The qpopper list archive ending on 13 Jul 2001


Topics covered in this issue include:

  1. Re: Security Question with temp files...
       Homer Wilson Smith <homer at lightlink dot com>
       Mon, 9 Jul 2001 14:36:29 -0400 (EDT)
  2. Re: Bulletin From line woes
       Homer Wilson Smith <homer at lightlink dot com>
       Mon, 9 Jul 2001 14:34:59 -0400 (EDT)
  3. Re: Security Question with temp files...
       Homer Wilson Smith <homer at lightlink dot com>
       Mon, 9 Jul 2001 15:26:58 -0400 (EDT)
  4. Re: Security Question with temp files...
       "A. M. Salim" <salim at localweb dot com>
       Mon, 9 Jul 2001 16:45:14 -0400 (EDT)
  5. Re: Security Question with temp files...
       Forrest Aldrich <forrie at forrie dot com>
       Mon, 09 Jul 2001 14:59:01 -0400
  6. Units for announce-login-delay option?
       Clifton Royston <cliftonr at lava dot net>
       Mon, 9 Jul 2001 11:46:25 -1000
  7. Re: Security Question with temp files...
       Clifton Royston <cliftonr at lava dot net>
       Mon, 9 Jul 2001 12:16:21 -1000
  8. Re: Security Question with temp files...
       "Kenneth Porter" <shiva at well dot com>
       Mon, 09 Jul 2001 15:19:51 -0700
  9. Re: Security Question with temp files...
       Homer Wilson Smith <homer at lightlink dot com>
       Mon, 9 Jul 2001 18:26:14 -0400 (EDT)
 10. Re: Security Question with temp files...
       Gregory Hicks <ghicks at cadence dot com>
       Mon, 9 Jul 2001 15:36:04 -0700 (PDT)
 11. Re: bug ?? in QPopper 4.0.3 regarding X-UIDL header
       Gustavo Viscaino <g_viscaino at yahoo dot com>
       Fri, 6 Jul 2001 12:39:53 -0700 (PDT)
 12. Re: Units for announce-login-delay option?
       Clifton Royston <cliftonr at lava dot net>
       Mon, 9 Jul 2001 12:06:36 -1000
 13. Re: Security Question with temp files...
       "A. M. Salim" <salim at localweb dot com>
       Tue, 10 Jul 2001 08:38:25 -0400 (EDT)
 14. Re: Security Question with temp files...
       Gregory Hicks <ghicks at cadence dot com>
       Tue, 10 Jul 2001 06:17:59 -0700 (PDT)
 15. --enable-home-dir-mail
       "Steven A. Fletcher" <stevenf at ad.netnorth.co dot uk>
       Tue, 10 Jul 2001 17:10:46 +0100
 16. switching ipop3d to qpopper
       "Dat B. Tran" <dtran at dli dot com>
       Tue, 10 Jul 2001 12:48:48 -0400
 17. RE: --enable-home-dir-mail
       "Steven A. Fletcher" <stevenf at ad.netnorth.co dot uk>
       Tue, 10 Jul 2001 17:50:13 +0100
 18. RE: --enable-home-dir-mail
       Forrest Aldrich <forrie at forrie dot com>
       Tue, 10 Jul 2001 13:23:53 -0400
 19. Re: --enable-home-dir-mail
       Clifton Royston <cliftonr at lava dot net>
       Tue, 10 Jul 2001 07:21:43 -1000
 20. RE: --enable-home-dir-mail
       "Matthew Koch" <mattkoch at genevaonline dot com>
       Tue, 10 Jul 2001 16:41:31 -0500
 21. Re: Poprelayd & Scanaddr & Qpopper
       James Sneeringer <jvs at ocslink dot com>
       Tue, 10 Jul 2001 17:59:35 -0500 (CDT)
 22. RE: --enable-home-dir-mail
       "Megias Sanchez, Jose Manuel" <JMegias at caja-granada dot es>
       Wed, 11 Jul 2001 08:41:00 +0200
 23. Re: Compiling QPopper 4.0.3
       Gustavo Viscaino <g_viscaino at yahoo dot com>
       Fri, 29 Jun 2001 06:41:45 -0700 (PDT)
 24. Feature suggestion with regard to leave-copy-on-server
       Forrest Aldrich <forrie at forrie dot com>
       Wed, 11 Jul 2001 13:00:54 -0400
 25. Re: Encrypted Private Key
       Randall Gellens <randy at qualcomm dot com>
       Wed, 11 Jul 2001 10:55:24 -0700
 26. Re: i/o Broken pipe
       Randall Gellens <randy at qualcomm dot com>
       Wed, 11 Jul 2001 10:56:48 -0700
 27. Re: Feature suggestion with regard to leave-copy-on-server
       Clifton Royston <cliftonr at lava dot net>
       Wed, 11 Jul 2001 08:08:21 -1000
 28. Re: Feature suggestion with regard to leave-copy-on-server
       Forrest Aldrich <forrie at forrie dot com>
       Wed, 11 Jul 2001 14:15:20 -0400
 29. Re: Feature suggestion with regard to leave-copy-on-server
       Clifton Royston <cliftonr at lava dot net>
       Wed, 11 Jul 2001 09:48:53 -1000
 30. Re: Feature suggestion with regard to leave-copy-on-server
       Forrest Aldrich <forrie at forrie dot com>
       Wed, 11 Jul 2001 15:52:28 -0400
 31. Re: Feature suggestion with regard to leave-copy-on-server
       Homer Wilson Smith <homer at lightlink dot com>
       Wed, 11 Jul 2001 16:36:22 -0400 (EDT)
 32. Re: Feature suggestion with regard to leave-copy-on-server
       Joseph S D Yao <jsdy at cospo.osis dot gov>
       Wed, 11 Jul 2001 16:49:03 -0400
 33. Re: Feature suggestion with regard to leave-copy-on-server
       Homer Wilson Smith <homer at lightlink dot com>
       Wed, 11 Jul 2001 20:10:55 -0400 (EDT)
 34. changing password via http
       "Alex M" <alex at myzona dot net>
       Wed, 11 Jul 2001 18:47:48 -0700
 35. Please disregard my last message about GCC and qpopper
       Gustavo Viscaino <g_viscaino at yahoo dot com>
       Thu, 12 Jul 2001 05:54:39 -0700 (PDT)
 36. Trace file fills up by turning on options
       "bobw" <wrf7 at qwest dot net>
       Thu, 12 Jul 2001 07:26:07 -0600
 37. Re: changing password via http
       Sylvain Robitaille <syl at alcor.concordia dot ca>
       Thu, 12 Jul 2001 12:19:54 -0400 (EDT)
 38. I/O error
       "Wayne Barber" <barberw at tidewater dot net>
       Thu, 12 Jul 2001 12:19:34 -0400
 39. Re: changing password via http
       Joseph S D Yao <jsdy at cospo.osis dot gov>
       Thu, 12 Jul 2001 15:04:59 -0400
 40. MySQL finally?
       =?iso-8859-1?Q?Philipp_Gaschütz?= <pg at philipp.de dot com>
       Fri, 13 Jul 2001 00:48:14 +0200
 41. Re: Trace file fills up by turning on options
       Clifton Royston <cliftonr at lava dot net>
       Thu, 12 Jul 2001 14:00:28 -1000
 42. building qpopper with NDS_AS authentication via PAM on aix
       PM WONG <pmwong at power25t.hkbu.edu dot hk>
       Fri, 13 Jul 2001 15:22:26 +0800 (HKT)
 43. Re: Trace file fills up by turning on options
       "Michael Kolos" <michael at colba dot net>
       Fri, 13 Jul 2001 09:20:56 -0400
 44. Re: changing password via http
       Roy <garlic at garlic dot com>
       Fri, 13 Jul 2001 08:33:00 -0700
 45. Problem with downloading big email
       "Dat B. Tran" <dtran at dli dot com>
       Fri, 13 Jul 2001 12:59:41 -0400
 46. Re: changing password via http
       Daniel Senie <dts at senie dot com>
       Fri, 13 Jul 2001 13:28:56 -0400
 47. Re: building qpopper with NDS_AS authentication via PAM on aix
       "Kenneth Porter" <shiva at well dot com>
       Fri, 13 Jul 2001 13:45:50 -0700
 48. Re: Problem with downloading big email
       Clifton Royston <cliftonr at lava dot net>
       Fri, 13 Jul 2001 13:29:54 -1000
 49. Re: Problem with downloading big email
       "Thomas Leiber" <leiber at nacamar dot net>
       Sat, 14 Jul 2001 03:02:00 +0200
 50. Re: Units for announce-login-delay option?
       Randall Gellens <randy at qualcomm dot com>
       Fri, 13 Jul 2001 19:22:11 -0700

Date: Mon, 9 Jul 2001 14:36:29 -0400 (EDT)
From: Homer Wilson Smith <homer at lightlink dot com>
Subject: Re: Security Question with temp files...

