The qpopper list archive ending on 21 Jun 2001
Topics covered in this issue include:
1. Qpopper 4.03
"Gary White (Network Administrator)" <admin at netpathway dot com>
Tue, 12 Jun 2001 15:54:34 -0500
2. Re: Qpopper 4.03
Randall Gellens <randy at qualcomm dot com>
Tue, 12 Jun 2001 15:40:28 -0700
3. Re: Qpopper 4.03
"Gary White (Network Administrator)" <admin at netpathway dot com>
Tue, 12 Jun 2001 18:33:54 -0500
4. Re: Qpopper 4.03
Admin Mailing Lists <mlist at intergrafix dot net>
Wed, 13 Jun 2001 10:33:19 -0400 (EDT)
5. Re: Qpopper 4.03
"Gary White (Network Administrator)" <admin at netpathway dot com>
Wed, 13 Jun 2001 10:56:02 -0500
6. mysql qpopper (was Re: PAM problems)
Admin Mailing Lists <mlist at intergrafix dot net>
Wed, 13 Jun 2001 11:56:40 -0400 (EDT)
7. Re: Qpopper 4.03
Admin Mailing Lists <mlist at intergrafix dot net>
Wed, 13 Jun 2001 12:25:19 -0400 (EDT)
8. TLS not working.
"Matt Goyer" <mgoyer at fairtunes dot com>
Wed, 13 Jun 2001 18:03:09 -0400
9. RE: TLS not working.
"Matt Goyer" <mgoyer at fairtunes dot com>
Wed, 13 Jun 2001 19:10:36 -0400
10. how to unsubscribe
"lemon_3" <lemon_3 at 21cn dot com>
Thu, 14 Jun 2001 14:31:48 +0800
11. Re: mysql qpopper (was Re: PAM problems)
"Nhan NGO DINH (OCIC Missionary Service)" <nngodinh at ocic dot org>
Thu, 14 Jun 2001 09:41:00 +0200
12. 4.0.3 on Tru64
"E. Jordan Bojar" <bojar at intersys dot com>
Thu, 14 Jun 2001 09:10:28 -0400
13. Re: 4.0.3 on Tru64
"E. Jordan Bojar" <bojar at intersys dot com>
Thu, 14 Jun 2001 09:38:41 -0400
14. Re: 4.0.3 on Tru64
"Kenneth Porter" <shiva at well dot com>
Thu, 14 Jun 2001 06:36:27 -0700
15. Re: mysql qpopper (was Re: PAM problems)
Admin Mailing Lists <mlist at intergrafix dot net>
Thu, 14 Jun 2001 10:47:42 -0400 (EDT)
16. TLS, Outlook and self-signed certs.
"Matt Goyer" <mgoyer at fairtunes dot com>
Thu, 14 Jun 2001 11:27:24 -0400
17. servermode or server-mode
Tim Olson <tolson at unionsemiconductor dot com>
Thu, 14 Jun 2001 14:44:59 -0500
18. Re: servermode or server-mode
Clifton Royston <cliftonr at lava dot net>
Thu, 14 Jun 2001 12:02:43 -1000
19. Message insufficient room in Qpopper 4.0.2
"Megias Sanchez, Jose Manuel" <JMegias at caja-granada dot es>
Fri, 15 Jun 2001 09:19:30 +0200
20. Re: mysql qpopper (was Re: PAM problems)
Chuck Yerkes <chuck+qpopper at yerkes dot com>
Fri, 15 Jun 2001 09:18:42 -0700
21. I/O errors
Forrest Aldrich <forrie at forrie dot com>
Fri, 15 Jun 2001 12:30:17 -0400
22. Re: mysql qpopper (was Re: PAM problems)
"Nhan NGO DINH (OCIC Missionary Service)" <nngodinh at ocic dot org>
Fri, 15 Jun 2001 18:39:01 +0200
23. Re: mysql qpopper (was Re: PAM problems)
Chuck Yerkes <chuck+qpopper at yerkes dot com>
Fri, 15 Jun 2001 09:51:52 -0700
24. Re: I/O errors
Clifton Royston <cliftonr at lava dot net>
Fri, 15 Jun 2001 08:14:18 -1000
25. SSL and XTND XMIT ??
Steve Palm <stevep at sga dot org>
Fri, 15 Jun 2001 14:12:47 -0500
26. Re: mysql qpopper (was Re: PAM problems)
Admin Mailing Lists <mlist at intergrafix dot net>
Fri, 15 Jun 2001 15:13:58 -0400 (EDT)
27. Re: I/O errors
Randall Gellens <randy at qualcomm dot com>
Fri, 15 Jun 2001 17:26:52 -0700
28. Re: mysql qpopper
"Nhan NGO DINH (OCIC Missionary Service)" <nngodinh at ocic dot org>
Sat, 16 Jun 2001 15:42:05 +0200
29. 403 and IP confirmation
hypnose at t-online dot de (guenter wessling)
Thu, 14 Jun 2001 17:35:51 +0200
30. Qmail ./Maildir/ support.
Grant <grant at conprojan.com dot au>
Mon, 18 Jun 2001 11:40:00 +1000 (EST)
31. Re: Qmail ./Maildir/ support.
"Dean Staff" <dean at protus dot com>
Sun, 17 Jun 2001 23:09:06 -0400
32. Re: Qmail ./Maildir/ support.
Eric Luyten <Eric.Luyten at vub.ac dot be>
Mon, 18 Jun 2001 11:57:11 +0200 (MET DST)
33. Re: 403 and IP confirmation
Chuck Yerkes <chuck+qpopper at yerkes dot com>
Mon, 18 Jun 2001 14:42:24 -0700
34. Re: 403 and IP confirmation
Randall Gellens <randy at qualcomm dot com>
Mon, 18 Jun 2001 17:04:11 -0700
35. Re: 403 and IP confirmation
<james at digit.bloomnet dot com>
Tue, 19 Jun 2001 10:56:03 -0500 (CDT)
36. Tentative patch for keep-temp-drop date update
Clifton Royston <cliftonr at lava dot net>
Tue, 19 Jun 2001 09:03:22 -1000
37. Re: Tentative patch for keep-temp-drop date update
Clifton Royston <cliftonr at lava dot net>
Tue, 19 Jun 2001 09:15:12 -1000
38. mysql patch for 4.0.3
Admin Mailing Lists <mlist at intergrafix dot net>
Wed, 20 Jun 2001 14:10:14 -0400 (EDT)
39. log file and volume of data ...
"Vincent Colet" <vcolet at dsimprove dot be>
Thu, 21 Jun 2001 17:15:46 -0700
40. problem w/ Solaris 8, PAM, and qpoppper 4.0.3
Michael Puskar <puskar at i4.nyu dot edu>
Thu, 21 Jun 2001 11:52:45 -0400 (EDT)
41. Re: log file and volume of data ...
WSO Support <mailinglists at wso dot net>
Thu, 21 Jun 2001 11:54:23 -0400
42. Re: log file and volume of data ...
Admin Mailing Lists <mlist at intergrafix dot net>
Thu, 21 Jun 2001 12:35:16 -0400 (EDT)
43. Fw: log file and volume of data ...
"Vincent Colet" <vcolet at dsimprove dot be>
Thu, 21 Jun 2001 20:10:53 -0700
44. Re: Fw: log file and volume of data ...
Admin Mailing Lists <mlist at intergrafix dot net>
Thu, 21 Jun 2001 14:19:44 -0400 (EDT)
45. Re: Fw: log file and volume of data ...
Jesus Cea Avion <jcea at argo dot es>
Thu, 21 Jun 2001 20:45:41 +0200
46. Qpopper+Kerberos in Solaris 8 for Intel
Luis F V Gomes <lf at ele.puc-rio dot br>
Thu, 21 Jun 2001 15:56:27 -0300
47. Re: Qpopper+Kerberos in Solaris 8 for Intel
"Kenneth Porter" <shiva at well dot com>
Thu, 21 Jun 2001 13:33:04 -0700 (PDT)
48. Re: problem w/ Solaris 8, PAM, and qpoppper 4.0.3
"Kenneth Porter" <shiva at well dot com>
Thu, 21 Jun 2001 13:37:38 -0700 (PDT)
49. Re: problem w/ Solaris 8, PAM, and qpoppper 4.0.3
Michael Puskar <puskar at i4.nyu dot edu>
Thu, 21 Jun 2001 18:37:39 -0400 (EDT)
50. Re: problem w/ Solaris 8, PAM, and qpoppper 4.0.3
"Kenneth Porter" <shiva at well dot com>
Thu, 21 Jun 2001 16:29:31 -0700
Date: Tue, 12 Jun 2001 15:54:34 -0500
From: "Gary White (Network Administrator)" <admin at netpathway dot com>
Subject: Qpopper 4.03
Can anybody explain why qpopper leaves these stale processes.
At the time I listed these processes only 2 were actually
active.
# ps axu | grep -v grep | grep popper
root 14304 0.0 0.1 1448 588 ? S Jun07 0:00 popper -s
root 14945 0.0 0.1 1448 588 ? S Jun07 0:00 popper -s
root 3706 0.0 0.1 1448 588 ? S Jun08 0:00 popper -s
sizz 28775 0.0 0.1 1596 904 ? S Jun09 0:00 popper -s
root 910 0.0 0.1 1448 588 ? S Jun09 0:00 popper -s
root 13956 0.0 0.1 1448 588 ? S Jun09 0:00 popper -s
root 14127 0.0 0.1 1448 588 ? S Jun09 0:00 popper -s
root 29970 0.0 0.1 1448 588 ? S Jun09 0:00 popper -s
root 25982 0.0 0.1 1448 588 ? S Jun11 0:00 popper -s
tddear 31180 0.0 0.1 1596 904 ? S 10:41 0:00 popper -s
laurent 12054 0.0 0.1 1596 904 ? S 15:50 0:00 popper -s
--
Gary White Network Administrator
admin at netpathway dot com Internet Pathway
Voice 601-776-3355 Fax 601-776-2314
Date: Tue, 12 Jun 2001 15:40:28 -0700
From: Randall Gellens <randy at qualcomm dot com>
Subject: Re: Qpopper 4.03
At 3:54 PM -0500 6/12/01, Gary White (Network Administrator) wrote:
> Can anybody explain why qpopper leaves these stale processes.
> At the time I listed these processes only 2 were actually
> active.
What does a truss(1) or strace(1) on them show? If you don't have
truss(1) or strace(1), use whatever system call trace facility is
available on your platform.
