------------------------=
-

On Fri, 1 Sep 2000, Rodrigo Luiz Anami wrote:

> Date: Fri, 01 Sep 2000 15:51:42 -0300
> From: Rodrigo Luiz Anami <rodrigoa at bestway.com dot br>
> To: Subscribers of Qpopper <qpopper at lists.pensive dot org>
> Subject: Possible bug in qpopper 3.1b9 ?
> 
> 
> Hi there !
> 
> I set a quota for our users for 15 MB. But the popper log below shows 
> something strange, note that this user have problem to get his messages=
 
> with a 8-mbyte-mailbox. Is it a bug ? Another thing, it's not true that=
 
> this version has a special treatment for quota system that permits users =
to 
> download their messages even in overquota situation ?
> 
> 
> Sep  1 09:09:19 voyager popper[13136]: rafaelmp at 200.246.38.174 
> (200.246.38.174): -ERR Unknow
> n command: "xsender".
> Sep  1 09:09:39 voyager popper[13136]: Stats: rafaelmp 0 0 344 8153963 
> 200.246.38.174 200.246.3
> 8.174
> Sep  1 09:09:39 voyager popper[13136]: rafaelmp at 200.246.38.174 
> (200.246.38.174): -ERR Overqu
> ota copying messages to Mailspool. Temp drop unchanged (122)
> Sep  1 09:11:18 voyager popper[13743]: Stats: rafaelmp 0 0 344 8153963 
> 200.246.38.174 200.246.3
> 8.174
> Sep  1 09:11:18 voyager popper[13743]: rafaelmp at 200.246.38.174 
> (200.246.38.174): -ERR Overqu
> ota copying messages to Mailspool. Temp drop unchanged (122)
> Sep  1 09:13:20 voyager popper[14629]: Stats: rafaelmp 0 0 344 8153963 
> 200.246.38.174 200.246.3
> 8.174
> Sep  1 09:13:21 voyager popper[14629]: rafaelmp at 200.246.38.174 
> (200.246.38.174): -ERR Overqu
> ota copying messages to Mailspool. Temp drop unchanged (122)
> Sep  1 09:15:26 voyager popper[15276]: Stats: rafaelmp 0 0 344 8153963 
> 200.246.38.174 200.246.3
> 8.174
> Sep  1 09:15:26 voyager popper[15276]: rafaelmp at 200.246.38.174 
> (200.246.38.174): -ERR Overqu
> ota copying messages to Mailspool. Temp drop unchanged (122)
> Sep  1 09:16:22 voyager popper[15707]: Stats: rafaelmp 0 0 344 8153963 
> 200.246.38.174 200.246.3
> 8.174
> Sep  1 09:16:22 voyager popper[15707]: rafaelmp at 200.246.38.174 
> (200.246.38.174): -ERR Overqu
> ota copying messages to Mailspool. Temp drop unchanged (122)
> Sep  1 09:17:25 voyager popper[15932]: Stats: rafaelmp 0 0 344 8153963 
> 200.246.38.174 200.246.38.174
> 
> []'s
> _________________________________________________________________
> Eng° Rodrigo Luiz Anami                   rodrigoa at bestway.com dot br
> Administrador de Sistemas    Voz:(19) 736 3721 Cel:(19) 9123 9995
> Best Way Internet Provider                (19) 736 3700 (Campinas)
> http://www.bestway.com.br                (19) 736 3727 (FAX)
> webmaster at bestway.com dot br          0800 112262 (Outras Localidades)
> 


Date: Fri, 1 Sep 2000 14:10:07 -0700
From: Qpopper Support <qpopper at qualcomm dot com>
Subject: Re: Possible bug in qpopper 3.1b9 ?

At 3:51 PM -0300 9/1/00, Rodrigo Luiz Anami wrote:

>  Hi there !
>
>  I set a quota for our users for 15 MB. But the popper log below 
> shows something strange, note that this user have problem to get 
> his messages with a 8-mbyte-mailbox. Is it a bug ? Another thing, 
> it's not true that this version has a special treatment for quota 
> system that permits users to download their messages even in 
> overquota situation ?

=46rom the log below, Qpopper was unable to copy messages from the 
temp spool back to the main spool.  Do you keep the temp spool 
separate from the main spool?

The special over-quota treatement allows users to log in even if 
they are over quota.  Your situation is different: the user logs in 
but the spool can't be copied back when the user exits.

Try using a different temp spool location (see the INSTALL file).