     It should have the same owner.group and perms as the
mail directory itself.

------------------------------------------------------------------------
Homer Wilson Smith   Clean Air, Clear Water,  Art Matrix - Lightlink
(607) 277-0959       A Green Earth and Peace. Internet Access, Ithaca NY
homer at lightlink.com  Is that too much to ask? http://www.lightlink dot com

On Mon, 9 Jul 2001, Jack Sasportas wrote:

> I added the option
>     --enable-cache-dir=/var/spool/mail/temp
> so that I can seperate all those .cache files from the mail spool files,
> but I started getting security errors when the users attempted to write
> the file as they popped their accounts, can you tell me what the propper
> security setting is for that new temp directory?
>
> PS I did try several including nobody:nobody etc, but no luck..
>
> THanks !
>
> --
> ___________________________________________________________
> Jack Sasportas
> Innovative Internet Solutions
> Phone 305.665.2500
> Fax 305.665.2551
> www.innovativeinternet.com
> www.web56.net
>
>


Date: Mon, 9 Jul 2001 14:34:59 -0400 (EDT)
From: Homer Wilson Smith <homer at lightlink dot com>
Subject: Re: Bulletin From line woes

> error message to the effect that the first line of the file is not a valid
> >From seperator. I've tried various permutations of the first line to no
> avail. I've even copied the header from the docs character for
> character (unless tabs are required somewhere). The From line is
> indeed the first line in the file. The entire message is shown below.
> Anyone have any ideas? I'm probably missing something simple
> here; I just can't see it.

     As I remember the From line code is very anal about spacing,
dates in particular have to be Jul  7 not Jul 7.  Take a look
at a real From line and match its spacings exactly.

     Homer
>
> >From glb Sat Jul 7 13:53:00 2001
> Date: Sat July 7 2001 13:00:00
> To: user@localhost
> From:POP Administrator <postmaster at Bomgardner dot net>
> Subject: Initial test bulletin.
>
> this is test bulletin one.
>


Date: Mon, 9 Jul 2001 15:26:58 -0400 (EDT)
From: Homer Wilson Smith <homer at lightlink dot com>
Subject: Re: Security Question with temp files...

    Usually its 1777, again it should be the same as
/var/spool/mail

    Homer

------------------------------------------------------------------------
Homer Wilson Smith   Clean Air, Clear Water,  Art Matrix - Lightlink
(607) 277-0959       A Green Earth and Peace. Internet Access, Ithaca NY
homer at lightlink.com  Is that too much to ask? http://www.lightlink dot com

On Mon, 9 Jul 2001, Jack Sasportas wrote:

> Let me re-phrase a little of the question, what is the best setting security
> wise to do this... like chmod 777 maybe too open...
>
> Thanks
>
> Jack Sasportas wrote:
>
> > I added the option
> >     --enable-cache-dir=/var/spool/mail/temp
> > so that I can seperate all those .cache files from the mail spool files,
> > but I started getting security errors when the users attempted to write
> > the file as they popped their accounts, can you tell me what the propper
> > security setting is for that new temp directory?
> >
> > PS I did try several including nobody:nobody etc, but no luck..
> >
> > THanks !
> >
> > --
> > ___________________________________________________________
> > Jack Sasportas
> > Innovative Internet Solutions
> > Phone 305.665.2500
> > Fax 305.665.2551
> > www.innovativeinternet.com
> > www.web56.net
>
> --
> ___________________________________________________________
> Jack Sasportas
> Innovative Internet Solutions
> Phone 305.665.2500
> Fax 305.665.2551
> www.innovativeinternet.com
> www.web56.net
>
>


Date: Mon, 9 Jul 2001 16:45:14 -0400 (EDT)
From: "A. M. Salim" <salim at localweb dot com>
Subject: Re: Security Question with temp files...

Hi,

>     Usually its 1777, again it should be the same as
> /var/spool/mail

Please note that this setting will make sendmail very unhappy.  Sendmail
does not like any dir to be group or world writeable.  You will need to
play with both ownership and group to keep both sendmail and Qpopper
happy.  Or you will need to "force" sendmail to be happy with these
settings (not advised and painful to do it).

best regards
Mike


Date: Mon, 09 Jul 2001 14:59:01 -0400
From: Forrest Aldrich <forrie at forrie dot com>
Subject: Re: Security Question with temp files...

>On this system it shows up in ls as:
>
>"drwxrwxrwt  root  wheel"
>
>Note the "t" indicating the sticky bit is set.
>   -- Clifton
[ ... ]

I have this on our system:

drwxrwxr-t   2 root  mail    1024 Jul  9 14:58 /path/to/pop

and it works, but doesn't permit world writes.


?




Date: Mon, 9 Jul 2001 11:46:25 -1000
From: Clifton Royston <cliftonr at lava dot net>
Subject: Units for announce-login-delay option?

  The "announce-login-delay" option, which sets the response for the
CAPA command, is supposed to be available via configuration files (set
announce-login-delay = xx) and via the command line.  (-elogin_delay=xx)

  What I don't see in the docs is what the units are.  I'd like to
request a minimum delay of 5 minutes for all customers (or those whose
clients honor it) and possibly set 10 or 15 minutes for some customers
who are persisting in generating a lot of load due to high POP
frequency.

  But I'm not sure if I should be setting minutes, as in
announce-login-delay = 5 
  or seconds, as in
announce-login-delay = 300 

  -- Clifton

-- 
 Clifton Royston  --  LavaNet Systems Architect --  cliftonr at lava dot net
   WWJD?   "JWRTFM!" - Scott Dorsey (kludge)   "JWG" - Eddie Aikau

Date: Mon, 9 Jul 2001 12:16:21 -1000
From: Clifton Royston <cliftonr at lava dot net>
Subject: Re: Security Question with temp files...

On Mon, Jul 09, 2001 at 02:59:01PM -0400, Forrest Aldrich wrote:
> >On this system it shows up in ls as:
> >
> >"drwxrwxrwt  root  wheel"
> >
> >Note the "t" indicating the sticky bit is set.
> >   -- Clifton
> [ ... ]
> 
> I have this on our system:
> 
> drwxrwxr-t   2 root  mail    1024 Jul  9 14:58 /path/to/pop
> 
> and it works, but doesn't permit world writes.

I should have mentioned that the specific settings on your /var/mail
are quite dependent on your mail delivery agent and its security/access
model.  Settings on a system where sendmail is used as the user
delivery agent will be quite different from those where procmail is
used for delivery, and other agents like postfix, qmail, etc. may be
different still.

I would think qpopper would have to work correctly with settings
equivalent to /var/mail, though, whatever that is using.
  -- Clifton

-- 
 Clifton Royston  --  LavaNet Systems Architect --  cliftonr at lava dot net
   WWJD?   "JWRTFM!" - Scott Dorsey (kludge)   "JWG" - Eddie Aikau

From: "Kenneth Porter" <shiva at well dot com>
Date: Mon, 09 Jul 2001 15:19:51 -0700
Subject: Re: Security Question with temp files...

On Mon, 9 Jul 2001 16:45:14 -0400 (EDT), A. M. Salim wrote:

>Please note that this setting will make sendmail very unhappy.  Sendmail
>does not like any dir to be group or world writeable.  You will need to
>play with both ownership and group to keep both sendmail and Qpopper
>happy.  Or you will need to "force" sendmail to be happy with these
>settings (not advised and painful to do it).

Note that for Red Hat, /var/spool/mail is 775, owner root.mail.
Mailboxes are 660, owner user.mail (where "user" is replaced by the
specific user of that mailbox). The directory lacks the sticky bit.

Ken
mailto:shiva at well dot com
http://www.sewingwitch.com/ken/
[If answering a mailing list posting, please don't cc me your reply. I'll take my answer on the list.]