Date: Tue, 12 Jun 2001 18:33:54 -0500
From: "Gary White (Network Administrator)" <admin at netpathway dot com>
Subject: Re: Qpopper 4.03
I cleared all the processes. I will do an strace on the next stale process.
Randall Gellens wrote:
> At 3:54 PM -0500 6/12/01, Gary White (Network Administrator) wrote:
>
> > Can anybody explain why qpopper leaves these stale processes.
> > At the time I listed these processes only 2 were actually
> > active.
>
> What does a truss(1) or strace(1) on them show? If you don't have
> truss(1) or strace(1), use whatever system call trace facility is
> available on your platform.
--
Gary White Network Administrator
admin at netpathway dot com Internet Pathway
Voice 601-776-3355 Fax 601-776-2314
Date: Wed, 13 Jun 2001 10:33:19 -0400 (EDT)
From: Admin Mailing Lists <mlist at intergrafix dot net>
Subject: Re: Qpopper 4.03
do you have a log you can grep for their pids, to see what went on with
them?
-Tony
.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-.
Anthony J. Biacco Network Administrator/Engineer
thelittleprince at asteroid-b612 dot org Intergrafix Internet Services
"Dream as if you'll live forever, live as if you'll die today"
http://www.asteroid-b612.org http://www.intergrafix.net
.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-.
On Tue, 12 Jun 2001, Gary White (Network Administrator) wrote:
> I cleared all the processes. I will do an strace on the next stale process.
>
> Randall Gellens wrote:
>
> > At 3:54 PM -0500 6/12/01, Gary White (Network Administrator) wrote:
> >
> > > Can anybody explain why qpopper leaves these stale processes.
> > > At the time I listed these processes only 2 were actually
> > > active.
> >
> > What does a truss(1) or strace(1) on them show? If you don't have
> > truss(1) or strace(1), use whatever system call trace facility is
> > available on your platform.
>
> --
> Gary White Network Administrator
> admin at netpathway dot com Internet Pathway
> Voice 601-776-3355 Fax 601-776-2314
>
>
>
Date: Wed, 13 Jun 2001 10:56:02 -0500
From: "Gary White (Network Administrator)" <admin at netpathway dot com>
Subject: Re: Qpopper 4.03
Yep, But not a whole lot of info here. Looks like most hung during the
initial connection stage.
root 14304 0.0 0.1 1448 588 ? S Jun07 0:00 popper -s
Jun 7 20:57:58 sammy popper[14304]: connect from port24-quit.netpathway.com
root 14945 0.0 0.1 1448 588 ? S Jun07 0:00 popper -s
Jun 7 21:00:55 sammy popper[14945]: connect from port24-quit.netpathway.com
root 3706 0.0 0.1 1448 588 ? S Jun08 0:00 popper -s
Jun 8 14:40:11 sammy popper[3706]: connect from port84-quit.netpathway.com
sizz 28775 0.0 0.1 1596 904 ? S Jun09 0:00 popper -s
Jun 9 06:19:22 sammy popper[28775]: connect from port30-quit.netpathway.com
root 910 0.0 0.1 1448 588 ? S Jun09 0:00 popper -s
Jun 9 06:58:25 sammy popper[910]: connect from port16-quit.netpathway.com
root 13956 0.0 0.1 1448 588 ? S Jun09 0:00 popper -s
un 9 10:28:41 sammy popper[13956]: connect from port87-quit.netpathway.com
root 14127 0.0 0.1 1448 588 ? S Jun09 0:00 popper -s
Jun 9 01:13:26 sammy popper[14127]: connect from nobody at paul.netpathway dot com
Jun 9 01:13:26 sammy popper[14127]: Stats: marie 0 0 2 2776 paul.netpathway.com 208.137.139.7
Jun 9 10:29:28 sammy popper[14127]: connect from port87-quit.netpathway.com
root 29970 0.0 0.1 1448 588 ? S Jun09 0:00 popper -s
Jun 9 11:41:30 sammy popper[29970]: connect from port20-quit.netpathway.com
root 25982 0.0 0.1 1448 588 ? S Jun11 0:00 popper -s
Jun 11 17:59:03 sammy popper[25982]: connect from port15-quit.netpathway.com
tddear 31180 0.0 0.1 1596 904 ? S 10:41 0:00 popper -s
Jun 12 10:42:06 sammy popper[31180]: connect from port10-newt.netpathway.com
laurent 12054 0.0 0.1 1596 904 ? S 15:50 0:00 popper -s
Jun 12 15:50:28 sammy popper[12054]: connect from port33-quit.netpathway.com
Jun 12 15:50:29 sammy popper[12054]: Stats: laurent 0 0 0 0 port33-quit.netpathway.com 208.137.139.50
> do you have a log you can grep for their pids, to see what went on with
> them?
>
> -Tony
> .-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-.
> Anthony J. Biacco Network Administrator/Engineer
> thelittleprince at asteroid-b612 dot org Intergrafix Internet Services
>
> "Dream as if you'll live forever, live as if you'll die today"
> http://www.asteroid-b612.org http://www.intergrafix.net
> .-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-.
>
> On Tue, 12 Jun 2001, Gary White (Network Administrator) wrote:
>
> > I cleared all the processes. I will do an strace on the next stale process.
> >
> > Randall Gellens wrote:
> >
> > > At 3:54 PM -0500 6/12/01, Gary White (Network Administrator) wrote:
> > >
> > > > Can anybody explain why qpopper leaves these stale processes.
> > > > At the time I listed these processes only 2 were actually
> > > > active.
> > >
> > > What does a truss(1) or strace(1) on them show? If you don't have
> > > truss(1) or strace(1), use whatever system call trace facility is
> > > available on your platform.
> >
> > --
> > Gary White Network Administrator
> > admin at netpathway dot com Internet Pathway
> > Voice 601-776-3355 Fax 601-776-2314
> >
> >
> >
--
Gary White Network Administrator
admin at netpathway dot com Internet Pathway
Voice 601-776-3355 Fax 601-776-2314
Date: Wed, 13 Jun 2001 11:56:40 -0400 (EDT)
From: Admin Mailing Lists <mlist at intergrafix dot net>
Subject: mysql qpopper (was Re: PAM problems)
I offered to qualcomm to submit a patch back when 3.1.2 was the latest
version, but got no reply.
If anyone wants to test out the patch with vanilla 3.1.2, let me know,
i'll send it to you. It's about 85k.
-Tony
.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-.
Anthony J. Biacco Network Administrator/Engineer
thelittleprince at asteroid-b612 dot org Intergrafix Internet Services
"Dream as if you'll live forever, live as if you'll die today"
http://www.asteroid-b612.org http://www.intergrafix.net
.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-.
On Tue, 12 Jun 2001, Chuck Yerkes wrote:
> Then put it in. The hard part? Opening up and breaking down
> the connection to a SQL server for each connection.
>
> But it's just not THAT hard.
>
>
> Quoting Admin Mailing Lists (mlist at intergrafix dot net):
> > >
> > > May be - it's just my opinion - that would be useful to have an option that
> > > allows users to configure --disable-... this type of pwnam query. That
> > > would allow to check against an external password database without having
> > > passwd entries for each user.
> > >
> >
> > hence the long-time wish for mysql support
> >
> > -Tony
> > .-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-.
> > Anthony J. Biacco Network Administrator/Engineer
> > thelittleprince at asteroid-b612 dot org Intergrafix Internet Services
> >
> > "Dream as if you'll live forever, live as if you'll die today"
> > http://www.asteroid-b612.org http://www.intergrafix.net
> > .-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-.
>
Date: Wed, 13 Jun 2001 12:25:19 -0400 (EDT)
From: Admin Mailing Lists <mlist at intergrafix dot net>
Subject: Re: Qpopper 4.03
is this with one of '-T' or 'set tracefile=' used?
or no tracing?
standalone, inet?
-Tony
.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-.
Anthony J. Biacco Network Administrator/Engineer
thelittleprince at asteroid-b612 dot org Intergrafix Internet Services
"Dream as if you'll live forever, live as if you'll die today"
http://www.asteroid-b612.org http://www.intergrafix.net
.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-.
On Wed, 13 Jun 2001, Gary White (Network Administrator) wrote:
> Yep, But not a whole lot of info here. Looks like most hung during the
> initial connection stage.
>
> root 14304 0.0 0.1 1448 588 ? S Jun07 0:00 popper -s
> Jun 7 20:57:58 sammy popper[14304]: connect from port24-quit.netpathway.com
>
> root 14945 0.0 0.1 1448 588 ? S Jun07 0:00 popper -s
> Jun 7 21:00:55 sammy popper[14945]: connect from port24-quit.netpathway.com
>
> root 3706 0.0 0.1 1448 588 ? S Jun08 0:00 popper -s
> Jun 8 14:40:11 sammy popper[3706]: connect from port84-quit.netpathway.com
>
> sizz 28775 0.0 0.1 1596 904 ? S Jun09 0:00 popper -s
> Jun 9 06:19:22 sammy popper[28775]: connect from port30-quit.netpathway.com
>
> root 910 0.0 0.1 1448 588 ? S Jun09 0:00 popper -s
> Jun 9 06:58:25 sammy popper[910]: connect from port16-quit.netpathway.com
>
> root 13956 0.0 0.1 1448 588 ? S Jun09 0:00 popper -s
> un 9 10:28:41 sammy popper[13956]: connect from port87-quit.netpathway.com
>
> root 14127 0.0 0.1 1448 588 ? S Jun09 0:00 popper -s
> Jun 9 01:13:26 sammy popper[14127]: connect from nobody at paul.netpathway dot com
> Jun 9 01:13:26 sammy popper[14127]: Stats: marie 0 0 2 2776 paul.netpathway.com 208.137.139.7
> Jun 9 10:29:28 sammy popper[14127]: connect from port87-quit.netpathway.com
>
> root 29970 0.0 0.1 1448 588 ? S Jun09 0:00 popper -s
> Jun 9 11:41:30 sammy popper[29970]: connect from port20-quit.netpathway.com
>
> root 25982 0.0 0.1 1448 588 ? S Jun11 0:00 popper -s
> Jun 11 17:59:03 sammy popper[25982]: connect from port15-quit.netpathway.com
>
> tddear 31180 0.0 0.1 1596 904 ? S 10:41 0:00 popper -s
> Jun 12 10:42:06 sammy popper[31180]: connect from port10-newt.netpathway.com
>
> laurent 12054 0.0 0.1 1596 904 ? S 15:50 0:00 popper -s
> Jun 12 15:50:28 sammy popper[12054]: connect from port33-quit.netpathway.com
> Jun 12 15:50:29 sammy popper[12054]: Stats: laurent 0 0 0 0 port33-quit.netpathway.com 208.137.139.50
>
>
> > do you have a log you can grep for their pids, to see what went on with
> > them?