>
>
>  Sep  1 09:09:19 voyager popper[13136]: rafaelmp at 200.246.38.174 
> (200.246.38.174): -ERR Unknow
>  n command: "xsender".
>  Sep  1 09:09:39 voyager popper[13136]: Stats: rafaelmp 0 0 344 
> 8153963 200.246.38.174 200.246.3
>  8.174
>  Sep  1 09:09:39 voyager popper[13136]: rafaelmp at 200.246.38.174 
> (200.246.38.174): -ERR Overqu
>  ota copying messages to Mailspool. Temp drop unchanged (122)
>  Sep  1 09:11:18 voyager popper[13743]: Stats: rafaelmp 0 0 344 
> 8153963 200.246.38.174 200.246.3
>  8.174
>  Sep  1 09:11:18 voyager popper[13743]: rafaelmp at 200.246.38.174 
> (200.246.38.174): -ERR Overqu
>  ota copying messages to Mailspool. Temp drop unchanged (122)
>  Sep  1 09:13:20 voyager popper[14629]: Stats: rafaelmp 0 0 344 
> 8153963 200.246.38.174 200.246.3
>  8.174
>  Sep  1 09:13:21 voyager popper[14629]: rafaelmp at 200.246.38.174 
> (200.246.38.174): -ERR Overqu
>  ota copying messages to Mailspool. Temp drop unchanged (122)
>  Sep  1 09:15:26 voyager popper[15276]: Stats: rafaelmp 0 0 344 
> 8153963 200.246.38.174 200.246.3
>  8.174
>  Sep  1 09:15:26 voyager popper[15276]: rafaelmp at 200.246.38.174 
> (200.246.38.174): -ERR Overqu
>  ota copying messages to Mailspool. Temp drop unchanged (122)
>  Sep  1 09:16:22 voyager popper[15707]: Stats: rafaelmp 0 0 344 
> 8153963 200.246.38.174 200.246.3
>  8.174
>  Sep  1 09:16:22 voyager popper[15707]: rafaelmp at 200.246.38.174 
> (200.246.38.174): -ERR Overqu
>  ota copying messages to Mailspool. Temp drop unchanged (122)
>  Sep  1 09:17:25 voyager popper[15932]: Stats: rafaelmp 0 0 344 
> 8153963 200.246.38.174 200.246.38.174
>
>  []'s
>  _________________________________________________________________
>  Eng° Rodrigo Luiz Anami                   rodrigoa at bestway.com dot br
>  Administrador de Sistemas    Voz:(19) 736 3721 Cel:(19) 9123 9995
>  Best Way Internet Provider                (19) 736 3700 (Campinas)
>  http://www.bestway.com.br                (19) 736 3727 (FAX)
>  webmaster at bestway.com dot br          0800 112262 (Outras Localidades)


From: "Kenneth Porter" <shiva at well dot com>
Date: Fri, 01 Sep 2000 15:20:17 -0700
Subject: RE: QPopper Compilation Problem on RH Linux 6.2

On Fri, 1 Sep 2000 09:59:46 -0500 (CDT), Michael Rapp wrote:

>pop_init.c:340: `MAXHOSTNAMELEN' undeclared (first use in this function)

A grep of /usr/include/*.h and /usr/include/*/*.h reveals that this is
defined in /usr/include/asm/param.h, which is part of the
kernel-headers package. It's also defined in /usr/include/rpc/types.h,
part of the glibc-devel package. Since you've installed kernel-headers,
you should have param.h.

The compiler isn't complaining about the absence of either of these
files, so it must not be including them for some reason. Perhaps
there's some odd combination of configure options that's preventing
this.

... Just did some more hunting around and now see that popper.h in
3.1b9 defines MAXHOSTNAMELEN if a system header hasn't done so. This
isn't done in 3.0.2. I recall being able to compile the earlier
version, so there must be some difference between your configuration
and mine. I suppose the next thing to do is to look at your configure
options and also look at what headers gcc is including for pop_init.c
with those options. (Anyone know offhand how to get gcc to report
header filenames as they're included?)