Date: Mon, 9 Jul 2001 18:26:14 -0400 (EDT)
From: Homer Wilson Smith <homer at lightlink dot com>
Subject: Re: Security Question with temp files...

> >     Usually its 1777, again it should be the same as
> > /var/spool/mail
>
> Please note that this setting will make sendmail very unhappy.  Sendmail
> does not like any dir to be group or world writeable.  You will need to
> play with both ownership and group to keep both sendmail and Qpopper
> happy.  Or you will need to "force" sendmail to be happy with these
> settings (not advised and painful to do it).

     I disagree.  sendmail does not write to any mailbox, procmail
does.

     Our /var/spool/mail is drwxrwxrwt

     1777

     Been that way forever.

    Running Linux 2.0.38, qpop 4.0.3 and procmail 3.15.x

    sendmail 8.8.8


Date: Mon, 9 Jul 2001 15:36:04 -0700 (PDT)
From: Gregory Hicks <ghicks at cadence dot com>
Subject: Re: Security Question with temp files...

> Date: Mon, 9 Jul 2001 16:45:14 -0400 (EDT)
> From: "A. M. Salim" <salim at localweb dot com>
> 
> >     Usually its 1777, again it should be the same as
> > /var/spool/mail
> 
> Please note that this setting will make sendmail very unhappy.  Sendmail
> does not like any dir to be group or world writeable.  You will need to

I think that this should be....  Sendmail does not like any dir to be
group or world writeable when sendmail is expected to execute a program
from that directory.

/var/mail (AKA /var/spool/mail in BSD land) on almost *every* system
I've seen has had permissions of 1777.  I'm running the pop-drop dir
with 1777 permisisons (I know, I know!  Popper uses this directory and
not sendmail...)

> play with both ownership and group to keep both sendmail and Qpopper
> happy.  Or you will need to "force" sendmail to be happy with these
> settings (not advised and painful to do it).

The 'force' here comes from the permissions on things like
~user/.forward.  If this file does not have 644 permissions, sendmail
will refuse to send to it and complains bitterly.  If you want sendmail
to use the 664 or 666 permissions, you'll have to set 
"O DontBlameSendmail=Safe" in your sendmail.cf to tell sendmail that you
want to over-ride the file safty checks.

Regards,
Gregory Hicks

> 
> best regards
> Mike
> 

---------------------------------------------------------------------
Gregory Hicks                           | Principal Systems Engineer
Cadence Design Systems                  | Direct:   408.576.3609
555 River Oaks Pkwy M/S 6B1             | Fax:      408.894.3479
San Jose, CA 95134                      | Internet: ghicks at cadence dot com


Date: Fri, 6 Jul 2001 12:39:53 -0700 (PDT)
From: Gustavo Viscaino <g_viscaino at yahoo dot com>
Subject: Re: bug ?? in QPopper 4.0.3 regarding X-UIDL header

The weird UIDL characters are okay. They're following
the RFC correctly. The non-compliant one here seems to
be your webmail software. Are you SURE that the weird
UIDL characters are causing this? You should ask for a
patch from your vendor then (although I know this is
not that easy in the real world).

More info on the FAQ:

http://www.eudora.com/qpopper/faq.html#3.0.uidl

Now it really seems they shouldn't be appearing if you
used that option. Any ideas anyone?

Good luck,

Gustavo Viscaino

--- Josh Hillman <admin-maillist at talstar dot com> wrote:
> I'm new to this list and there doesn't appear to be
> any searching option for
> the list archives, so please excuse me if this issue
> has been mentioned
> before...
> 
> When issuing a
>   ./configure --disable-status
> during installation of QPopper 4.0.3, the resulting
> binary is different from
> using a plain "./configure" however the X-UIDL
> header still shows up in
> messages that have been popped.  It doesn't make any
> difference whether the
> mail client leaves the messages on the server or
> pulls them.  Any message
> handled by QPopper have the X-UIDL header followed
> by "garbage" text
> (assuming the garbage part is normal).
> The "--disable-status" and X-UIDL info is referenced
> on page 41 and 58 of
> the Qpopper Administrator's Guide--Qpopper Version
> 4.0.
> 
> We need to prevent that header from showing up in
> messages because
> Software.com's WebEdge 2.6.9a (webmail) has problems
> with messages that
> contain it.  The webmail cannot delete those
> messages, nor can it correctly
> reply to those messages.
> 
> System:  Solaris 8 on sparc
> 
> Installation steps that I used:
> 
> ftp://ftp.qualcomm.com/eudora/servers/unix/popper
> 
> cd /local/src
> gunzip qpopper4.0.3.tar.gz
> tar -xvf qpopper4.0.3.tar
> cd qpopper4.0.3
> 
> ORIGINAL installation on 7/4/01:
>   ./configure
>   make
>   make install
> 
> 
> NEW installation on 7/6/01:
> Backed up original install stuff:
>   cd /local/src
>   mv qpopper4.0.3 qpopper4.0.3.orig
>   mv /usr/local/sbin/popper
> /usr/local/sbin/popper.4.0.3.orig
> Start new installation:
>   tar xvf qpopper4.0.3.tar
>   cd qpopper4.0.3
>   ./configure --disable-status
>   make
>   make install
> 
> Are the binaries different?  Yes:
> 
> /usr/local/sbin/
> -rwxr-xr-x 1 130832 Jul  6 10:39
> /usr/local/sbin/popper
> -rwxr-xr-x 1 132648 Jul  4 19:55
> /usr/local/sbin/popper.4.0.3.orig
> 
> Example of the header that won't go away:
>   X-UIDL: <Ec"!-/S!!6Ch"!kGU!!
> 
> Thanks for any help/info...
> 
> Josh
> 


__________________________________________________
Do You Yahoo!?
Get personalized email addresses from Yahoo! Mail
http://personal.mail.yahoo.com/

Date: Mon, 9 Jul 2001 12:06:36 -1000
From: Clifton Royston <cliftonr at lava dot net>
Subject: Re: Units for announce-login-delay option?

On Mon, Jul 09, 2001 at 11:46:25AM -1000, Clifton Royston wrote:
>   The "announce-login-delay" option, which sets the response for the
> CAPA command, is supposed to be available via configuration files (set
> announce-login-delay = xx) and via the command line.  (-elogin_delay=xx)

P.S.

  Also, is there a list anywhere of what POP clients appear to actually
honor this "request" from the POP server?  I'm hoping at least some
reasonable proportion of our customers' mail programs will respect the
setting.

  -- Clifton

-- 
 Clifton Royston  --  LavaNet Systems Architect --  cliftonr at lava dot net
   WWJD?   "JWRTFM!" - Scott Dorsey (kludge)   "JWG" - Eddie Aikau

Date: Tue, 10 Jul 2001 08:38:25 -0400 (EDT)
From: "A. M. Salim" <salim at localweb dot com>
Subject: Re: Security Question with temp files...

Hi,

Sendmail 8.9.3 and up insists that /var/spool/mail not be group writeable
or world writeable.  In addition, procmail v3.1x and up insists that any
user's home directories (the one where .procmailrc or .forward would be
located) not be world or group writeable.  Sendmail uses procmail as the
local delivery agent by default.

Since you are using sendmail 8.8.8 you can get away with the 1777 setting
but newer versions of sendmail (currently 8.11.x) does not.

best regards
Mike Salim

> > >     Usually its 1777, again it should be the same as
> > > /var/spool/mail
> >
> > Please note that this setting will make sendmail very unhappy.  Sendmail
> > does not like any dir to be group or world writeable.  You will need to
> > play with both ownership and group to keep both sendmail and Qpopper
> > happy.  Or you will need to "force" sendmail to be happy with these
> > settings (not advised and painful to do it).
>      I disagree.  sendmail does not write to any mailbox, procmail
> does.
>      Our /var/spool/mail is drwxrwxrwt
>      1777
>      Been that way forever.
>     Running Linux 2.0.38, qpop 4.0.3 and procmail 3.15.x
>     sendmail 8.8.8


Date: Tue, 10 Jul 2001 06:17:59 -0700 (PDT)
From: Gregory Hicks <ghicks at cadence dot com>
Subject: Re: Security Question with temp files...