> >
> > -Tony
> > .-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-.
> > Anthony J. Biacco Network Administrator/Engineer
> > thelittleprince at asteroid-b612 dot org Intergrafix Internet Services
> >
> > "Dream as if you'll live forever, live as if you'll die today"
> > http://www.asteroid-b612.org http://www.intergrafix.net
> > .-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-.
> >
> > On Tue, 12 Jun 2001, Gary White (Network Administrator) wrote:
> >
> > > I cleared all the processes. I will do an strace on the next stale process.
> > >
> > > Randall Gellens wrote:
> > >
> > > > At 3:54 PM -0500 6/12/01, Gary White (Network Administrator) wrote:
> > > >
> > > > > Can anybody explain why qpopper leaves these stale processes.
> > > > > At the time I listed these processes only 2 were actually
> > > > > active.
> > > >
> > > > What does a truss(1) or strace(1) on them show? If you don't have
> > > > truss(1) or strace(1), use whatever system call trace facility is
> > > > available on your platform.
> > >
> > > --
> > > Gary White Network Administrator
> > > admin at netpathway dot com Internet Pathway
> > > Voice 601-776-3355 Fax 601-776-2314
> > >
> > >
> > >
>
> --
> Gary White Network Administrator
> admin at netpathway dot com Internet Pathway
> Voice 601-776-3355 Fax 601-776-2314
>
>
>
From: "Matt Goyer" <mgoyer at fairtunes dot com>
Subject: TLS not working.
Date: Wed, 13 Jun 2001 18:03:09 -0400
Hi. Just upgraded to the latest version of Qpopper.
Compiled with --with-openssl and made a config file with:
set tls-support = stls
set tls-server-cert-file = /etc/mail/certs/cert.pem
set tls-private-key-file = /etc/mail/certs/key.pem
set chunky-writes = tls
When I connect using Microsoft Outlook (2000) with the SSL option checked
and using port 110 I get the following error:
Jun 13 17:52:02 linux1632 qpopper[7493]: (null) at
cr10239-a.bloor1.on.wave.home.com (24.156.35.69): -ERR POP EOF or I/O
Error [popper.c:794]
None of my other users can connect w/SSL either, but regular pop on 110
works just fine.
I know my certs are good since they work with sendmail.
Thanks,
Matt.
From: "Matt Goyer" <mgoyer at fairtunes dot com>
Subject: RE: TLS not working.
Date: Wed, 13 Jun 2001 19:10:36 -0400
Well I moved it over to 'alternate-port' and it's spitting out a different
error now. Below is from a tracefile.
Is the problem because either Outlook or Qpopper disagrees with my common
name? What is the format of a comman name? 'bleh.fairtunes.com'?
Jun 13 18:46:22.271 2001 [7760] TLS Init [popper.c:193]
Jun 13 18:46:22.271 2001
Jun 13 18:46:22.271 2001 [7760] Attempting OpenSSL handshake
[pop_tls_openssl.c:498]
Jun 13 18:46:22.271 2001
Jun 13 18:46:22.271 2001 [7760] tls accept returned 0
[pop_tls_openssl.c:501]
Jun 13 18:46:22.271 2001
Jun 13 18:46:22.271 2001 [7760] SSL_get_error says SSL_ERROR_SYSCALL (5)
[pop_tls_openssl.c:508]
Jun 13 18:46:22.271 2001
Jun 13 18:46:22.271 2001 [7760] TLS handshake Error [pop_tls_openssl.c:541]
Jun 13 18:46:22.271 2001
Jun 13 18:46:22.271 2001 [7760] TLS/SSL Handshake failed: -1 [popper.c:204]
Jun 13 18:46:22.271 2001
Matt.
-----Original Message-----
From: Matt Goyer [mailto:mgoyer at fairtunes dot com]
Sent: Wednesday, June 13, 2001 6:03 PM
To: Subscribers of Qpopper
Subject: TLS not working.
Hi. Just upgraded to the latest version of Qpopper.
Compiled with --with-openssl and made a config file with:
set tls-support = stls
set tls-server-cert-file = /etc/mail/certs/cert.pem
set tls-private-key-file = /etc/mail/certs/key.pem
set chunky-writes = tls
When I connect using Microsoft Outlook (2000) with the SSL option checked
and using port 110 I get the following error:
Jun 13 17:52:02 linux1632 qpopper[7493]: (null) at
cr10239-a.bloor1.on.wave.home.com (24.156.35.69): -ERR POP EOF or I/O
Error [popper.c:794]
None of my other users can connect w/SSL either, but regular pop on 110
works just fine.
I know my certs are good since they work with sendmail.
Thanks,
Matt.
From: "lemon_3" <lemon_3 at 21cn dot com>
Subject: how to unsubscribe
Date: Thu, 14 Jun 2001 14:31:48 +0800
This is a multi-part message in MIME format.
------=_NextPart_000_003A_01C0F4DE.BEAC8BF0
Content-Type: text/plain;
charset="gb2312"
Content-Transfer-Encoding: base64
DQo
------=_NextPart_000_003A_01C0F4DE.BEAC8BF0
Content-Type: text/html;
charset="gb2312"
Content-Transfer-Encoding: base64
PCFET0NUWVBFIEhUTUwgUFVCTElDICItLy9XM0MvL0RURCBIVE1MIDQuMCBUcmFuc2l0aW9uYWwv
L0VOIj4NCjxIVE1MPjxIRUFEPg0KPE1FVEEgY29udGVudD0idGV4dC9odG1sOyBjaGFyc2V0PWdi
MjMxMiIgaHR0cC1lcXVpdj1Db250ZW50LVR5cGU+DQo8TUVUQSBjb250ZW50PSJNU0hUTUwgNS4w
MC4yOTIwLjAiIG5hbWU9R0VORVJBVE9SPg0KPFNUWUxFPjwvU1RZTEU+DQo8L0hFQUQ+DQo8Qk9E
WSBiZ0NvbG9yPSNmZmZmZmY+DQo8RElWPiZuYnNwOzwvRElWPjwvQk9EWT48L0hUTUw+DQo
------=_NextPart_000_003A_01C0F4DE.BEAC8BF0--
Date: Thu, 14 Jun 2001 09:41:00 +0200
From: "Nhan NGO DINH (OCIC Missionary Service)" <nngodinh at ocic dot org>
Subject: Re: mysql qpopper (was Re: PAM problems)
I'm currently using Qpopper 4.0.3, and finally I've succeeded to set it up
using PAM modules (pam_mysql). Did you patch Qpopper to natively support mysql?
At 11.56 13/06/01 -0400, you wrote:
>I offered to qualcomm to submit a patch back when 3.1.2 was the latest
>version, but got no reply.
>If anyone wants to test out the patch with vanilla 3.1.2, let me know,
>i'll send it to you. It's about 85k.
>
>-Tony
>.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-.
>Anthony J. Biacco Network Administrator/Engineer
>thelittleprince at asteroid-b612 dot org Intergrafix Internet Services
>
> "Dream as if you'll live forever, live as if you'll die today"
>http://www.asteroid-b612.org http://www.intergrafix.net
>.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-.
>
>On Tue, 12 Jun 2001, Chuck Yerkes wrote:
>
> > Then put it in. The hard part? Opening up and breaking down
> > the connection to a SQL server for each connection.
> >
> > But it's just not THAT hard.
> >
> >
> > Quoting Admin Mailing Lists (mlist at intergrafix dot net):
> > > >
> > > > May be - it's just my opinion - that would be useful to have an
> option that
> > > > allows users to configure --disable-... this type of pwnam query. That
> > > > would allow to check against an external password database without
> having
> > > > passwd entries for each user.
> > > >
> > >
> > > hence the long-time wish for mysql support
> > >
> > > -Tony
> > > .-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-.
> > > Anthony J. Biacco Network Administrator/Engineer
> > > thelittleprince at asteroid-b612 dot org Intergrafix Internet Services
> > >
> > > "Dream as if you'll live forever, live as if you'll die today"
> > > http://www.asteroid-b612.org http://www.intergrafix.net
> > > .-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-.
> >
Nhan NGO DINH
OCIC Missionary Service
OCICNet System Administrator
e-mail: nngodinh at ocic.org, admin at rome dot ocicnet dot net
http://www.ocic.org/missions (OCIC Missionary Service Web Site)
http://www.ocicnet.net (OCICNet Web Site)
From: "E. Jordan Bojar" <bojar at intersys dot com>
Subject: 4.0.3 on Tru64
Date: Thu, 14 Jun 2001 09:10:28 -0400
Folks,
My attempts to build Qpopper 4.0.3 on Tru64(OSF) V4.0 1229 consistantly
fails with the same errors:
Is this a known problem or an unsupported platform? I've attached my cc
output below. I'm loathe to start editing source files if a fix is already
known, but I can't find mention of this or a patch. Any help would be
greatly appreciated. TIA.
--
E. Jordan Bojar
Unix Systems Administrator
Intersystems Corp.