Ken
mailto:shiva at well dot com
http://www.sewingwitch.com/ken/
http://www.harrybrowne2000.org/



Date: Sat, 02 Sep 2000 18:19:07 -0700
From: Roy <garlic at garlic dot com>
Subject: Re: Qpopper and status of user accounts


You need my mod to qpopper.  It checks the  status of the user in AIX before
letting him in.   I don't have it ported to the latest version but will work
on it in the next few days

Yiannos Pitas wrote:

> Yiannos Pitas wrote:
> >
> > I am running the latest version of qpopper (4.21) on an AIX box but have
> Make that 3.0.2!
>
> Yiannos
>
> > a problem
> > with security. Qpopper still allows users to fetch their email even when
> > one of the following
> > holds:
> >
> > 1. The user's password has expired,
> > 2. The user's unsuccefull login attempts have reached their maximun,
> > 3. The user's account has been locked by the sytem administrator,
> > 4  The user's workstation is not registered in the DNS address space.
> >
> > In the release notes, it is mentioned that at some point (since release
> > 2.1.4-b2)
> > the password expiration issue has been fixed for linux and so at that
> > point
> > Linux, Solaris and unixware checked for password epxiration.
> > This is what it is?  AIX was left out?
> >
> > Regards,
> >
> > Yiannos Pitas
> >
> > ---------------------------------------------------------------------
> > Yiannos Pitas,                  |  Tel: 357-2-892136
> > Computer Center,                |       357-9-429774 (mobile)
> > University Of Cyprus,           |  Fax: 357-2-756082
> > Kallipoleos 75,                 |  email: yiannos at ucy.ac dot cy
> > 2100 Nicosia,                   |  http://www.ucy.ac.cy/
> > CYPRUS.                         |
> > ---------------------------------------------------------------------
>
> --
> ---------------------------------------------------------------------
> Yiannos Pitas,                  |  Tel: 357-2-892136
> Computer Center,                |       357-9-429774 (mobile)
> University Of Cyprus,           |  Fax: 357-2-756082
> Kallipoleos 75,                 |  email: yiannos at ucy.ac dot cy
> 2100 Nicosia,                   |  http://www.ucy.ac.cy/
> CYPRUS.                         |
> ---------------------------------------------------------------------


From: "Troy, Frank" <ftroy at UU dot NET>
Subject: qpopper newbie question
Date: Sat, 2 Sep 2000 23:37:34 -0400 

Hi,

I just installed Qpopper and it seems to be running fine because I can
telent to port 110.  But it does not let me log in and I get the
following error.

-ERR [AUTH] Password supplied for "ftroy" is incorrect.

What else do I need to configure to allow me to log in?

Thanks
Frank



Date: Sat, 2 Sep 2000 21:08:03 -0700
From: Qpopper Support <qpopper at qualcomm dot com>
Subject: Re: Qpopper and status of user accounts

At 11:38 AM +0300 9/1/00, Yiannos Pitas wrote:

>  This is what it is?  AIX was left out?

Yes, that's what it is.  We don't have an AIX system in our lab, so I 
can't check man pages and add AIX code, nor test it.  If someone does 
so and contributes a patch against the latest version, I'll try and 
put it in.

Date: Sun, 03 Sep 2000 14:49:17 -0700
From: Roy <garlic at garlic dot com>
Subject: Re: authentification and bulld failure


AIX does not have "shadow" support.  Its built in.  Just ignore shadow and it
will work.

Qpopper Support wrote:

> At 6:28 PM +0200 8/29/00, ivang at laura.prodistele dot com wrote:
>
> >  I'm on an Aix 4.2 and I have installed qpopper 3.0.2
> >
> >  My main problem is that AIX has shadow password system. I've tried to
> >  compile with the --enable-especialauth but when it's finishing compilation
> >  it gives an
> >
> >  .authentication not found.
> >
> >  The other problem is that when I run configure with bulld option or the
> >  bulletins option (even with or without asignating a path) it says me that
> >  that option is not recognize.
> >
> >
> >  Can anyone help me ??
> >
> >
> >  thanks
> >
> >  Your friend
> >
> >  Iván ----------> Laf
>
> Please try 3.1b9 and see if this is better.  If you still have
> problems, send in the exact ./configure line used, and the error
> message you get.
>
> Be sure to unpack 3.1b9 into an empty directory -- we don't want
> config files from the failed attempt to alter anything.


Date: Mon, 04 Sep 2000 08:19:02 +0300
From: Yiannos Pitas <yiannos at ucy.ac dot cy>
Subject: Re: authentification and bulld failure

Roy wrote:
> 
> AIX does not have "shadow" support.  Its built in.  Just ignore shadow and it
> will work.
What do you mean it's built-in?  In any case, Iam not using the
--enable-specialauth
since the compiler is giving me an undefined .authenticate error
message.  The current
version has been compiled using just the --enable-temp-drop-dir=/pop
parameter,
it's running fine BUT with the reported security vulnerabilities.