> Date: Tue, 10 Jul 2001 08:38:25 -0400 (EDT)
> From: "A. M. Salim" <salim at localweb dot com>

> 
> Sendmail 8.9.3 and up insists that /var/spool/mail not be group 
writeable
> or world writeable.  In addition, procmail v3.1x and up insists that 
any

This Sendmail behaviour has got to be because of options set at compile
time - or set in your sendmail.cf...  Probably the latter...

On our internal mail server, until just a few minutes ago, /var/mail
was set to 777 (no longer) and sendmail 8.10.1 has been happily
running since early March...  Most of our other mail hosts are 8.9.3
and use the same permissions on /var/mail...

Regards,
Gregory Hicks

> user's home directories (the one where .procmailrc or .forward would 
be
> located) not be world or group writeable.  Sendmail uses procmail as 
the
> local delivery agent by default.
> 
> Since you are using sendmail 8.8.8 you can get away with the 1777 
setting
> but newer versions of sendmail (currently 8.11.x) does not.
> 
> best regards
> Mike Salim
> 
> > > >     Usually its 1777, again it should be the same as
> > > > /var/spool/mail
> > >
> > > Please note that this setting will make sendmail very unhappy.  
Sendmail
> > > does not like any dir to be group or world writeable.  You will 
need to
> > > play with both ownership and group to keep both sendmail and 
Qpopper
> > > happy.  Or you will need to "force" sendmail to be happy with 
these
> > > settings (not advised and painful to do it).
> >      I disagree.  sendmail does not write to any mailbox, procmail
> > does.
> >      Our /var/spool/mail is drwxrwxrwt
> >      1777
> >      Been that way forever.
> >     Running Linux 2.0.38, qpop 4.0.3 and procmail 3.15.x
> >     sendmail 8.8.8
> 

---------------------------------------------------------------------
Gregory Hicks                           | Principal Systems Engineer
Cadence Design Systems                  | Direct:   408.576.3609
555 River Oaks Pkwy M/S 6B1             | Fax:      408.894.3479
San Jose, CA 95134                      | Internet: ghicks at cadence dot com


Subject: --enable-home-dir-mail
Date: Tue, 10 Jul 2001 17:10:46 +0100
From: "Steven A. Fletcher" <stevenf at ad.netnorth.co dot uk>

Hi all,

Could someone perhaps shed some light onto the "Insufficient room to
generate..." error message that I'm getting if I configure qpopper with
--enable-home-dir-mail ? Unfortunatley I can't make head nor tail of the
meanings behind the len[1-3] values that seem to spring the error
message from inside genpath.c.

Jul 10 16:55:39.740 2001 [22617] Qpopper ready for input from stevenf at
localhost [127.0.0.1] [popper.c:285]
Jul 10 16:55:39.740 2001
Jul 10 16:55:42.045 2001 [22617] Received: "pass xxxxxxxxx"
[pop_get_command.c:96]
Jul 10 16:55:42.045 2001
Jul 10 16:55:42.046 2001 [22617] ...checknonauthfile didn't match user
stevenf in file /etc/ftpusers [pop_pass.c:174]
Jul 10 16:55:42.046 2001
Jul 10 16:55:42.049 2001 [22617] ...built: (975) '/home/stevenf/'
[genpath.c:158]
Jul 10 16:55:42.049 2001
Jul 10 16:55:42.049 2001 [22617] Insufficient room to generate path for
user stevenf; need more than 961; have only 256 [genpath.c:
Jul 10 16:55:42.049 2001
Jul 10 16:55:42.049 2001 [22617] stevenf at localhost (127.0.0.1): -ERR
[SYS/TEMP] Unable to get spool name [pop_dropcopy.c:1212]
Jul 10 16:55:42.049 2001
Jul 10 16:55:52.059 2001 [22617] pass returned 0; CurrentState now halt
[popper.c:329]
Jul 10 16:55:52.059 2001
Jul 10 16:55:52.059 2001 [22617] +OK Pop server at
smtp0.test.netnorth.co.uk signing off. [popper.c:351]

Qpopper (4.0.3) was configured with: 
--enable-nonauth-file=/etc/ftpusers
--prefix=/usr/local --enable-debugging --enable-home-dir-mail, and 
it's
running under FreeBSD 4.3-RELEASE.

Thanks for any clues!

--
Steven Fletcher
stevenf at ad.netnorth.co dot uk

Date: Tue, 10 Jul 2001 12:48:48 -0400
From: "Dat B. Tran" <dtran at dli dot com>
Subject: switching ipop3d to qpopper

Hi,
         Does anyone know why the email clients download emails it already 
have after i switched from ipop3d server to Qpopper with SSL?  How do i 
prevent this?  Is there a work around for this problem?  Thanks!


Subject: RE: --enable-home-dir-mail
Date: Tue, 10 Jul 2001 17:50:13 +0100
From: "Steven A. Fletcher" <stevenf at ad.netnorth.co dot uk>

<grunt type="Tim Allen"> Urgh? </grunt>?

Barmy - I 'undid' Qpoppers' ./configure --enable-home-dir-mail option
and replaced it with the option in the config file, (set home-dir-mail 

".mail") and it's now (apparently) working fine!

Freaky stuff.

--
Steven Fletcher
stevenf at ad.netnorth.co dot uk

> -----Original Message-----
> From: Steven A. Fletcher 
> Sent: Tuesday, July 10, 2001 5:11 PM
> To: Subscribers of Qpopper
> Subject: --enable-home-dir-mail
> 
> 
> Hi all,
> 
> Could someone perhaps shed some light onto the "Insufficient room to
> generate..." error message that I'm getting if I configure 
> qpopper with
> --enable-home-dir-mail ? Unfortunatley I can't make head nor 
> tail of the
> meanings behind the len[1-3] values that seem to spring the error
> message from inside genpath.c.
> 
> Jul 10 16:55:39.740 2001 [22617] Qpopper ready for input from 
> stevenf at
> localhost [127.0.0.1] [popper.c:285]
> Jul 10 16:55:39.740 2001
> Jul 10 16:55:42.045 2001 [22617] Received: "pass xxxxxxxxx"
> [pop_get_command.c:96]
> Jul 10 16:55:42.045 2001
> Jul 10 16:55:42.046 2001 [22617] ...checknonauthfile didn't match user
> stevenf in file /etc/ftpusers [pop_pass.c:174]
> Jul 10 16:55:42.046 2001
> Jul 10 16:55:42.049 2001 [22617] ...built: (975) '/home/stevenf/'
> [genpath.c:158]
> Jul 10 16:55:42.049 2001
> Jul 10 16:55:42.049 2001 [22617] Insufficient room to 
> generate path for
> user stevenf; need more than 961; have only 256 [genpath.c:
> Jul 10 16:55:42.049 2001
> Jul 10 16:55:42.049 2001 [22617] stevenf at localhost 
> (127.0.0.1): -ERR
> [SYS/TEMP] Unable to get spool name [pop_dropcopy.c:1212]
> Jul 10 16:55:42.049 2001
> Jul 10 16:55:52.059 2001 [22617] pass returned 0; 
> CurrentState now halt
> [popper.c:329]
> Jul 10 16:55:52.059 2001
> Jul 10 16:55:52.059 2001 [22617] +OK Pop server at
> smtp0.test.netnorth.co.uk signing off. [popper.c:351]
> 
> Qpopper (4.0.3) was configured with: 
> --enable-nonauth-file=/etc/ftpusers
> --prefix=/usr/local --enable-debugging 
> --enable-home-dir-mail, and it's
> running under FreeBSD 4.3-RELEASE.
> 
> Thanks for any clues!
> 
> --
> Steven Fletcher
> stevenf at ad.netnorth.co dot uk
> 

Date: Tue, 10 Jul 2001 13:23:53 -0400
From: Forrest Aldrich <forrie at forrie dot com>
Subject: RE: --enable-home-dir-mail

What does this option provide for...



Date: Tue, 10 Jul 2001 07:21:43 -1000
From: Clifton Royston <cliftonr at lava dot net>
Subject: Re: --enable-home-dir-mail

On Tue, Jul 10, 2001 at 05:50:13PM +0100, Steven A. Fletcher wrote:
> <grunt type="Tim Allen"> Urgh? </grunt>?
> 
> Barmy - I 'undid' Qpoppers' ./configure --enable-home-dir-mail option
> and replaced it with the option in the config file, (set home-dir-mail 
> ".mail") and it's now (apparently) working fine!
> 
> Freaky stuff.