# make
cd ./popper && make all
cc -c -I.. -I.. -I. -I../mmangle -I../common -g -DHAVE_CONFIG_H -DOSF1 -
DUNIX pop_dele.c -o pop_dele.o
cc -c -I.. -I.. -I. -I../mmangle -I../common -g -DHAVE_CONFIG_H -DOSF1 -
DUNIX pop_dropcopy.c -o pop_dropcopy.o
cc -c -I.. -I.. -I. -I../mmangle -I../common -g -DHAVE_CONFIG_H -DOSF1 -
DUNIX pop_get_command.c -o pop_get_command.o
cc -c -I.. -I.. -I. -I../mmangle -I../common -g -DHAVE_CONFIG_H -DOSF1 -
DUNIX pop_get_subcommand.c -o pop_get_subcommand.o
cc -c -I.. -I.. -I. -I../mmangle -I../common -g -DHAVE_CONFIG_H -DOSF1 -
DUNIX pop_init.c -o pop_init.o
cc -c -I.. -I.. -I. -I../mmangle -I../common -g -DHAVE_CONFIG_H -DOSF1 -
DUNIX pop_last.c -o pop_last.o
cc -c -I.. -I.. -I. -I../mmangle -I../common -g -DHAVE_CONFIG_H -DOSF1 -
DUNIX pop_list.c -o pop_list.o
cc -c -I.. -I.. -I. -I../mmangle -I../common -g -DHAVE_CONFIG_H -DOSF1 -
DUNIX pop_log.c -o pop_log.o
cc -c -I.. -I.. -I. -I../mmangle -I../common -g -DHAVE_CONFIG_H -DOSF1 -
DUNIX pop_lower.c -o pop_lower.o
cc -c -I.. -I.. -I. -I../mmangle -I../common -g -DHAVE_CONFIG_H -DOSF1 -
DUNIX pop_msg.c -o pop_msg.o
cc -c -I.. -I.. -I. -I../mmangle -I../common -g -DHAVE_CONFIG_H -DOSF1 -
DUNIX pop_parse.c -o pop_parse.o
cc -c -I.. -I.. -I. -I../mmangle -I../common -g -DHAVE_CONFIG_H -DOSF1 -
DUNIX pop_pass.c -o pop_pass.o
cc -c -I.. -I.. -I. -I../mmangle -I../common -g -DHAVE_CONFIG_H -DOSF1 -
DUNIX pop_quit.c -o pop_quit.o
cc -c -I.. -I.. -I. -I../mmangle -I../common -g -DHAVE_CONFIG_H -DOSF1 -
DUNIX pop_rset.c -o pop_rset.o
cc -c -I.. -I.. -I. -I../mmangle -I../common -g -DHAVE_CONFIG_H -DOSF1 -
DUNIX pop_send.c -o pop_send.o
cc -c -I.. -I.. -I. -I../mmangle -I../common -g -DHAVE_CONFIG_H -DOSF1 -
DUNIX pop_stat.c -o pop_stat.o
cc -c -I.. -I.. -I. -I../mmangle -I../common -g -DHAVE_CONFIG_H -DOSF1 -
DUNIX pop_updt.c -o pop_updt.o
cc -c -I.. -I.. -I. -I../mmangle -I../common -g -DHAVE_CONFIG_H -DOSF1 -
DUNIX pop_user.c -o pop_user.o
cc -c -I.. -I.. -I. -I../mmangle -I../common -g -DHAVE_CONFIG_H -DOSF1 -
DUNIX pop_xtnd.c -o pop_xtnd.o
cc -c -I.. -I.. -I. -I../mmangle -I../common -g -DHAVE_CONFIG_H -DOSF1 -
DUNIX pop_xmit.c -o pop_xmit.o
cc -c -I.. -I.. -I. -I../mmangle -I../common -g -DHAVE_CONFIG_H -DOSF1 -
DUNIX popper.c -o popper.o
cc -c -I.. -I.. -I. -I../mmangle -I../common -g -DHAVE_CONFIG_H -DOSF1 -
DUNIX pop_bull.c -o pop_bull.o
cc -c -I.. -I.. -I. -I../mmangle -I../common -g -DHAVE_CONFIG_H -DOSF1 -
DUNIX xtnd_xlst.c -o xtnd_xlst.o
cc -c -I.. -I.. -I. -I../mmangle -I../common -g -DHAVE_CONFIG_H -DOSF1 -
DUNIX pop_uidl.c -o pop_uidl.o
cc -c -I.. -I.. -I. -I../mmangle -I../common -g -DHAVE_CONFIG_H -DOSF1 -
DUNIX mktemp.c -o mktemp.o
cc -c -I.. -I.. -I. -I../mmangle -I../common -g -DHAVE_CONFIG_H -DOSF1 -
DUNIX pop_rpop.c -o pop_rpop.o
cc -c -I.. -I.. -I. -I../mmangle -I../common -g -DHAVE_CONFIG_H -DOSF1 -
DUNIX pop_apop.c -o pop_apop.o
cc -c -I.. -I.. -I. -I../mmangle -I../common -g -DHAVE_CONFIG_H -DOSF1 -
DUNIX md5.c -o md5.o
cc -c -I.. -I.. -I. -I../mmangle -I../common -g -DHAVE_CONFIG_H -DOSF1 -
DUNIX pop_auth.c -o pop_auth.o
cc -c -I.. -I.. -I. -I../mmangle -I../common -g -DHAVE_CONFIG_H -DOSF1 -
DUNIX pop_pope.c -o pop_pope.o
cc -c -I.. -I.. -I. -I../mmangle -I../common -g -DHAVE_CONFIG_H -DOSF1 -
DUNIX pop_extend.c -o pop_extend.o
cc -c -I.. -I.. -I. -I../mmangle -I../common -g -DHAVE_CONFIG_H -DOSF1 -
DUNIX scram.c -o scram.o
cc -c -I.. -I.. -I. -I../mmangle -I../common -g -DHAVE_CONFIG_H -DOSF1 -
DUNIX hmac.c -o hmac.o
cc -c -I.. -I.. -I. -I../mmangle -I../common -g -DHAVE_CONFIG_H -DOSF1 -
DUNIX base64.c -o base64.o
cc -c -I.. -I.. -I. -I../mmangle -I../common -g -DHAVE_CONFIG_H -DOSF1 -
DUNIX pop_util.c -o pop_util.o
cc -c -I.. -I.. -I. -I../mmangle -I../common -g -DHAVE_CONFIG_H -DOSF1 -
DUNIX get_sub_opt.c -o get_sub_opt.o
cc -c -I.. -I.. -I. -I../mmangle -I../common -g -DHAVE_CONFIG_H -DOSF1 -
DUNIX msg_ptr.c -o msg_ptr.o
cc -c -I.. -I.. -I. -I../mmangle -I../common -g -DHAVE_CONFIG_H -DOSF1 -
DUNIX drac.c -o drac.o
cc: Warning: drac.c, line 60: Source file does not contain any declarations.
(emptyfile)
#endif /* DRAC_AUTH */
----------------------^
cc -c -I.. -I.. -I. -I../mmangle -I../common -g -DHAVE_CONFIG_H -DOSF1 -
DUNIX pop_config.c -o pop_config.o
cc -c -I.. -I.. -I. -I../mmangle -I../common -g -DHAVE_CONFIG_H -DOSF1 -
DUNIX pop_tls.c -o pop_tls.o
cc -c -I.. -I.. -I. -I../mmangle -I../common -g -DHAVE_CONFIG_H -DOSF1 -
DUNIX pop_tls_openssl.c -o pop_tls_openssl.o
cc -c -I.. -I.. -I. -I../mmangle -I../common -g -DHAVE_CONFIG_H -DOSF1 -
DUNIX pop_tls_sslplus.c -o pop_tls_sslplus.o
cc -c -I.. -I.. -I. -I../mmangle -I../common -g -DHAVE_CONFIG_H -DOSF1 -
DUNIX sslplus_utils.c -o sslplus_utils.o
cc: Warning: sslplus_utils.c, line 867: Source file does not contain any
declarations. (emptyfile)
^
cc -c -I.. -I.. -I. -I../mmangle -I../common -g -DHAVE_CONFIG_H -DOSF1 -
DUNIX main.c -o main.o
cc -c -I.. -I.. -I. -I../mmangle -I../common -g -DHAVE_CONFIG_H -DOSF1 -
DUNIX pop_cache.c -o pop_cache.o
cc -c -I.. -I.. -I. -I../mmangle -I../common -g -DHAVE_CONFIG_H -DOSF1 -
DUNIX genpath.c -o genpath.o
cd ../mmangle && make all
cc -c -I.. -I. -I.. -I../popper -I../common -g -DHAVE_CONFIG_H -DOSF1 -DUN
IX mime.c -o mime.o
cc -c -I.. -I. -I.. -I../popper -I../common -g -DHAVE_CONFIG_H -DOSF1 -DUN
IX mangle.c -o mangle.o
cc: Warning: mangle.c, line 75: # not in column 1 is ignored, skipping to
end of line. (ignoretokens)
#define DBG_PRM ""
--^
cc: Warning: mangle.c, line 76: # not in column 1 is ignored, skipping to
end of line. (ignoretokens)
#define DEBUGIT(X)
--^
cc: Error: mangle.c, line 678: In this statement, "DBG_PRM" is not declared.
(undeclared)
DEBUGIT (( DBG_PRM, "...FillMangleInfo; commandline(%d)=%.50s",
---------------^
*** Exit 1
Stop.
*** Exit 1
Stop.
*** Exit 1
Stop.
From: "E. Jordan Bojar" <bojar at intersys dot com>
Subject: Re: 4.0.3 on Tru64
Date: Thu, 14 Jun 2001 09:38:41 -0400
OK, I just figured this out as well. It's those defines, which are
indented:
#define
unlike the others, which are indented:
# define
I'm using DEC C V5.9-005 to build, which ships with the OS, and fixing the
defines fixes the problem.
gcc, btw, builds the original code without complaint.
Thanks.
--
E. Jordan Bojar
Unix Systems Administrator
Intersystems Corp.
----- Original Message -----
From: "Kenneth Porter" <shiva at well dot com>
To: "Subscribers of Qpopper" <qpopper at lists.pensive dot org>
Cc: "E. Jordan Bojar" <bojar at intersys dot com>
Sent: Thursday, June 14, 2001 9:36 AM
Subject: Re: 4.0.3 on Tru64
> On Thu, 14 Jun 2001 09:10:28 -0400, E. Jordan Bojar wrote:
>
> >cc: Warning: mangle.c, line 75: # not in column 1 is ignored, skipping to
> >end of line. (ignoretokens)
> > #define DBG_PRM ""
>
> Looks like your compiler is finickier than most. Just edit mangle.c to
> move the # to the beginning of the line, just like the lines above it.
> (The standard specifies that the # must be in column 1, but there can
> be spaces between the # and the "define" that follows it.)
>
> Ken
> mailto:shiva at well dot com
> http://www.sewingwitch.com/ken/
> [If answering a mailing list posting, please don't cc me your reply. I'll
take my answer on the list.]
>
>
>
From: "Kenneth Porter" <shiva at well dot com>
Date: Thu, 14 Jun 2001 06:36:27 -0700
Subject: Re: 4.0.3 on Tru64
On Thu, 14 Jun 2001 09:10:28 -0400, E. Jordan Bojar wrote:
>cc: Warning: mangle.c, line 75: # not in column 1 is ignored, skipping to
>end of line. (ignoretokens)
> #define DBG_PRM ""
Looks like your compiler is finickier than most. Just edit mangle.c to
move the # to the beginning of the line, just like the lines above it.
(The standard specifies that the # must be in column 1, but there can
be spaces between the # and the "define" that follows it.)
Ken
mailto:shiva at well dot com
http://www.sewingwitch.com/ken/
[If answering a mailing list posting, please don't cc me your reply. I'll take my answer on the list.]