Regards,

Yiannos Pitas
> 
> Qpopper Support wrote:
> 
> > At 6:28 PM +0200 8/29/00, ivang at laura.prodistele dot com wrote:
> >
> > >  I'm on an Aix 4.2 and I have installed qpopper 3.0.2
> > >
> > >  My main problem is that AIX has shadow password system. I've tried to
> > >  compile with the --enable-especialauth but when it's finishing compilation
> > >  it gives an
> > >
> > >  .authentication not found.
> > >
> > >  The other problem is that when I run configure with bulld option or the
> > >  bulletins option (even with or without asignating a path) it says me that
> > >  that option is not recognize.
> > >
> > >
> > >  Can anyone help me ??
> > >
> > >
> > >  thanks
> > >
> > >  Your friend
> > >
> > >  Iván ----------> Laf
> >
> > Please try 3.1b9 and see if this is better.  If you still have
> > problems, send in the exact ./configure line used, and the error
> > message you get.
> >
> > Be sure to unpack 3.1b9 into an empty directory -- we don't want
> > config files from the failed attempt to alter anything.

-- 
---------------------------------------------------------------------
Yiannos Pitas,                  |  Tel: 357-2-892136
Computer Center,                |       357-9-429774 (mobile)
University Of Cyprus,           |  Fax: 357-2-756082 
Kallipoleos 75,                 |  email: yiannos at ucy.ac dot cy
2100 Nicosia,                   |  http://www.ucy.ac.cy/
CYPRUS.                         |  
---------------------------------------------------------------------

Date: Sun, 3 Sep 2000 22:57:56 -0700
From: Qpopper Support <qpopper at qualcomm dot com>
Subject: Qpopper 3.1b10 available

Qpopper 3.1b10 is available at 
<ftp://ftp.qualcomm.com/eudora/servers/unix/popper/>.

A somewhat abbreviated change list is on the Qpopper web site at 
<http://www.qpopper.org/changelist.html>

The full list of changes from one release to the next is on the FTP 
site, at 
<ftp://ftp.qualcomm.com/eudora/servers/unix/popper/beta/Changes>.

The 3.1 release notes are at: 
<ftp://ftp.qualcomm.com/eudora/servers/unix/popper/beta/Release.Notes>.

Changes from 3.1b9 to 3.1b10
----------------------------

  1.  More frequent checks for EOF when sending message.
  2.  Avoid error messages from getopt in standalone mode.
  3.  Fix compile errors on some platforms by making snprint.c's
      use of TRUE/FALSE/BOOL identical to other files.
  4.  Added check for libdl and libpam in configure script.  Should
      help compilation with PAM on non-Linux systems.
  5.  Eased compilation with PAM on OSes other than Linux and Solaris
      by moving PAM section before OS-specific ones in pop_pass.c, to
      eliminate need to use '&& !defined(USE_PAM)' in each OS section.
  6.  Added '--enable-auth-file=path' to permit access only to users
      listed in the specified file.  Format is one user per line.
  7.  Added '--enable-nonauth-file=path' to deny access to users listed
      in the specified file.  Format is one user per line.

From: "Kenneth Porter" <shiva at well dot com>
Date: Mon, 04 Sep 2000 17:55:56 -0700
Subject: Re: Qpopper 3.1b10 available

On Sun, 3 Sep 2000 22:57:56 -0700, Qpopper Support wrote:

>  6.  Added '--enable-auth-file=path' to permit access only to users
>      listed in the specified file.  Format is one user per line.
>  7.  Added '--enable-nonauth-file=path' to deny access to users listed
>      in the specified file.  Format is one user per line.

So these are the same things one used to have to #define a value for?
Thanks, makes the build scripts easier.

Ken
mailto:shiva at well dot com
http://www.sewingwitch.com/ken/
http://www.harrybrowne2000.org/



From: "Ed - Popper" <qman at brokendown dot net>
Subject: Re: qpopper newbie question
Date: Mon, 4 Sep 2000 17:50:59 -0700

after you telnet in:

user  ftroy
pass  <your password>

if that fails try compiling with shadow passwords enabled.
Red Hat 6.2 uses shadow password file



----- Original Message ----- 
From: "Troy, Frank" <ftroy at UU dot NET>
To: "Subscribers of Qpopper" <qpopper at lists.pensive dot org>
Sent: Saturday, September 02, 2000 8:37 PM
Subject: qpopper newbie question


> Hi,
> 
> I just installed Qpopper and it seems to be running fine because I can
> telent to port 110.  But it does not let me log in and I get the
> following error.
> 
> -ERR [AUTH] Password supplied for "ftroy" is incorrect.
> 
> What else do I need to configure to allow me to log in?
> 
> Thanks
> Frank
> 
> 
> 


From: =?iso-8859-1?Q?Søren_Peter_Skou?= <sps at arrowhead dot dk>
Subject: Qpopper, Pam and FreeBSD
Date: Tue, 5 Sep 2000 10:31:49 +0200

Hiya all

So I'm trying to compile Qpopper on a FreeBSD 4.1 box and I want pam
enabled, so I e.g. could take advantage of the pam_mysql module (Once I get
that to compile as well :). The idea is to have one place where I can grab
my users, instead of having a patch for ftpd, pop3, ssh and whatnot, I'd
prefer to be able to use PAM.