This sounds like a bug in the configure script.  Above you wrote
./configure --enable-home-dir-mail.  Did you actually use
--enable-home-dir-mail (no parameter) or --enable-home-dir-mail=.mail?

If it's the former, my guess is that it set a buffer-full of garbage as
the default mailbox name.  Must have been a large buffer-full at that!

> > Jul 10 16:55:42.049 2001 [22617] Insufficient room to 
> > generate path for
> > user stevenf; need more than 961; have only 256 [genpath.c:
> > Jul 10 16:55:42.049 2001

-- 
 Clifton Royston  --  LavaNet Systems Architect --  cliftonr at lava dot net
   WWJD?   "JWRTFM!" - Scott Dorsey (kludge)   "JWG" - Eddie Aikau

From: "Matthew Koch" <mattkoch at genevaonline dot com>
Subject: RE: --enable-home-dir-mail
Date: Tue, 10 Jul 2001 16:41:31 -0500

I had the same problem, and hacked up the genpath.c a bit. It appears as
though it has directly to do with how FreeBSD is grabbing the home dir path.
len[1-3] are lengths of strings. I believe FreeBSD is calculating the length
of the string path incorrectly. I think what I did to get it working was to
just disable the check on len[2] (if I remember correctly) and assume that
there would be no home directory longer than 256. Have fun.


Matthew Koch
Geneva On-Line Inc.



-----Original Message-----
From: Steven A. Fletcher [mailto:stevenf at ad.netnorth.co dot uk]
Sent: Tuesday, July 10, 2001 11:11 AM
To: Subscribers of Qpopper
Subject: --enable-home-dir-mail


Hi all,

Could someone perhaps shed some light onto the "Insufficient room to
generate..." error message that I'm getting if I configure qpopper with
--enable-home-dir-mail ? Unfortunatley I can't make head nor tail of the
meanings behind the len[1-3] values that seem to spring the error
message from inside genpath.c.

Jul 10 16:55:39.740 2001 [22617] Qpopper ready for input from stevenf at
localhost [127.0.0.1] [popper.c:285]
Jul 10 16:55:39.740 2001
Jul 10 16:55:42.045 2001 [22617] Received: "pass xxxxxxxxx"
[pop_get_command.c:96]
Jul 10 16:55:42.045 2001
Jul 10 16:55:42.046 2001 [22617] ...checknonauthfile didn't match user
stevenf in file /etc/ftpusers [pop_pass.c:174]
Jul 10 16:55:42.046 2001
Jul 10 16:55:42.049 2001 [22617] ...built: (975) '/home/stevenf/'
[genpath.c:158]
Jul 10 16:55:42.049 2001
Jul 10 16:55:42.049 2001 [22617] Insufficient room to generate path for
user stevenf; need more than 961; have only 256 [genpath.c:
Jul 10 16:55:42.049 2001
Jul 10 16:55:42.049 2001 [22617] stevenf at localhost (127.0.0.1): -ERR
[SYS/TEMP] Unable to get spool name [pop_dropcopy.c:1212]
Jul 10 16:55:42.049 2001
Jul 10 16:55:52.059 2001 [22617] pass returned 0; CurrentState now halt
[popper.c:329]
Jul 10 16:55:52.059 2001
Jul 10 16:55:52.059 2001 [22617] +OK Pop server at
smtp0.test.netnorth.co.uk signing off. [popper.c:351]

Qpopper (4.0.3) was configured with: --enable-nonauth-file=/etc/ftpusers
--prefix=/usr/local --enable-debugging --enable-home-dir-mail, and it's
running under FreeBSD 4.3-RELEASE.

Thanks for any clues!

--
Steven Fletcher
stevenf at ad.netnorth.co dot uk


Date: Tue, 10 Jul 2001 17:59:35 -0500 (CDT)
From: James Sneeringer <jvs at ocslink dot com>
Subject: Re: Poprelayd & Scanaddr & Qpopper

On Mon, 9 Jul 2001, Matt Goyer wrote:
| Does anyone have a scanaddr that works with Qpopper 4.0.x when
| ./configured with --enable-log-login?

I did the reverse and specified a log-login format that poprelayd can
understand.  I use a configuration file, but I think you can specify the
format on the command line as well.

set log-login = '(v%0) POP login by user "%1" at (%2) %3'

-James


From: "Megias Sanchez, Jose Manuel" <JMegias at caja-granada dot es>
Subject: RE: --enable-home-dir-mail
Date: Wed, 11 Jul 2001 08:41:00 +0200

	Hello I have the same trouble and I have
--enable-home-dir-mail=.mail in configure.


	Greetings.

-----Mensaje original-----
De: Clifton Royston [mailto:cliftonr at lava dot net]
Enviado el: martes 10 de julio de 2001 19:22
Para: Steven A. Fletcher
CC: qpopper at lists.pensive dot org
Asunto: Re: --enable-home-dir-mail


On Tue, Jul 10, 2001 at 05:50:13PM +0100, Steven A. Fletcher wrote:
> <grunt type="Tim Allen"> Urgh? </grunt>?
> 
> Barmy - I 'undid' Qpoppers' ./configure --enable-home-dir-mail option
> and replaced it with the option in the config file, (set home-dir-mail 
> ".mail") and it's now (apparently) working fine!
> 
> Freaky stuff.

This sounds like a bug in the configure script.  Above you wrote
./configure --enable-home-dir-mail.  Did you actually use
--enable-home-dir-mail (no parameter) or --enable-home-dir-mail=.mail?

If it's the former, my guess is that it set a buffer-full of garbage as
the default mailbox name.  Must have been a large buffer-full at that!

> > Jul 10 16:55:42.049 2001 [22617] Insufficient room to 
> > generate path for
> > user stevenf; need more than 961; have only 256 [genpath.c:
> > Jul 10 16:55:42.049 2001

-- 
 Clifton Royston  --  LavaNet Systems Architect --  cliftonr at lava dot net
   WWJD?   "JWRTFM!" - Scott Dorsey (kludge)   "JWG" - Eddie Aikau

Date: Fri, 29 Jun 2001 06:41:45 -0700 (PDT)
From: Gustavo Viscaino <g_viscaino at yahoo dot com>
Subject: Re: Compiling QPopper 4.0.3

I'm running on Mandrake 8 and got the same error. I
tried compiling with gcc 2.91.66 (egcs 2.91.66), and
with gcc 2.96 (both are included with Mandrake) and
got the same errors. It seems that tempnam() is not
very secure and gcc went suddenly paranoid about it.
;) Do you guys know any gcc flag to avoid this
checking?? Is qpopper 4.04 going to use mkstemp()
instead? Anyone else having this problem?

You could try to downgrade or install and older gcc
version to compile it (I know it's dirty, but it's a
solution for now). I don't know what the implications
of changing the function itself to mktemp() or
mkstemp() would be to qpopper as a whole, so I won't
mess with that myself...

Good luck,

Gustavo
--- Kent Morris <gaunt at cophq dot org> wrote:
> Sorry to post this again so soon, but I would like
> to get my server up as
> soon as possible, and I'm getting pretty discouraged
> with this whole
> situation.  Somebody out there must have attempted
> to compile 4.0.3 with a
> newer version of gcc (mine is 2.9.6 I believe) and
> gotten the error about
> the use of tempnam() in maillock.c.  If anybody has
> a solution to this
> problem, could you please let me know.
> 
> 
> Thanks,
> 
> Kent Morris
> 


__________________________________________________
Do You Yahoo!?
Get personalized email addresses from Yahoo! Mail
http://personal.mail.yahoo.com/

Date: Wed, 11 Jul 2001 13:00:54 -0400
From: Forrest Aldrich <forrie at forrie dot com>
Subject: Feature suggestion with regard to leave-copy-on-server

I know there is a ./configure switch to disable this -- however, it might 
be desirable to have a config file to allow certain users to 
leave-a-copy-on-server and others not to.   I know that adds another level 
of complexity, but it would be useful.


_F


Date: Wed, 11 Jul 2001 10:55:24 -0700
From: Randall Gellens <randy at qualcomm dot com>
Subject: Re: Encrypted Private Key

At 12:06 PM -0400 7/9/01, Matt Goyer wrote:

>  Is it at all possible to use an encrypted private key with Qpopper?

Not currently.  There isn't much point, because if you encrypt the 
private key, you'd have to tell Qpopper the passphrase, and then 
you'd have the same situation as if the key is unencrypted.