Date: Thu, 14 Jun 2001 10:47:42 -0400 (EDT)
From: Admin Mailing Lists <mlist at intergrafix dot net>
Subject: Re: mysql qpopper (was Re: PAM problems)
> On Thu, 14 Jun 2001, Nhan NGO DINH (OCIC Missionary Service) wrote:
>
> > I'm currently using Qpopper 4.0.3, and finally I've succeeded to set it up
> > using PAM modules (pam_mysql). Did you patch Qpopper to natively support mysql?
yes, native, the pam module won't be sufficient for my needs. i'm sorry
that i dont have a patch for 4.0.x, to be honest, i installed 4.0.3 just
yesterday..i dont know when/if i'll have a patch for it.
if you're 'patch' savvy, you're welcome to try and evolve it to make it
work for 4.0
-Tony
.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-.
Anthony J. Biacco Network Administrator/Engineer
thelittleprince at asteroid-b612 dot org Intergrafix Internet Services
"Dream as if you'll live forever, live as if you'll die today"
http://www.asteroid-b612.org http://www.intergrafix.net
.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-.
>
> >
> > At 11.56 13/06/01 -0400, you wrote:
> > >I offered to qualcomm to submit a patch back when 3.1.2 was the latest
> > >version, but got no reply.
> > >If anyone wants to test out the patch with vanilla 3.1.2, let me know,
> > >i'll send it to you. It's about 85k.
> > >
> > >-Tony
> > >.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-.
> > >Anthony J. Biacco Network Administrator/Engineer
> > >thelittleprince at asteroid-b612 dot org Intergrafix Internet Services
> > >
> > > "Dream as if you'll live forever, live as if you'll die today"
> > >http://www.asteroid-b612.org http://www.intergrafix.net
> > >.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-.
> > >
> > >On Tue, 12 Jun 2001, Chuck Yerkes wrote:
> > >
> > > > Then put it in. The hard part? Opening up and breaking down
> > > > the connection to a SQL server for each connection.
> > > >
> > > > But it's just not THAT hard.
> > > >
> > > >
> > > > Quoting Admin Mailing Lists (mlist at intergrafix dot net):
> > > > > >
> > > > > > May be - it's just my opinion - that would be useful to have an
> > > option that
> > > > > > allows users to configure --disable-... this type of pwnam query. That
> > > > > > would allow to check against an external password database without
> > > having
> > > > > > passwd entries for each user.
> > > > > >
> > > > >
> > > > > hence the long-time wish for mysql support
> > > > >
> > > > > -Tony
> > > > > .-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-.
> > > > > Anthony J. Biacco Network Administrator/Engineer
> > > > > thelittleprince at asteroid-b612 dot org Intergrafix Internet Services
> > > > >
> > > > > "Dream as if you'll live forever, live as if you'll die today"
> > > > > http://www.asteroid-b612.org http://www.intergrafix.net
> > > > > .-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-.
> > > >
> >
> > Nhan NGO DINH
> > OCIC Missionary Service
> > OCICNet System Administrator
> >
> > e-mail: nngodinh at ocic.org, admin at rome dot ocicnet dot net
> > http://www.ocic.org/missions (OCIC Missionary Service Web Site)
> > http://www.ocicnet.net (OCICNet Web Site)
> >
> >
>
>
From: "Matt Goyer" <mgoyer at fairtunes dot com>
Subject: TLS, Outlook and self-signed certs.
Date: Thu, 14 Jun 2001 11:27:24 -0400
Okay I installed Eudora and it looks like everything works and that Outlook
is the problem.
How do I get Outlook (2000 & Express) to recognize that the cert I created
with my own CA is trusted? How do I import it?
Thanks
Matt
Date: Thu, 14 Jun 2001 14:44:59 -0500
From: Tim Olson <tolson at unionsemiconductor dot com>
Subject: servermode or server-mode
I'm just trying to start using servermode on a group, and in reading
past postings I see there is some confusion that is making me
even more confused.
is it --enable-servermode or --enable-server-mode
and if I do a group is it
--enable-server-mode-group-include=group
or
--enable-servermode-group-include=group
The .PDF file puts dashes after server, but with the narrow column
you can't tell if they meant it as a dash for hyphenation or for part
of the command.
Also, if I use --enable-servermode-group-include=group, do I also
need --enable-servermode to get it working, or is the first one
itself sufficient? (assuming I'm choosing the correct command syntax
to beging with)
Thanks!
Tim
--
Tim Olson
mailto:tolson at unionsemiconductor dot com
Date: Thu, 14 Jun 2001 12:02:43 -1000
From: Clifton Royston <cliftonr at lava dot net>
Subject: Re: servermode or server-mode
On Thu, Jun 14, 2001 at 02:44:59PM -0500, Tim Olson wrote:
> I'm just trying to start using servermode on a group, and in reading
> past postings I see there is some confusion that is making me
> even more confused.
>
> is it --enable-servermode or --enable-server-mode
>
> and if I do a group is it
>
> --enable-server-mode-group-include=group
> or
> --enable-servermode-group-include=group
It's confusing in part because the syntax is different between what
you tell the configure command and what you tell it in a runtime config
file; it does not *have* to be configured/compiled in, though you can.
It does want the dash:
--enable-server-mode-group-include=group in configure;
"set group-server-mode = group" in a config file.
BTW, you can type "./configure --help" to get a list of all the valid
options to configure for the package you are currently building.
> Also, if I use --enable-servermode-group-include=group, do I also
> need --enable-servermode to get it working, or is the first one
> itself sufficient? (assuming I'm choosing the correct command syntax
> to beging with)
The first alone is sufficient. --enable-servermode makes it a defualt
for everything.
Pages 40-42 of the PDF make things reasonably clear if you read them
through closely enough.
-- Clifton
--
Clifton Royston -- LavaNet Systems Architect -- cliftonr at lava dot net
WWJD? "JWRTFM!" - Scott Dorsey (kludge) "JWG" - Eddie Aikau
From: "Megias Sanchez, Jose Manuel" <JMegias at caja-granada dot es>
Subject: Message insufficient room in Qpopper 4.0.2
Date: Fri, 15 Jun 2001 09:19:30 +0200
Hello I've installed Qpopper 4.0.2 in a FreeBSD machine (release 4.3) and
sometimes I see the following error:
Jun 13 13:06:54 server qpopper[76963]: Insufficient room to generate path
for user mdro; need more than 4245; have only 256
Jun 13 13:06:54 server qpopper[76963]: mdro at 10.4.44.4 (10.4.44.4): -ERR [
SYS/TEMP] Unable to get spool name
what's mean? can help me anyone?. Thanks in advance.
Date: Fri, 15 Jun 2001 09:18:42 -0700
From: Chuck Yerkes <chuck+qpopper at yerkes dot com>
Subject: Re: mysql qpopper (was Re: PAM problems)
The main problem being that you're gonna hurt
setting up and breaking down a SQL connection
hundreds of times/second.
Have you ponder Radius and backing radius with SQL?
Local connections are faster, something with cache is
also a Good Thing.
Quoting Admin Mailing Lists (mlist at intergrafix dot net):
> > On Thu, 14 Jun 2001, Nhan NGO DINH (OCIC Missionary Service) wrote:
> >
> > > I'm currently using Qpopper 4.0.3, and finally I've succeeded to set it up
> > > using PAM modules (pam_mysql). Did you patch Qpopper to natively support mysql?
>
> yes, native, the pam module won't be sufficient for my needs. i'm sorry
> that i dont have a patch for 4.0.x, to be honest, i installed 4.0.3 just
> yesterday..i dont know when/if i'll have a patch for it.
> if you're 'patch' savvy, you're welcome to try and evolve it to make it
> work for 4.0
>
> -Tony
> .-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-.
> Anthony J. Biacco Network Administrator/Engineer
> thelittleprince at asteroid-b612 dot org Intergrafix Internet Services
>
> "Dream as if you'll live forever, live as if you'll die today"
> http://www.asteroid-b612.org http://www.intergrafix.net
> .-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-.
> >
> > >
> > > At 11.56 13/06/01 -0400, you wrote:
> > > >I offered to qualcomm to submit a patch back when 3.1.2 was the latest
> > > >version, but got no reply.
> > > >If anyone wants to test out the patch with vanilla 3.1.2, let me know,
> > > >i'll send it to you. It's about 85k.
> > > >
> > > >-Tony
> > > >.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-.
> > > >Anthony J. Biacco Network Administrator/Engineer
> > > >thelittleprince at asteroid-b612 dot org Intergrafix Internet Services
> > > >
> > > > "Dream as if you'll live forever, live as if you'll die today"
> > > >http://www.asteroid-b612.org http://www.intergrafix.net
> > > >.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-.
> > > >
> > > >On Tue, 12 Jun 2001, Chuck Yerkes wrote:
> > > >
> > > > > Then put it in. The hard part? Opening up and breaking down
> > > > > the connection to a SQL server for each connection.
> > > > >
> > > > > But it's just not THAT hard.
> > > > >
> > > > >
> > > > > Quoting Admin Mailing Lists (mlist at intergrafix dot net):
> > > > > > >
> > > > > > > May be - it's just my opinion - that would be useful to have an
> > > > option that
> > > > > > > allows users to configure --disable-... this type of pwnam query. That
> > > > > > > would allow to check against an external password database without
> > > > having
> > > > > > > passwd entries for each user.
> > > > > > >
> > > > > >
> > > > > > hence the long-time wish for mysql support
> > > > > >
> > > > > > -Tony
> > > > > > .-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-.
> > > > > > Anthony J. Biacco Network Administrator/Engineer
> > > > > > thelittleprince at asteroid-b612 dot org Intergrafix Internet Services
> > > > > >
> > > > > > "Dream as if you'll live forever, live as if you'll die today"
> > > > > > http://www.asteroid-b612.org http://www.intergrafix.net
> > > > > > .-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-.
> > > > >
> > >
> > > Nhan NGO DINH
> > > OCIC Missionary Service
> > > OCICNet System Administrator
> > >
> > > e-mail: nngodinh at ocic.org, admin at rome dot ocicnet dot net
> > > http://www.ocic.org/missions (OCIC Missionary Service Web Site)
> > > http://www.ocicnet.net (OCICNet Web Site)
> > >
> > >
> >
> >
Date: Fri, 15 Jun 2001 12:30:17 -0400
From: Forrest Aldrich <forrie at forrie dot com>
Subject: I/O errors
I've been seeing these errors from time-to-time and am not sure what to
make of it -- other than perhaps the client software not communicating
properly -- it's likely outlook or something of that ilk:
Jun 15 12:02:17 drama popper[74306]: I/O error flushing output to client
mvkelly at ip-67-65-65.la.ourcompany.net [216.00.00.65]: Operation not
permitted (1)
These entries will be repeated several times for each instance.