But, configuring Qpopper (3.0b15) with the options --with-pam=pop3 results
in that I'm missing -ldl, So far I've found that -ldl is some sort of
Dynamic Loader.

Anyone done this and can give some hints to what I'm overlooking? Or even
someone who can suggest a better solution?

Friendly Greetings
S. P. Skou
Systems Developer


Date: Tue, 05 Sep 2000 08:14:18 -0400
From: Miguel Ruiz <mruiz at holt.k12.mi dot us>
Subject: Re: qpopper newbie question

I'm hoping I didn't overlook this when going through the man
pages/README
files...

This is what I would like to achieve with qpopper:

I would like it to run on a specific IP/Interface.

Is this possible?



Thank you,

Miguel

Date: Tue, 5 Sep 2000 21:29:53 +0900
From: Peter Evans <peter at gol dot com>
Subject: Re: qpopper newbie question

Miguel Ruiz (mruiz at holt.k12.mi dot us) wrote:
> I'm hoping I didn't overlook this when going through the man
> pages/README
> files...

	qpopper which version ^^;

	3.1.blah.blech can run as a daemon. I expect it has options
	to attach to a particular interface.

	2.blech and the likes, use tcpserver by DJB. see

	http://cr.yp.to/ucspi-tcp.html
 
> This is what I would like to achieve with qpopper:
> I would like it to run on a specific IP/Interface.
> Is this possible?

	see above.

	p

	still waiting for a feature freeze. and a way to disable all
	that mime crap.


-- 
Remember The 5 K's.
The Justified Agents of Munya-munya-muuuu ...

Date: Tue, 5 Sep 2000 10:30:58 -0700
From: Qpopper Support <qpopper at qualcomm dot com>
Subject: Re: Qpopper, Pam and FreeBSD

At 10:31 AM +0200 9/5/00, Søren Peter Skou wrote:

>  Hiya all
>
>  So I'm trying to compile Qpopper on a FreeBSD 4.1 box and I want pam
>  enabled, so I e.g. could take advantage of the pam_mysql module (Once I g=
et
>  that to compile as well :). The idea is to have one place where I can gra=
b
>  my users, instead of having a patch for ftpd, pop3, ssh and whatnot, I'd
>  prefer to be able to use PAM.
>
>  But, configuring Qpopper (3.0b15) with the options --with-pam=pop3 resu=
lts
>  in that I'm missing -ldl, So far I've found that -ldl is some sort of
>  Dynamic Loader.
>
>  Anyone done this and can give some hints to what I'm overlooking? Or even
>  someone who can suggest a better solution?
>
>  Friendly Greetings
>  S. P. Skou
>  Systems Developer

=46irst off, do not use 3.0b15.  Never use old beta versions once the 
final version is released.  3.0b15 is beta 15 of 3.0, and since 3.0.2 
is available, one should not use anything older than that, ever.

=46or your specific case (trying to use PAM on xBSD) please use 3.1b10, 
which has a fix for this specific problem.

Date: Tue, 05 Sep 2000 16:32:41 -0700
From: Roy <garlic at garlic dot com>
Subject: Re: Qpopper and status of user accounts

I shipped a fixed version of pop_pass.c for AIX on the b10 base to qpopper
support for inclusion in a future release.  If you need a copy early, drop me a
note.