Date: Wed, 11 Jul 2001 10:56:48 -0700
From: Randall Gellens <randy at qualcomm dot com>
Subject: Re: i/o Broken pipe

At 8:44 AM -0600 7/9/01, bobw wrote:

>  Was there ever an answer to why this error occurs?

Yes, it's been answered many times.

>  If yes, can someone
>  please let me know which archive.

I'm not sure.  The archives aren't as easy to search as they could be.

>
>  I/O error flushing output to client ....Broken pipe (32)

It means the client disconnected without saying "QUIT".


Date: Wed, 11 Jul 2001 08:08:21 -1000
From: Clifton Royston <cliftonr at lava dot net>
Subject: Re: Feature suggestion with regard to leave-copy-on-server

On Wed, Jul 11, 2001 at 01:00:54PM -0400, Forrest Aldrich wrote:
> I know there is a ./configure switch to disable this -- however, it might 
> be desirable to have a config file to allow certain users to 
> leave-a-copy-on-server and others not to.   I know that adds another level 
> of complexity, but it would be useful.

Boy, I'll say!  If it could go in the per-user settings file, that
would be just as good IMHO.

  -- Clifton

-- 
 Clifton Royston  --  LavaNet Systems Architect --  cliftonr at lava dot net
   WWJD?   "JWRTFM!" - Scott Dorsey (kludge)   "JWG" - Eddie Aikau

Date: Wed, 11 Jul 2001 14:15:20 -0400
From: Forrest Aldrich <forrie at forrie dot com>
Subject: Re: Feature suggestion with regard to leave-copy-on-server

My biggest reason for this is that we have some users who connect via 
dialup, and continue to complain that their connection drops -- and after X 
times explaining to them that their mail file is 10meg (etc), they continue 
the same pattern.

In a case like that I just assume have a config file

[ /usr/local/etc/qpopper.conf ]

leavemailauth:  user1, user2, user3

And the rest would not be permitted to leave-copy-on-server.

In fact, it would be a great place to tune other behavior of qpopper, 
perhaps as needed.



_F


At 08:08 AM 7/11/2001 -1000, Clifton Royston wrote:
>On Wed, Jul 11, 2001 at 01:00:54PM -0400, Forrest Aldrich wrote:
> > I know there is a ./configure switch to disable this -- however, it might
> > be desirable to have a config file to allow certain users to
> > leave-a-copy-on-server and others not to.   I know that adds another level
> > of complexity, but it would be useful.
>
>Boy, I'll say!  If it could go in the per-user settings file, that
>would be just as good IMHO.
>
>   -- Clifton
>
>--
>  Clifton Royston  --  LavaNet Systems Architect --  cliftonr at lava dot net
>    WWJD?   "JWRTFM!" - Scott Dorsey (kludge)   "JWG" - Eddie Aikau


Date: Wed, 11 Jul 2001 09:48:53 -1000
From: Clifton Royston <cliftonr at lava dot net>
Subject: Re: Feature suggestion with regard to leave-copy-on-server

On Wed, Jul 11, 2001 at 02:15:20PM -0400, Forrest Aldrich wrote:
> My biggest reason for this is that we have some users who connect via 
> dialup, and continue to complain that their connection drops -- and after X 
> times explaining to them that their mail file is 10meg (etc), they continue 
> the same pattern.
> 
> In a case like that I just assume have a config file
> 
> [ /usr/local/etc/qpopper.conf ]
 
This of course you can do just by pointing qpopper at it from the
command line:  -f /usr/local/etc/qpopper.conf

> leavemailauth:  user1, user2, user3
>
> And the rest would not be permitted to leave-copy-on-server.
 
  Hmmm, I like the intent.  A problem I see is that this doesn't seem
like it would scale very well to large numbers of users.  It also
doesn't seem to generalise for the reverse (which I'd prefer) of
denying leave-mail to a small list of users, or generalise for the
other types of parameters one might want to set on a per-user basis.

  I'd really like to come up with a more general solution that fits the
current clean config file design, but allows one to adjust a range of
settings per user from a centralised file or files instead of one per
user.  I am thinking about a possible way to implement that with clean
syntax and acceptable performance.

  -- Clifton

-- 
 Clifton Royston  --  LavaNet Systems Architect --  cliftonr at lava dot net
   WWJD?   "JWRTFM!" - Scott Dorsey (kludge)   "JWG" - Eddie Aikau

Date: Wed, 11 Jul 2001 15:52:28 -0400
From: Forrest Aldrich <forrie at forrie dot com>
Subject: Re: Feature suggestion with regard to leave-copy-on-server

Maybe a special Unix "group" could be configured -- and then qpopper would 
refuse to leave-copy-on-server for them only?


_F


At 09:48 AM 7/11/2001 -1000, Clifton Royston wrote:
>On Wed, Jul 11, 2001 at 02:15:20PM -0400, Forrest Aldrich wrote:
> > My biggest reason for this is that we have some users who connect via
> > dialup, and continue to complain that their connection drops -- and 
> after X
> > times explaining to them that their mail file is 10meg (etc), they 
> continue
> > the same pattern.
> >
> > In a case like that I just assume have a config file
> >
> > [ /usr/local/etc/qpopper.conf ]
>
>This of course you can do just by pointing qpopper at it from the
>command line:  -f /usr/local/etc/qpopper.conf
>
> > leavemailauth:  user1, user2, user3
> >
> > And the rest would not be permitted to leave-copy-on-server.
>
>   Hmmm, I like the intent.  A problem I see is that this doesn't seem
>like it would scale very well to large numbers of users.  It also
>doesn't seem to generalise for the reverse (which I'd prefer) of
>denying leave-mail to a small list of users, or generalise for the
>other types of parameters one might want to set on a per-user basis.
>
>   I'd really like to come up with a more general solution that fits the
>current clean config file design, but allows one to adjust a range of
>settings per user from a centralised file or files instead of one per
>user.  I am thinking about a possible way to implement that with clean
>syntax and acceptable performance.
>
>   -- Clifton
>
>--
>  Clifton Royston  --  LavaNet Systems Architect --  cliftonr at lava dot net
>    WWJD?   "JWRTFM!" - Scott Dorsey (kludge)   "JWG" - Eddie Aikau


Date: Wed, 11 Jul 2001 16:36:22 -0400 (EDT)
From: Homer Wilson Smith <homer at lightlink dot com>
Subject: Re: Feature suggestion with regard to leave-copy-on-server

    I would prefer a database lookup, so that the user could
have access to a web page interface to enable themselves to
leave mail on server.  At least it would be a proactive
choice rather than an accidental install choice that takes
up endless tech support hours to undo it.

    Homer

------------------------------------------------------------------------
Homer Wilson Smith   Clean Air, Clear Water,  Art Matrix - Lightlink
(607) 277-0959       A Green Earth and Peace. Internet Access, Ithaca NY
homer at lightlink.com  Is that too much to ask? http://www.lightlink dot com

On Wed, 11 Jul 2001, Forrest Aldrich wrote:

> Maybe a special Unix "group" could be configured -- and then qpopper would
> refuse to leave-copy-on-server for them only?
>
>
> _F
>
>
> At 09:48 AM 7/11/2001 -1000, Clifton Royston wrote:
> >On Wed, Jul 11, 2001 at 02:15:20PM -0400, Forrest Aldrich wrote:
> > > My biggest reason for this is that we have some users who connect via
> > > dialup, and continue to complain that their connection drops -- and
> > after X
> > > times explaining to them that their mail file is 10meg (etc), they
> > continue
> > > the same pattern.
> > >
> > > In a case like that I just assume have a config file
> > >
> > > [ /usr/local/etc/qpopper.conf ]
> >
> >This of course you can do just by pointing qpopper at it from the
> >command line:  -f /usr/local/etc/qpopper.conf
> >
> > > leavemailauth:  user1, user2, user3
> > >
> > > And the rest would not be permitted to leave-copy-on-server.
> >
> >   Hmmm, I like the intent.  A problem I see is that this doesn't seem
> >like it would scale very well to large numbers of users.  It also
> >doesn't seem to generalise for the reverse (which I'd prefer) of
> >denying leave-mail to a small list of users, or generalise for the
> >other types of parameters one might want to set on a per-user basis.
> >
> >   I'd really like to come up with a more general solution that fits the
> >current clean config file design, but allows one to adjust a range of
> >settings per user from a centralised file or files instead of one per
> >user.  I am thinking about a possible way to implement that with clean
> >syntax and acceptable performance.
> >
> >   -- Clifton
> >
> >--
> >  Clifton Royston  --  LavaNet Systems Architect --  cliftonr at lava dot net
> >    WWJD?   "JWRTFM!" - Scott Dorsey (kludge)   "JWG" - Eddie Aikau
>


Date: Wed, 11 Jul 2001 16:49:03 -0400
From: Joseph S D Yao <jsdy at cospo.osis dot gov>
Subject: Re: Feature suggestion with regard to leave-copy-on-server

On Wed, Jul 11, 2001 at 04:36:22PM -0400, Homer Wilson Smith wrote:
>     I would prefer a database lookup, so that the user could
> have access to a web page interface to enable themselves to
> leave mail on server.  At least it would be a proactive
> choice rather than an accidental install choice that takes
> up endless tech support hours to undo it.
> 
>     Homer

This is already a user choice on Netscape Messenger, and I assume other
POP clients.  The point seems to be to disable this choice for certain
users [or for "all but" certain users].  Right now, the compile-time
choice is allow all or allow nobody.