_F
Date: Fri, 15 Jun 2001 18:39:01 +0200
From: "Nhan NGO DINH (OCIC Missionary Service)" <nngodinh at ocic dot org>
Subject: Re: mysql qpopper (was Re: PAM problems)
Are we still talking about authentication or even about mailbox storing?
At 09.18 15/06/01 -0700, you wrote:
>The main problem being that you're gonna hurt
>setting up and breaking down a SQL connection
>hundreds of times/second.
>
>Have you ponder Radius and backing radius with SQL?
>Local connections are faster, something with cache is
>also a Good Thing.
>
>Quoting Admin Mailing Lists (mlist at intergrafix dot net):
> > > On Thu, 14 Jun 2001, Nhan NGO DINH (OCIC Missionary Service) wrote:
> > >
> > > > I'm currently using Qpopper 4.0.3, and finally I've succeeded to
> set it up
> > > > using PAM modules (pam_mysql). Did you patch Qpopper to natively
> support mysql?
> >
> > yes, native, the pam module won't be sufficient for my needs. i'm sorry
> > that i dont have a patch for 4.0.x, to be honest, i installed 4.0.3 just
> > yesterday..i dont know when/if i'll have a patch for it.
> > if you're 'patch' savvy, you're welcome to try and evolve it to make it
> > work for 4.0
> >
> > -Tony
> > .-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-.
> > Anthony J. Biacco Network Administrator/Engineer
> > thelittleprince at asteroid-b612 dot org Intergrafix Internet Services
> >
> > "Dream as if you'll live forever, live as if you'll die today"
> > http://www.asteroid-b612.org http://www.intergrafix.net
> > .-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-.
> > >
> > > >
> > > > At 11.56 13/06/01 -0400, you wrote:
> > > > >I offered to qualcomm to submit a patch back when 3.1.2 was the latest
> > > > >version, but got no reply.
> > > > >If anyone wants to test out the patch with vanilla 3.1.2, let me know,
> > > > >i'll send it to you. It's about 85k.
> > > > >
> > > > >-Tony
> > > > >.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-.
> _.-.
> > > > >Anthony J. Biacco Network Administrator/Engineer
> > > > >thelittleprince at asteroid-b612 dot org Intergrafix Internet Services
> > > > >
> > > > > "Dream as if you'll live forever, live as if you'll die today"
> > > > >http://www.asteroid-b612.org http://www.intergrafix.net
> > > > >.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-.
> _.-.
> > > > >
> > > > >On Tue, 12 Jun 2001, Chuck Yerkes wrote:
> > > > >
> > > > > > Then put it in. The hard part? Opening up and breaking down
> > > > > > the connection to a SQL server for each connection.
> > > > > >
> > > > > > But it's just not THAT hard.
> > > > > >
> > > > > >
> > > > > > Quoting Admin Mailing Lists (mlist at intergrafix dot net):
> > > > > > > >
> > > > > > > > May be - it's just my opinion - that would be useful to
> have an
> > > > > option that
> > > > > > > > allows users to configure --disable-... this type of pwnam
> query. That
> > > > > > > > would allow to check against an external password database
> without
> > > > > having
> > > > > > > > passwd entries for each user.
> > > > > > > >
> > > > > > >
> > > > > > > hence the long-time wish for mysql support
> > > > > > >
> > > > > > > -Tony
> > > > > > >
> .-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-.
> > > > > > > Anthony J. Biacco Network
> Administrator/Engineer
> > > > > > > thelittleprince at asteroid-b612 dot org Intergrafix Internet
> Services
> > > > > > >
> > > > > > > "Dream as if you'll live forever, live as if you'll die
> today"
> > > > > > >
> http://www.asteroid-b612.org http://www.intergrafix.net
> > > > > > >
> .-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-.
> > > > > >
> > > >
> > > > Nhan NGO DINH
> > > > OCIC Missionary Service
> > > > OCICNet System Administrator
> > > >
> > > > e-mail: nngodinh at ocic.org, admin at rome dot ocicnet dot net
> > > > http://www.ocic.org/missions (OCIC Missionary Service Web Site)
> > > > http://www.ocicnet.net (OCICNet Web Site)
> > > >
> > > >
> > >
> > >
Nhan NGO DINH
OCIC Missionary Service
OCICNet System Administrator
e-mail: nngodinh at ocic.org, admin at rome dot ocicnet dot net
http://www.ocic.org/missions (OCIC Missionary Service Web Site)
http://www.ocicnet.net (OCICNet Web Site)
Date: Fri, 15 Jun 2001 09:51:52 -0700
From: Chuck Yerkes <chuck+qpopper at yerkes dot com>
Subject: Re: mysql qpopper (was Re: PAM problems)
et.net>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
In-Reply-To: <5.0.2.1.0.20010615183805.02f994b0 at mail.rome.ocicnet dot net>; from nngodinh at ocic dot org on Fri, Jun 15, 2001 at 06:39:01PM +02
You don't even want to THINK about SQL for message storage.
It's bad enough on high end SQL servers, mysql isnt going to
succeed with messages varying from 1k to 10MB (blobs) like a
special system called The File System.
Quoting Nhan NGO DINH (OCIC Missionary Service) (nngodinh at ocic dot org):
> Are we still talking about authentication or even about mailbox storing?
>
> At 09.18 15/06/01 -0700, you wrote:
> >The main problem being that you're gonna hurt
> >setting up and breaking down a SQL connection
> >hundreds of times/second.
> >
> >Have you pondered Radius and backing radius with SQL?
> >Local connections are faster, something with cache is
> >also a Good Thing.
Date: Fri, 15 Jun 2001 08:14:18 -1000
From: Clifton Royston <cliftonr at lava dot net>
Subject: Re: I/O errors
On Fri, Jun 15, 2001 at 12:30:17PM -0400, Forrest Aldrich wrote:
> I've been seeing these errors from time-to-time and am not sure what to
> make of it -- other than perhaps the client software not communicating
> properly -- it's likely outlook or something of that ilk:
>
> Jun 15 12:02:17 drama popper[74306]: I/O error flushing output to client
> mvkelly at ip-67-65-65.la.ourcompany.net [216.00.00.65]: Operation not
> permitted (1)
>
> These entries will be repeated several times for each instance.
I'd like an authoritative answer to this too, if possible. It *looks*
to me like this is what happens when the client disconnects without a
"quit" due to being disconnected, timing out on their side, etc. but I
am not really sure.
If so, I think this is another case of 4.x being a little too
verbose, like the "noop is null function" message. I do know it is
confusing our tech support staff when they try to help figure out a
customer's problem, and go to the POP logs and see I/O errors reported
for this customer. For now I've been suggesting they just ignore it.
Would there be a way to detect the case of an unexpected
disconnection, log that, and then ignore the remainder of errors while
trying to flush output?
-- Clifton
--
Clifton Royston -- LavaNet Systems Architect -- cliftonr at lava dot net
WWJD? "JWRTFM!" - Scott Dorsey (kludge) "JWG" - Eddie Aikau
Date: Fri, 15 Jun 2001 14:12:47 -0500
From: Steve Palm <stevep at sga dot org>
Subject: SSL and XTND XMIT ??
I have SSL working fine for checking mail, but when I attempt to use XTND XMIT it causes SSL failure.
However, I can turn off SSL and then XTND XMIT works fine.
Client software is the latest Eudora v5 for Macintosh, server is QPopper 4.0.3.
Any ideas? Are these just incompatible?
--
-------------------------
Steven Palm
Slavic Gospel Association - Loves Park - IL - USA
stevep at sga dot org
-------------------------
Date: Fri, 15 Jun 2001 15:13:58 -0400 (EDT)
From: Admin Mailing Lists <mlist at intergrafix dot net>
Subject: Re: mysql qpopper (was Re: PAM problems)
On Fri, 15 Jun 2001, Chuck Yerkes wrote:
> The main problem being that you're gonna hurt
> setting up and breaking down a SQL connection
> hundreds of times/second.
>
hundreds per second? if you get that many logins per second..i know i
dont. 1 connection/1 query for each pop3 login as i see it.
we're not talking about putting the actual mail in mysql, mind you.
at least i'm not.
> Have you ponder Radius and backing radius with SQL?
> Local connections are faster, something with cache is
> also a Good Thing.
>
I actually patched qpopper with native radius calls too (some time ago),
although i dont see the improvement for it over directly to mysql..
Why have a go between? (assuming your radius auth db is in mysql, which
mine is)
Both my radius server and mysql server are local.
-Tony
.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-.
Anthony J. Biacco Network Administrator/Engineer
thelittleprince at asteroid-b612 dot org Intergrafix Internet Services
"Dream as if you'll live forever, live as if you'll die today"
http://www.asteroid-b612.org http://www.intergrafix.net
.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-.
> Quoting Admin Mailing Lists (mlist at intergrafix dot net):
> > > On Thu, 14 Jun 2001, Nhan NGO DINH (OCIC Missionary Service) wrote:
> > >
> > > > I'm currently using Qpopper 4.0.3, and finally I've succeeded to set it up
> > > > using PAM modules (pam_mysql). Did you patch Qpopper to natively support mysql?
> >
> > yes, native, the pam module won't be sufficient for my needs. i'm sorry
> > that i dont have a patch for 4.0.x, to be honest, i installed 4.0.3 just
> > yesterday..i dont know when/if i'll have a patch for it.
> > if you're 'patch' savvy, you're welcome to try and evolve it to make it
> > work for 4.0
> >
> > -Tony
> > .-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-.
> > Anthony J. Biacco Network Administrator/Engineer
> > thelittleprince at asteroid-b612 dot org Intergrafix Internet Services
> >
> > "Dream as if you'll live forever, live as if you'll die today"
> > http://www.asteroid-b612.org http://www.intergrafix.net
> > .-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-.
> > >
> > > >
> > > > At 11.56 13/06/01 -0400, you wrote:
> > > > >I offered to qualcomm to submit a patch back when 3.1.2 was the latest
> > > > >version, but got no reply.
> > > > >If anyone wants to test out the patch with vanilla 3.1.2, let me know,
> > > > >i'll send it to you. It's about 85k.
> > > > >
> > > > >-Tony
> > > > >.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-.
> > > > >Anthony J. Biacco Network Administrator/Engineer
> > > > >thelittleprince at asteroid-b612 dot org Intergrafix Internet Services
> > > > >
> > > > > "Dream as if you'll live forever, live as if you'll die today"
> > > > >http://www.asteroid-b612.org http://www.intergrafix.net
> > > > >.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-.