Roy wrote:

> You need my mod to qpopper.  It checks the  status of the user in AIX before
> letting him in.   I don't have it ported to the latest version but will work
> on it in the next few days
>
> Yiannos Pitas wrote:
>
> > Yiannos Pitas wrote:
> > >
> > > I am running the latest version of qpopper (4.21) on an AIX box but have
> > Make that 3.0.2!
> >
> > Yiannos
> >
> > > a problem
> > > with security. Qpopper still allows users to fetch their email even when
> > > one of the following
> > > holds:
> > >
> > > 1. The user's password has expired,
> > > 2. The user's unsuccefull login attempts have reached their maximun,
> > > 3. The user's account has been locked by the sytem administrator,
> > > 4  The user's workstation is not registered in the DNS address space.
> > >
> > > In the release notes, it is mentioned that at some point (since release
> > > 2.1.4-b2)
> > > the password expiration issue has been fixed for linux and so at that
> > > point
> > > Linux, Solaris and unixware checked for password epxiration.
> > > This is what it is?  AIX was left out?
> > >
> > > Regards,
> > >
> > > Yiannos Pitas
> > >
> > > ---------------------------------------------------------------------
> > > Yiannos Pitas,                  |  Tel: 357-2-892136
> > > Computer Center,                |       357-9-429774 (mobile)
> > > University Of Cyprus,           |  Fax: 357-2-756082
> > > Kallipoleos 75,                 |  email: yiannos at ucy.ac dot cy
> > > 2100 Nicosia,                   |  http://www.ucy.ac.cy/
> > > CYPRUS.                         |
> > > ---------------------------------------------------------------------
> >
> > --
> > ---------------------------------------------------------------------
> > Yiannos Pitas,                  |  Tel: 357-2-892136
> > Computer Center,                |       357-9-429774 (mobile)
> > University Of Cyprus,           |  Fax: 357-2-756082
> > Kallipoleos 75,                 |  email: yiannos at ucy.ac dot cy
> > 2100 Nicosia,                   |  http://www.ucy.ac.cy/
> > CYPRUS.                         |
> > ---------------------------------------------------------------------


Date: Tue, 5 Sep 2000 19:01:50 -0700
From: Qpopper Support <qpopper at qualcomm dot com>
Subject: Re: Qpopper and status of user accounts

At 11:38 AM +0300 9/1/00, Yiannos Pitas wrote:

>  1. The user's password has expired,

Actually, there is code in 3.1b1 onward to check for expired 
accounts on AIX.  Is this code not working?

>  2. The user's unsuccefull login attempts have reached their maximun,
>  3. The user's account has been locked by the sytem administrator,

Yes, there should be checks for these.

>  4  The user's workstation is not registered in the DNS address space.

You mean disable access because there is no PTR record?  Qpopper 
normally only warns of this.  It is not usually considered a fatal 
error.



Date: Wed, 06 Sep 2000 12:06:21 +0300
From: Yiannos Pitas <yiannos at ucy.ac dot cy>
Subject: Re: Qpopper and status of user accounts

Qpopper Support wrote:
> 
> At 11:38 AM +0300 9/1/00, Yiannos Pitas wrote:
> 
> >  1. The user's password has expired,
> 
> Actually, there is code in 3.1b1 onward to check for expired
> accounts on AIX.  Is this code not working?
> 

Don't know.  Will test it real soon. 

> >  2. The user's unsuccefull login attempts have reached their maximun,
> >  3. The user's account has been locked by the sytem administrator,
> 
> Yes, there should be checks for these.
> 
> >  4  The user's workstation is not registered in the DNS address space.
> 
> You mean disable access because there is no PTR record?  Qpopper
> normally only warns of this.  It is not usually considered a fatal
> error.

I had the impression that this is taken care of if you leave out the -R
command line argument.
In any case, even when both the address and the PTR records are missing,
qpopper
hands out email.  However, the client in question belongs to our IP
address space.  
I did not and I can not try it from an unregistered host outside our
network 
(any takers?). 

Regards,

Yiannos Pitas

---------------------------------------------------------------------
Yiannos Pitas,                  |  Tel: 357-2-892136
Computer Center,                |       357-9-429774 (mobile)
University Of Cyprus,           |  Fax: 357-2-756082 
Kallipoleos 75,                 |  email: yiannos at ucy.ac dot cy
2100 Nicosia,                   |  http://www.ucy.ac.cy/
CYPRUS.                         |  
---------------------------------------------------------------------

Date: Wed, 6 Sep 2000 16:37:28 -0700
From: Qpopper Support <qpopper at qualcomm dot com>
Subject: Re: Qpopper and status of user accounts

At 12:06 PM +0300 9/6/00, Yiannos Pitas wrote:

>   > Actually, there is code in 3.1b1 onward to check for expired
>>  accounts on AIX.  Is this code not working?
>>
>
>  Don't know.  Will test it real soon.

Based on the man pages you were kind enough to send, I've replaced 
the code that manually checked for expired accounts with a call on 
loginrestrictions(), since it seems more general.

Any volunteers to test it before I release 3.1b11?