Eh?

-- 
Joe Yao				jsdy at cospo.osis dot gov - Joseph S. D. Yao
OSIS Center Computer Support					EMT-B
-----------------------------------------------------------------------
This message is not an official statement of COSPO policies.

Date: Wed, 11 Jul 2001 20:10:55 -0400 (EDT)
From: Homer Wilson Smith <homer at lightlink dot com>
Subject: Re: Feature suggestion with regard to leave-copy-on-server

> This is already a user choice on Netscape Messenger, and I assume other
> POP clients.  The point seems to be to disable this choice for certain
> users [or for "all but" certain users].  Right now, the compile-time
> choice is allow all or allow nobody.
>
> Eh?

     Yes, we would love to be able to deny for all except...

     Then the service could be sold as a value add, or not
as the case may be, but it would get rid of the incompetent
installing clients with it on by default.

     Homer


From: "Alex M" <alex at myzona dot net>
Subject: changing password via http
Date: Wed, 11 Jul 2001 18:47:48 -0700

Hello,

Probably most of you here work with MTAs, such as Sendmail. The question is,
if i gave a user a mail only account, no shell... how can he change his own
password if he wants to, are there any ways to do it via web, perhaps perl
scripts?

-=-=-=-
Regards,

Alex M aka TZapper
alex at myzona dot net



Date: Thu, 12 Jul 2001 05:54:39 -0700 (PDT)
From: Gustavo Viscaino <g_viscaino at yahoo dot com>
Subject: Please disregard my last message about GCC and qpopper

I sent a message shortly after asking for it to be
disregarded but it somehow got stuck into Yahoo's
queue and wouldn't go out. So, don't bother with my
post. GCC complained about the compilation but
compiled it fine in the end.

Sorry for the confusion,

Gustavo Viscaino

__________________________________________________
Do You Yahoo!?
Get personalized email addresses from Yahoo! Mail
http://personal.mail.yahoo.com/

From: "bobw" <wrf7 at qwest dot net>
Subject: Trace file fills up by turning on options
Date: Thu, 12 Jul 2001 07:26:07 -0600

Setting options via the pop.conf file in qpopper 4.0.3 causes the trace file
to fill up with the option information. Example of log file right after
turning on the option.:
Jul 12 09:20:04.299 2001 [11789] Set chunky-writes to TLS (1)
Jul 12 09:20:04.299 2001
Jul 12 09:20:05.017 2001 [11790] Set chunky-writes to TLS (1)
etc,

This did not happen in version 3. Is there a way to turn this off and still
use the trace file?

Thanks,
bobw


Date: Thu, 12 Jul 2001 12:19:54 -0400 (EDT)
From: Sylvain Robitaille <syl at alcor.concordia dot ca>
Subject: Re: changing password via http

Alex M wrote:

> if i gave a user a mail only account, no shell... how can he change
> his own password if he wants to, are there any ways to do it via web,
> perhaps perl scripts?

Look for a package called "poppassd".  I believe you'll find it on
Qualcomm's FTP server.

I hope that helps...

-- 
----------------------------------------------------------------------
Sylvain Robitaille                              syl at alcor.concordia dot ca
 
Systems analyst                                   Concordia University
Instructional & Information Technology        Montreal, Quebec, Canada
----------------------------------------------------------------------

From: "Wayne Barber" <barberw at tidewater dot net>
Date: Thu, 12 Jul 2001 12:19:34 -0400
Subject: I/O error

Hi,
I just recently tried upgrading from 3.1.2 to 4.0.3. Everything seemed 
to work but many users generated an I/O error:
I/O error flushing output to client user at computer.tidewater.net 
[111.111.111.111]: Operation not permitted (1)

(Computer names and numbers changed ...) I looked through the 
FAQ and the documentation and couldn't find this. Any ideas?

This is running on RedHat 5.2 using /var/spool/mail. Qpopper was 
compiled using server mode. If you need more info, let me know.


Wayne Barber
Coastal Telco Services

Date: Thu, 12 Jul 2001 15:04:59 -0400
From: Joseph S D Yao <jsdy at cospo.osis dot gov>
Subject: Re: changing password via http

On Wed, Jul 11, 2001 at 06:47:48PM -0700, Alex M wrote:
> Hello,
> 
> Probably most of you here work with MTAs, such as Sendmail. The question is,
> if i gave a user a mail only account, no shell... how can he change his own
> password if he wants to, are there any ways to do it via web, perhaps perl
> scripts?

A quick search for "Web password" on freshmeat.net shows more than I
can list here.

-- 
Joe Yao				jsdy at cospo.osis dot gov - Joseph S. D. Yao
OSIS Center Computer Support					EMT-B
-----------------------------------------------------------------------
This message is not an official statement of COSPO policies.

From: =?iso-8859-1?Q?Philipp_Gaschütz?= <pg at philipp.de dot com>
Subject: MySQL finally?
Date: Fri, 13 Jul 2001 00:48:14 +0200

Hey all!

Does anyone know whether there's a patch to Qpopper 4 for MySQL
authentication?

I was just looking at the one from "http://www.netd.co.za/mysql-mail/" but
that's - as you probably know - only for Qpopper 3...

Thanks in advance,

Philipp


Date: Thu, 12 Jul 2001 14:00:28 -1000
From: Clifton Royston <cliftonr at lava dot net>
Subject: Re: Trace file fills up by turning on options

On Thu, Jul 12, 2001 at 07:26:07AM -0600, bobw wrote:
> Setting options via the pop.conf file in qpopper 4.0.3 causes the trace file
> to fill up with the option information. Example of log file right after
> turning on the option.:
> Jul 12 09:20:04.299 2001 [11789] Set chunky-writes to TLS (1)
> Jul 12 09:20:04.299 2001
> Jul 12 09:20:05.017 2001 [11790] Set chunky-writes to TLS (1)
> etc,
> 
> This did not happen in version 3. Is there a way to turn this off and still
> use the trace file?

I never tried it with version 3, but I had assumed the trace file
option was meant purely for debugging a single session at a time; it
captures and writes a ton of information on even a single POP session,
including the setting of each option followed by the progress through
each state of the POP transaction.

It looks there like you have two fresh connections a fraction of a
second apart, trying to write to the same trace file.  Are you running
it on a server where you are getting many concurrent POP sessions?  If
so, maybe there is some better way to get a more limited volume of info
you want, or to turn trace on only for a particular session while you
debug it.

  -- Clifton

-- 
 Clifton Royston  --  LavaNet Systems Architect --  cliftonr at lava dot net
   WWJD?   "JWRTFM!" - Scott Dorsey (kludge)   "JWG" - Eddie Aikau

Date: Fri, 13 Jul 2001 15:22:26 +0800 (HKT)
From: PM WONG <pmwong at power25t.hkbu.edu dot hk>
Subject: building qpopper with NDS_AS authentication via PAM on aix

Our AIX server which has been using qpopper 4.0.3 for a few
weeks now, is going to change its password authentication 
method using DCE (Distributed Computing Environment
authentication), the value for its SYSTEM param. in /etc/security/user

That is , by not looking at its own local (/etc/security/passwd) file.
It is to use Novell's NDS-AS service thru PAM

Now the native pop3d server on AIX works fine even with the
method changed (i.e. the /etc/security/user file changed to DCE)

But the qpopper doesn't
Looks likes it needs re-compiling using the configure option
 --with-pam=service-name

But what should i define 
service-name as ?
and do i need a file under /ect/pam.d (and what are its contents?)