> > > > >
> > > > >On Tue, 12 Jun 2001, Chuck Yerkes wrote:
> > > > >
> > > > > > Then put it in. The hard part? Opening up and breaking down
> > > > > > the connection to a SQL server for each connection.
> > > > > >
> > > > > > But it's just not THAT hard.
> > > > > >
> > > > > >
> > > > > > Quoting Admin Mailing Lists (mlist at intergrafix dot net):
> > > > > > > >
> > > > > > > > May be - it's just my opinion - that would be useful to have an
> > > > > option that
> > > > > > > > allows users to configure --disable-... this type of pwnam query. That
> > > > > > > > would allow to check against an external password database without
> > > > > having
> > > > > > > > passwd entries for each user.
> > > > > > > >
> > > > > > >
> > > > > > > hence the long-time wish for mysql support
> > > > > > >
> > > > > > > -Tony
> > > > > > > .-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-.
> > > > > > > Anthony J. Biacco Network Administrator/Engineer
> > > > > > > thelittleprince at asteroid-b612 dot org Intergrafix Internet Services
> > > > > > >
> > > > > > > "Dream as if you'll live forever, live as if you'll die today"
> > > > > > > http://www.asteroid-b612.org http://www.intergrafix.net
> > > > > > > .-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-.
> > > > > >
> > > >
> > > > Nhan NGO DINH
> > > > OCIC Missionary Service
> > > > OCICNet System Administrator
> > > >
> > > > e-mail: nngodinh at ocic.org, admin at rome dot ocicnet dot net
> > > > http://www.ocic.org/missions (OCIC Missionary Service Web Site)
> > > > http://www.ocicnet.net (OCICNet Web Site)
> > > >
> > > >
> > >
> > >
>
Date: Fri, 15 Jun 2001 17:26:52 -0700
From: Randall Gellens <randy at qualcomm dot com>
Subject: Re: I/O errors
At 8:14 AM -1000 6/15/01, Clifton Royston wrote:
> I'd like an authoritative answer to this too, if possible. It *looks*
> to me like this is what happens when the client disconnects without a
> "quit" due to being disconnected, timing out on their side, etc. but I
> am not really sure.
Yes, that's it.
Date: Sat, 16 Jun 2001 15:42:05 +0200
From: "Nhan NGO DINH (OCIC Missionary Service)" <nngodinh at ocic dot org>
Subject: Re: mysql qpopper
I want to think about a cluster mail storage system, like an entry each 64k
of mail, to avoid big message bodies in a db field. Anyway this should
improve mailbox access speed and it could give mailbox availability for a
cluster of servers. It seems to me a good idea, but too difficult to
implement. May be there is already some stuff like that around here.
At 09.51 15/06/01 -0700, you wrote:
>et.net>
>Mime-Version: 1.0
>Content-Type: text/plain; charset=us-ascii
>Content-Disposition: inline
>User-Agent: Mutt/1.2.5i
>In-Reply-To: <5.0.2.1.0.20010615183805.02f994b0 at mail.rome.ocicnet dot net>;
>from nngodinh at ocic dot org on Fri, Jun 15, 2001 at 06:39:01PM +0200
>
>You don't even want to THINK about SQL for message storage.
>
>It's bad enough on high end SQL servers, mysql isnt going to
>succeed with messages varying from 1k to 10MB (blobs) like a
>special system called The File System.
>
>
>Quoting Nhan NGO DINH (OCIC Missionary Service) (nngodinh at ocic dot org):
> > Are we still talking about authentication or even about mailbox storing?
> >
> > At 09.18 15/06/01 -0700, you wrote:
> > >The main problem being that you're gonna hurt
> > >setting up and breaking down a SQL connection
> > >hundreds of times/second.
> > >
> > >Have you pondered Radius and backing radius with SQL?
> > >Local connections are faster, something with cache is
> > >also a Good Thing.
Date: Thu, 14 Jun 2001 17:35:51 +0200
From: hypnose at t-online dot de (guenter wessling)
Subject: 403 and IP confirmation
Hi, all.
My users have static IP´s.
Is there a way in qpopper 403 to determine whether the sender is authentic ?
I.e.: check the IP ?
SSL is great in the first place, but IP check would be sort of "small
digital signature".
guenter
guenter wessling (hypnose at t-online dot de)
Date: Mon, 18 Jun 2001 11:40:00 +1000 (EST)
From: Grant <grant at conprojan.com dot au>
Subject: Qmail ./Maildir/ support.
Does Qpopper support Qmail's ./Maildir/ directory for retrieving email?
I have read the FAQ and it says nothing about Qmail nor ./Maildir/
I have read the manual and while it says you can configure Qpopper to use
an alternate mail location; will it recognise the ./Maildir structure?
./Maildir/
|_ cur/
|_ new/
|_ tmp/
Thankyou.
From: "Dean Staff" <dean at protus dot com>
Date: Sun, 17 Jun 2001 23:09:06 -0400
Subject: Re: Qmail ./Maildir/ support.
On 18 Jun 2001, at 11:40, Grant wrote:
> Does Qpopper support Qmail's ./Maildir/ directory for retrieving email?
>
Hello Grant,
I'll give you the short answer first....
No.
At present Qpopper does not support qmail's Maildir format.
However it should work if you configure qmail to use Mailbox
instead of Maildir.
However, I asked the same question about a month ago, and got
the same anwer, but I did find out that Maildir support is on the
wish list for the next major release. Whether or not it makes it
remains to be seen. And because of that, I, for the time being, have
opted not to use qpopper on my qmail boxes. I'd rather keep the
Maildir format. There are no headaches of file locking, which would
be required for either the standard /var/spool/mail, or the
$HOME/Mailbox formats. Qpopper may be the best POP3 daemon
available, but it still has it's short comings.
My $0.02 worth.
Good luck
Dean
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Dean Staff
Protus IP Solutions
210 - 2379 Holly Lane
Ottawa, ON K1V 7P2 Canada
613-733-0000 ex 546 Fax 613-248-4553
e-mail: dean at protus.com Web: http://www.protus dot com
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Subject: Re: Qmail ./Maildir/ support.
Date: Mon, 18 Jun 2001 11:57:11 +0200 (MET DST)
From: Eric Luyten <Eric.Luyten at vub.ac dot be>
> At present Qpopper does not support qmail's Maildir format.
...
> However, I asked the same question about a month ago, and got
> the same anwer, but I did find out that Maildir support is on
> the wish list for the next major release.
That's one wish we want to subscribe to.
Please keep in mind (and at Qualcomm they certainly do) that using the
Maildir format alone will not get you very far unless some metadata is
stored in a structure very similar to the .cache file available since
QP 4.0
We also might want to have the Mail Delivery Agent update that structure.
(requiring a file lock, I know...)
Imagine the POP3 daemon being forced to open/close hundreds of (small)
files on each invocation. That would *really* bring your server to its
knees.
Eric.
Date: Mon, 18 Jun 2001 14:42:24 -0700
From: Chuck Yerkes <chuck+qpopper at yerkes dot com>
Subject: Re: 403 and IP confirmation
qpopper doesn't deal with senders.
The MTA does. Sendmail supports SMTP AUTH.
S/MIME and PGP let you "sign" the contents of messages.
IP is extremely in the wrong layer.
Quoting guenter wessling (hypnose at t-online dot de):
> Hi, all.
> My users have static IP´s.
> Is there a way in qpopper 403 to determine whether the sender is authentic ?
> I.e.: check the IP ?
> SSL is great in the first place, but IP check would be sort of "small
> digital signature".
>
> guenter
> guenter wessling (hypnose at t-online dot de)
Date: Mon, 18 Jun 2001 17:04:11 -0700
From: Randall Gellens <randy at qualcomm dot com>
Subject: Re: 403 and IP confirmation
At 5:35 PM +0200 6/14/01, guenter wessling wrote:
> Hi, all.
> My users have static IP´s.
> Is there a way in qpopper 403 to determine whether the sender is
authentic ?
> I.e.: check the IP ?
> SSL is great in the first place, but IP check would be sort of "small
> digital signature".
>
> guenter
> guenter wessling (hypnose at t-online dot de)
You want Qpopper to check during authentication that the user name
entered matches the IP address being used?
Qpopper doesn't currently do this, but you could patch it or create
a PAM module to do it.
Date: Tue, 19 Jun 2001 10:56:03 -0500 (CDT)
From: <james at digit.bloomnet dot com>
Subject: Re: 403 and IP confirmation
I believe that TCP wrappers can do it provided the sessions are not using
encryption.
If I remember correctly the syntax is user@IPaddress or user@reverseDNS
popper: test at 10.1.1 dot 1
Personally, I prefer to use SSH based on DSA keys then use port
forwarding. I put the users in a menu where the only option is quit. I
allow popper from 127.0.0.1 only. Openssh has a free sshd. Teraterm has
a free ssh client, but it only suppports version 1.
James
On Mon, 18 Jun 2001, Randall Gellens wrote:
> At 5:35 PM +0200 6/14/01, guenter wessling wrote:
>
> > Hi, all.
> > My users have static IP´s.
> > Is there a way in qpopper 403 to determine whether the sender is authe
ntic ?
> > I.e.: check the IP ?
> > SSL is great in the first place, but IP check would be sort of "small
> > digital signature".
> >
> > guenter
> > guenter wessling (hypnose at t-online dot de)
>
> You want Qpopper to check during authentication that the user name
> entered matches the IP address being used?
>
> Qpopper doesn't currently do this, but you could patch it or create
> a PAM module to do it.
>
Date: Tue, 19 Jun 2001 09:03:22 -1000
From: Clifton Royston <cliftonr at lava dot net>
Subject: Tentative patch for keep-temp-drop date update
--mP3DRpeJDSE+ciuQ
Content-Type: text/plain; charset=us-ascii
This has received only the most cursory testing so far, but it
appears to work correctly to solve the problem of updating dates on the
.user.pop files in server mode if keep-temp-drop set, and it doesn't
look like it should affect or break anything else.
Recommended for the adventurous and those who will do their own
testing anyway; others may want to wait until it's in an official
release.
I'm testing a bit more and then will put it into production here.
-- Clifton
--
Clifton Royston -- LavaNet Systems Architect -- cliftonr at lava dot net
WWJD? "JWRTFM!" - Scott Dorsey (kludge) "JWG" - Eddie Aikau
--mP3DRpeJDSE+ciuQ
Content-Type: text/plain; charset=us-ascii
Content-Disposition: attachment; filename="keep-temp-touch.pat"
--mP3DRpeJDSE+ciuQ--
Date: Tue, 19 Jun 2001 09:15:12 -1000
From: Clifton Royston <cliftonr at lava dot net>
Subject: Re: Tentative patch for keep-temp-drop date update
On Tue, Jun 19, 2001 at 09:03:22AM -1000, Clifton Royston wrote:
> This has received only the most cursory testing so far, but it
> appears to work correctly to solve the problem of updating dates on the
> .user.pop files in server mode if keep-temp-drop set, and it doesn't
> look like it should affect or break anything else.