Date: Thu, 07 Sep 2000 08:50:33 +0300
From: Yiannos Pitas <yiannos at ucy.ac dot cy>
Subject: Re: Qpopper and status of user accounts

Qpopper Support wrote:
> 
> At 12:06 PM +0300 9/6/00, Yiannos Pitas wrote:
> 
> >   > Actually, there is code in 3.1b1 onward to check for expired
> >>  accounts on AIX.  Is this code not working?
> >>
> >
> >  Don't know.  Will test it real soon.
> 
> Based on the man pages you were kind enough to send, I've replaced
> the code that manually checked for expired accounts with a call on
> loginrestrictions(), since it seems more general.
> 
> Any volunteers to test it before I release 3.1b11?
I will do it.

Regards,

Yiannos
-- 
---------------------------------------------------------------------
Yiannos Pitas,                  |  Tel: 357-2-892136
Computer Center,                |       357-9-429774 (mobile)
University Of Cyprus,           |  Fax: 357-2-756082 
Kallipoleos 75,                 |  email: yiannos at ucy.ac dot cy
2100 Nicosia,                   |  http://www.ucy.ac.cy/
CYPRUS.                         |  
---------------------------------------------------------------------

From: =?iso-8859-1?Q?Søren_Peter_Skou?= <sps at arrowhead dot dk>
Subject: Qpopper, Pam & Mysql  revisited
Date: Thu, 7 Sep 2000 16:33:17 +0200

Okay, so far so good, I've got the pam_mysql working on FreeBSD with 3.1B10
(Version correct this time :) and together with qpopper I'm now able to
Authenticate users, but only if those users exists both in master.passwd and
in the SQL Database I've setup for the purpose. The password the system
checks against is the one from SQL so that part is fine and dandy.

I then stepped back and looked at what I was trying once again, and it
became apparent that it wasn't what I wanted, instead I wanted something
along these lines:

MySQL (Or other SQL for that matter) contains the equivalent of
master.passwd
Pop3 server then knows where to look for it's mailfile for a given user, ie.
the user bork will have /var/mail/bork (yes, I am incredibly simpleminded)
:).
apache server looks into the same table to find users homedir, and can
prepend whatever USER_DIR is defined to be in the httpd.conf
MTA also looks here to find where to put the mail (ie, /var/spool).

I'm imagining a table that looks something like this:

id 		- Only inside the Database
username 	- For the authentication and location of mailfiles.
password	- For authentication purposes
home_dir	- user's homedir
mail_dir	- Where to look for the users mailfile.

As I see it this is more or less what I need, anyone who has done this, or
are in the process of doing so, I'd be more than happy to help in anyway I
can.


Friendly Greetings
S. P. Skou




Date: Thu, 07 Sep 2000 09:55:48 -0500
From: mike miller <mikem at ndtel dot com>
Subject: Re: Qpopper, Pam & Mysql  revisited

So, does this negate the need for using the /etc/passwd file to create
user accounts??  If so will ftp access still work?  If so I would be
interested in setting this up on a linux and sun box.


Mike Miller

Søren Peter Skou wrote:
> 
> Okay, so far so good, I've got the pam_mysql working on FreeBSD with 3.1B10
> (Version correct this time :) and together with qpopper I'm now able to
> Authenticate users, but only if those users exists both in master.passwd and
> in the SQL Database I've setup for the purpose. The password the system
> checks against is the one from SQL so that part is fine and dandy.
> 
> I then stepped back and looked at what I was trying once again, and it
> became apparent that it wasn't what I wanted, instead I wanted something
> along these lines:
> 
> MySQL (Or other SQL for that matter) contains the equivalent of
> master.passwd
> Pop3 server then knows where to look for it's mailfile for a given user, ie.
> the user bork will have /var/mail/bork (yes, I am incredibly simpleminded)
> :).
> apache server looks into the same table to find users homedir, and can
> prepend whatever USER_DIR is defined to be in the httpd.conf
> MTA also looks here to find where to put the mail (ie, /var/spool).
> 
> I'm imagining a table that looks something like this:
> 
> id              - Only inside the Database
> username        - For the authentication and location of mailfiles.
> password        - For authentication purposes
> home_dir        - user's homedir
> mail_dir        - Where to look for the users mailfile.
> 
> As I see it this is more or less what I need, anyone who has done this, or
> are in the process of doing so, I'd be more than happy to help in anyway I
> can.
> 
> Friendly Greetings
> S. P. Skou