From: "Michael Kolos" <michael at colba dot net>
Subject: Re: Trace file fills up by turning on options
Date: Fri, 13 Jul 2001 09:20:56 -0400

It seems to parse it in order of the config file - so by putting the set
tracefile= option at the bottom of the config file, you will get rid of the
"setting chunky-writes.." etc. lines.  It still will put in 2 lines for
every connection, however - one for enabling the tracefile (which is just a
timestamp) and then the timestamp followed by the stats (If you have the
stats enabled).
So moving the "set tracefile" option around is the key to controlling how
much output makes it into the tracefile.

Michael Kolos
Administrateur de Réseaux
Network Administrator
ColbaNet Inc

----- Original Message -----
From: "Clifton Royston" <cliftonr at lava dot net>
To: "bobw" <wrf7 at qwest dot net>
Cc: "Subscribers of Qpopper" <qpopper at lists.pensive dot org>
Sent: Thursday, July 12, 2001 8:00 PM
Subject: Re: Trace file fills up by turning on options


> On Thu, Jul 12, 2001 at 07:26:07AM -0600, bobw wrote:
> > Setting options via the pop.conf file in qpopper 4.0.3 causes the trace
file
> > to fill up with the option information. Example of log file right after
> > turning on the option.:
> > Jul 12 09:20:04.299 2001 [11789] Set chunky-writes to TLS (1)
> > Jul 12 09:20:04.299 2001
> > Jul 12 09:20:05.017 2001 [11790] Set chunky-writes to TLS (1)
> > etc,
> >
> > This did not happen in version 3. Is there a way to turn this off and
still
> > use the trace file?
>
> I never tried it with version 3, but I had assumed the trace file
> option was meant purely for debugging a single session at a time; it
> captures and writes a ton of information on even a single POP session,
> including the setting of each option followed by the progress through
> each state of the POP transaction.
>
> It looks there like you have two fresh connections a fraction of a
> second apart, trying to write to the same trace file.  Are you running
> it on a server where you are getting many concurrent POP sessions?  If
> so, maybe there is some better way to get a more limited volume of info
> you want, or to turn trace on only for a particular session while you
> debug it.
>
>   -- Clifton
>
> --
>  Clifton Royston  --  LavaNet Systems Architect --  cliftonr at lava dot net
>    WWJD?   "JWRTFM!" - Scott Dorsey (kludge)   "JWG" - Eddie Aikau
>


Date: Fri, 13 Jul 2001 08:33:00 -0700
From: Roy <garlic at garlic dot com>
Subject: Re: changing password via http

One trick is to make the shell point to the passwd comamnd.  The can only change
their password then


Alex M wrote:

> Hello,
>
> Probably most of you here work with MTAs, such as Sendmail. The question is,
> if i gave a user a mail only account, no shell... how can he change his own
> password if he wants to, are there any ways to do it via web, perhaps perl
> scripts?
>
> -=-=-=-
> Regards,
>
> Alex M aka TZapper
> alex at myzona dot net


Date: Fri, 13 Jul 2001 12:59:41 -0400
From: "Dat B. Tran" <dtran at dli dot com>
Subject: Problem with downloading big email

Hi,
	It seems that Qpopper drop the connection whenever the client is 
downloading a big email even though the bandwidth is fast.  Does anyone 
know why this happen?  thanks you for your comments.


Date: Fri, 13 Jul 2001 13:28:56 -0400
From: Daniel Senie <dts at senie dot com>
Subject: Re: changing password via http

At 11:33 AM 7/13/01, Roy wrote:
>One trick is to make the shell point to the passwd comamnd.  The can only 
>change
>their password then

While this does work, it means your users are changing their passwords in 
the clear. If you're using POP wihout STARTTLS, I guess there's no real 
difference in security, but if you're using TLS, I'd recommend against this 
approach. Using SSH would help, but then that's one more thing to explain 
to users. Better to build something web based, and buy a certificate (or 
use the same one as for TLS with qpopper).
-----------------------------------------------------------------
Daniel Senie                                        dts at senie dot com
Amaranth Networks Inc.                    http://www.amaranth.com


From: "Kenneth Porter" <shiva at well dot com>
Date: Fri, 13 Jul 2001 13:45:50 -0700
Subject: Re: building qpopper with NDS_AS authentication via PAM on aix

On Fri, 13 Jul 2001 15:22:26 +0800 (HKT), PM WONG wrote:

>But the qpopper doesn't
>Looks likes it needs re-compiling using the configure option
> --with-pam=service-name
>
>But what should i define 
>service-name as ?
>and do i need a file under /ect/pam.d (and what are its contents?)

Right. On my Red Hat system, I use a service name of pop3 and install a
file as /etc/pam.d/pop3.

Note that while PAM is used for the password check, other account
information (eg. home directory, uid/gid) is still fetched from
/etc/passwd.

Ken
mailto:shiva at well dot com
http://www.sewingwitch.com/ken/
[If answering a mailing list posting, please don't cc me your reply. I'll take my answer on the list.]



Date: Fri, 13 Jul 2001 13:29:54 -1000
From: Clifton Royston <cliftonr at lava dot net>
Subject: Re: Problem with downloading big email

On Fri, Jul 13, 2001 at 12:59:41PM -0400, Dat B. Tran wrote:
> Hi,
> 	It seems that Qpopper drop the connection whenever the client is 
> downloading a big email even though the bandwidth is fast.  Does anyone 
> know why this happen?  thanks you for your comments.

No, but you might try to packet-sniff and verify whether it is Qpopper
or the client dropping the connection.  Some clients will definitely
flake out on certain emails.
  -- Clifton

-- 
 Clifton Royston  --  LavaNet Systems Architect --  cliftonr at lava dot net
   WWJD?   "JWRTFM!" - Scott Dorsey (kludge)   "JWG" - Eddie Aikau

From: "Thomas Leiber" <leiber at nacamar dot net>
Subject: Re: Problem with downloading big email
Date: Sat, 14 Jul 2001 03:02:00 +0200

Hi there,

bandwith is fast stands for nothing. No facts about the load.

Many years ago, there was a FTP thing.

Sorry about those internet details.

Tom


----- Original Message ----- 
From: "Clifton Royston" <cliftonr at lava dot net>
To: "Dat B. Tran" <dtran at dli dot com>
Cc: "Subscribers of Qpopper" <qpopper at lists.pensive dot org>
Sent: Saturday, July 14, 2001 1:29 AM
Subject: Re: Problem with downloading big email


> On Fri, Jul 13, 2001 at 12:59:41PM -0400, Dat B. Tran wrote:
> > Hi,
> > It seems that Qpopper drop the connection whenever the client is 
> > downloading a big email even though the bandwidth is fast.  Does anyone 
> > know why this happen?  thanks you for your comments.
> 
> No, but you might try to packet-sniff and verify whether it is Qpopper
> or the client dropping the connection.  Some clients will definitely
> flake out on certain emails.
>   -- Clifton
> 
> -- 
>  Clifton Royston  --  LavaNet Systems Architect --  cliftonr at lava dot net
>    WWJD?   "JWRTFM!" - Scott Dorsey (kludge)   "JWG" - Eddie Aikau
> 


Date: Fri, 13 Jul 2001 19:22:11 -0700
From: Randall Gellens <randy at qualcomm dot com>
Subject: Re: Units for announce-login-delay option?

At 12:06 PM -1000 7/9/01, Clifton Royston wrote:

>  On Mon, Jul 09, 2001 at 11:46:25AM -1000, Clifton Royston wrote:
>   >   The "announce-login-delay" option, which sets the response for the

It's seconds.  (See RFC 2449 <ftp://ftp.isi.edu/in-notes/rfc2449.txt>).

>  P.S.
>
>    Also, is there a list anywhere of what POP clients appear to actually
>  honor this "request" from the POP server?  I'm hoping at least some
>  reasonable proportion of our customers' mail programs will respect the
>  setting.

I'm not aware of any that honor it yet.  There may be some, I just don't know.


Last updated on 13 Jul 2001 by Pensive Mailing List Admin