Date: Thu, 07 Sep 2000 17:48:15 +0100
From: Fergal Daly <fergal at esatclear dot ie>
Subject: Re: Qpopper, Pam & Mysql  revisited

I've done this, it's not the cleanest patch in the world and you still have=
 
the problem of local delivery, how does sendmail or whatever look into the=
 
mysql table? I'm looking at switching to Exim instead of sendmail or maybe=
 
something else as it seems to be easier to extend and easier to query 
databases from - it's got a builtin Perl interpreter, so you can write your=
 
mail delivery rules in Perl, which is a big win in my book,

Fergal


At 15:33 07/09/00, Søren Peter Skou wrote:
>Okay, so far so good, I've got the pam_mysql working on FreeBSD with 3.1B10
>(Version correct this time :) and together with qpopper I'm now able to
>Authenticate users, but only if those users exists both in master.passwd=
 and
>in the SQL Database I've setup for the purpose. The password the system
>checks against is the one from SQL so that part is fine and dandy.
>
>I then stepped back and looked at what I was trying once again, and it
>became apparent that it wasn't what I wanted, instead I wanted something
>along these lines:
>
>MySQL (Or other SQL for that matter) contains the equivalent of
>master.passwd
>Pop3 server then knows where to look for it's mailfile for a given user,=
 ie.
>the user bork will have /var/mail/bork (yes, I am incredibly simpleminded)
>:).
>apache server looks into the same table to find users homedir, and can
>prepend whatever USER_DIR is defined to be in the httpd.conf
>MTA also looks here to find where to put the mail (ie, /var/spool).
>
>I'm imagining a table that looks something like this:
>
>id              - Only inside the Database
>username        - For the authentication and location of mailfiles.
>password        - For authentication purposes
>home_dir        - user's homedir
>mail_dir        - Where to look for the users mailfile.
>
>As I see it this is more or less what I need, anyone who has done this, or
>are in the process of doing so, I'd be more than happy to help in anyway I
>can.
>
>
>Friendly Greetings
>S. P. Skou



Date: Thu, 07 Sep 2000 13:06:27 -0400
From: Jack Sasportas <jack at innovativeinternet dot com>
Subject: Re: Qpopper, Pam & Mysql  revisited

I beleive your best option is postfix, I have been researching and postfix is
FAST, and WELL documented, so it's much better then sendmail, then you can make
it work with whatever popper you want.  I don't know enought to help, I actually
wanted to hire someone to do it for me because I don't have the time to get
involved in it....



Fergal Daly wrote:

> I've done this, it's not the cleanest patch in the world and you still have
> the problem of local delivery, how does sendmail or whatever look into the
> mysql table? I'm looking at switching to Exim instead of sendmail or maybe
> something else as it seems to be easier to extend and easier to query
> databases from - it's got a builtin Perl interpreter, so you can write your
> mail delivery rules in Perl, which is a big win in my book,
>
> Fergal
>
> At 15:33 07/09/00, Søren Peter Skou wrote:
> >Okay, so far so good, I've got the pam_mysql working on FreeBSD with 3.1B10
> >(Version correct this time :) and together with qpopper I'm now able to
> >Authenticate users, but only if those users exists both in master.passwd and
> >in the SQL Database I've setup for the purpose. The password the system
> >checks against is the one from SQL so that part is fine and dandy.
> >
> >I then stepped back and looked at what I was trying once again, and it
> >became apparent that it wasn't what I wanted, instead I wanted something
> >along these lines:
> >
> >MySQL (Or other SQL for that matter) contains the equivalent of
> >master.passwd
> >Pop3 server then knows where to look for it's mailfile for a given user, ie.
> >the user bork will have /var/mail/bork (yes, I am incredibly simpleminded)
> >:).
> >apache server looks into the same table to find users homedir, and can
> >prepend whatever USER_DIR is defined to be in the httpd.conf
> >MTA also looks here to find where to put the mail (ie, /var/spool).
> >
> >I'm imagining a table that looks something like this:
> >
> >id              - Only inside the Database
> >username        - For the authentication and location of mailfiles.
> >password        - For authentication purposes
> >home_dir        - user's homedir
> >mail_dir        - Where to look for the users mailfile.
> >
> >As I see it this is more or less what I need, anyone who has done this, or
> >are in the process of doing so, I'd be more than happy to help in anyway I
> >can.
> >
> >
> >Friendly Greetings
> >S. P. Skou

--
___________________________________________________________
Jack Sasportas
Innovative Internet Solutions
Phone 305.665.2500
Fax 305.665.2551
www.innovativeinternet.com
www.web56.net