>
> Recommended for the adventurous and those who will do their own
> testing anyway; others may want to wait until it's in an official
> release.
Sorry, the mailing list seems to have stripped the attachment. Here
it is, pasted inline:
*** popper/pop_dropcopy.c 2001/06/02 02:24:34 1.1
--- popper/pop_dropcopy.c 2001/06/15 00:38:43
***************
*** 1645,1650 ****
--- 1645,1658 ----
* Because p->drop is used for bulletins. Right now it reverts back to
* regular mode if drop box open fails. </todo>
*/
+ if ( p->bKeep_temp_drop && p->server_mode ) {
+ /*
+ * keep-temp + server_mode: touch it to ensure access time is updated!
+ * (If we're not in server_mode it will get written, and if we
+ * aren't going to keep it, we don't care about the access time.)
+ */
+ touch_file( p->temp_drop, p->trace );
+ }
mfd = open ( p->drop_name, O_RDWR );
if ( mfd > 0 ) {
/*
--
Clifton Royston -- LavaNet Systems Architect -- cliftonr at lava dot net
WWJD? "JWRTFM!" - Scott Dorsey (kludge) "JWG" - Eddie Aikau
Date: Wed, 20 Jun 2001 14:10:14 -0400 (EDT)
From: Admin Mailing Lists <mlist at intergrafix dot net>
Subject: mysql patch for 4.0.3
I just finished a mysql patch for 4.0.3.
It's not thoroughly tested, but from my inital testing it seems to work
ok.
The patch is on my software page at:
http://www.asteroid-b612.org/software
near the bottom.
Input and bug reports are appreciated. Keep in mind i'm not a mysql
guru.
-Tony
.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-.
Anthony J. Biacco Network Administrator/Engineer
thelittleprince at asteroid-b612 dot org Intergrafix Internet Services
"Dream as if you'll live forever, live as if you'll die today"
http://www.asteroid-b612.org http://www.intergrafix.net
.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-.
From: "Vincent Colet" <vcolet at dsimprove dot be>
Subject: log file and volume of data ...
Date: Thu, 21 Jun 2001 17:15:46 -0700
This is a multi-part message in MIME format.
------=_NextPart_000_0020_01C0FA75.CF9C52A0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
one question ...
I use qpopper and I want to check the volume of mail data fetched by
some users by POP3
ok with the statistics option activated et we can check syslog/log file
(f.e. /var/log/mail)
and search some records like
Feb 17 00:00:49 mail popper[29402]: Stats: randy 0 0 1 385
randy.example.org 192.168.2.4
the 2nd number after username is the bytes deleted from server, the 4th
number after the username is the
bytes left on server; but why it don't contains some info on true bytes
sent back to user ?
1) a user can delete messages without downloading it at all
2) a user can fetch the same message more that one time without
delete it on server
How evaluate correctly the volume of data fetched ?
thanks,
Vincent Colet
------=_NextPart_000_0020_01C0FA75.CF9C52A0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META content="text/html; charset=iso-8859-1"
http-equiv=Content-Type>
<META content="MSHTML 5.00.3103.1000" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT face=Arial size=2>one question ...</FONT></DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>I use qpopper and I want to check
the volume
of mail data fetched by some users by POP3 </FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>ok with the statistics option activated
et we can
check syslog/log file (f.e. /var/log/mail)</FONT></DIV>
<DIV><FONT face=Arial size=2>and search some records
like</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2> Feb 17 00:00:49 mail
popper[29402]: Stats: randy 0 0 1 385 randy.example.org
192.168.2.4</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>the 2nd number after username is
the bytes
deleted from server, the 4th number after the username is
the</FONT></DIV>
<DIV><FONT face=Arial size=2>bytes left on server; but
</FONT><FONT
face=Arial size=2>why it don't contains some info on true
bytes sent back
to user ?</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2> 1) a user can
delete
messages without downloading it at all</FONT></DIV>
<DIV><FONT face=Arial size=2> 2) a user can fetch
the same
message more that one time without delete it on server</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>How evaluate correctly the volume of
data fetched
?</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>thanks,</FONT></DIV>
<DIV><FONT face=Arial size=2>Vincent
Colet</FONT></DIV></BODY></HTML>
------=_NextPart_000_0020_01C0FA75.CF9C52A0--
Date: Thu, 21 Jun 2001 11:52:45 -0400 (EDT)
From: Michael Puskar <puskar at i4.nyu dot edu>
Subject: problem w/ Solaris 8, PAM, and qpoppper 4.0.3
I have tried getting qpopper to work with PAM on a Solaris 8 box. I
configured with ./configure --with-pam=pop3 and the compile goes fine. I
make install. I edit /etc/pam.conf. I edit inetd.conf to allow pop3 and
restart inetd.
The pam.conf is :
pop3 auth required /usr/lib/security/$ISA/pam_krb5.so.1
The inetd is:
pop3 stream tcp nowait root /usr/local/sbin/popper qpopper -t/tmp/pop.log -s
The error message I get is:
Jun 20 18:09:45.783 2001 [19952] mp1 at i4.nyu.edu (128.122.108.192): -ERR
[AUTH] PAM authentication failed for user "mp1": Authentication failed (9)
Jun 20 18:09:45.783 2001
Jun 20 18:09:45.784 2001 [19952] [AUTH] Failed attempted login to mp1 from host (i4.nyu.edu) 128.
122.108.192
Jun 20 18:09:45.784 2001
Has any one gotten qpopper to work PAM on Solaris? Anyone know what this
error means?
Thanks,
Michael
Date: Thu, 21 Jun 2001 11:54:23 -0400
From: WSO Support <mailinglists at wso dot net>
Subject: Re: log file and volume of data ...
I have the EXACT same question, thanks for posting it.
-Chris
WSO
At 05:15 PM 6/21/2001 -0700, you wrote:
>one question ...
>
>
>I use qpopper and I want to check the volume of mail data fetched by some users by POP3
>
>ok with the statistics option activated et we can check syslog/log file (f.e. /var/log/mail)
>and search some records like
>
> Feb 17 00:00:49 mail popper[29402]: Stats: randy 0 0 1 385 randy.example.org 192.168.2.4
>
>the 2nd number after username is the bytes deleted from server, the 4th number after the username is the
>bytes left on server; but why it don't contains some info on true bytes sent back to user ?
>
> 1) a user can delete messages without downloading it at all
> 2) a user can fetch the same message more that one time without delete it on server
>
>How evaluate correctly the volume of data fetched ?
>
>thanks,
>Vincent Colet
Date: Thu, 21 Jun 2001 12:35:16 -0400 (EDT)
From: Admin Mailing Lists <mlist at intergrafix dot net>
Subject: Re: log file and volume of data ...
enable the debug/trace #defines in pop_send.c?
-Tony
.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-.
Anthony J. Biacco Network Administrator/Engineer
thelittleprince at asteroid-b612 dot org Intergrafix Internet Services
"Dream as if you'll live forever, live as if you'll die today"
http://www.asteroid-b612.org http://www.intergrafix.net
.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-.
On Thu, 21 Jun 2001, WSO Support wrote:
> I have the EXACT same question, thanks for posting it.
>
> -Chris
> WSO
>
>
> At 05:15 PM 6/21/2001 -0700, you wrote:
> >one question ...
> >
> >
> >I use qpopper and I want to check the volume of mail data fetched by some users by POP3
> >
> >ok with the statistics option activated et we can check syslog/log file (f.e. /var/log/mail)
> >and search some records like
> >
> > Feb 17 00:00:49 mail popper[29402]: Stats: randy 0 0 1 385 randy.example.org 192.168.2.4
> >
> >the 2nd number after username is the bytes deleted from server, the 4th number after the username is the
> >bytes left on server; but why it don't contains some info on true bytes sent back to user ?
> >
> > 1) a user can delete messages without downloading it at all
> > 2) a user can fetch the same message more that one time without delete it on server
> >
> >How evaluate correctly the volume of data fetched ?
> >
> >thanks,
> >Vincent Colet
>
>
From: "Vincent Colet" <vcolet at dsimprove dot be>
Subject: Fw: log file and volume of data ...
Date: Thu, 21 Jun 2001 20:10:53 -0700
>
> enable the debug/trace #defines in pop_send.c?
>
I don't know ... because it's not me that have installed the qpopper on the
local hardware ...
but I know that is an very old version (2.5) urrghh !
...so ok, I will reinstall the last version with correct flag in configure
file ...
and my question can be reformulated in "why the statistics after each
session (enabled with option -t) don't still integrate one additionnal field
(after the 4 others numbers), that give the amount of fetched data (header +
body) ?"
thanks for feedback
Vincent Colet
> .-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-.
>
> On Thu, 21 Jun 2001, WSO Support wrote:
>
> > I have the EXACT same question, thanks for posting it.
> >
> > -Chris
> > WSO
> >
> >
> > At 05:15 PM 6/21/2001 -0700, you wrote:
> > >one question ...
> > >
> > >
> > >I use qpopper and I want to check the volume of mail data fetched by
some users by POP3
> > >
> > >ok with the statistics option activated et we can check syslog/log file
(f.e. /var/log/mail)
> > >and search some records like
> > >
> > > Feb 17 00:00:49 mail popper[29402]: Stats: randy 0 0 1 385
randy.example.org 192.168.2.4
> > >
> > >the 2nd number after username is the bytes deleted from server, the 4th
number after the username is the
> > >bytes left on server; but why it don't contains some info on true
bytes sent back to user ?
> > >
> > > 1) a user can delete messages without downloading it at all
> > > 2) a user can fetch the same message more that one time without
delete it on server
> > >
> > >How evaluate correctly the volume of data fetched ?
> > >
> > >thanks,
> > >Vincent Colet
> >
> >
>
>
Date: Thu, 21 Jun 2001 14:19:44 -0400 (EDT)
From: Admin Mailing Lists <mlist at intergrafix dot net>
Subject: Re: Fw: log file and volume of data ...
>
> but I know that is an very old version (2.5) urrghh !
>
damn, are you just itchin' to be hacked?
death wish.
>
> and my question can be reformulated in "why the statistics after each
> session (enabled with option -t) don't still integrate one additionnal field
> (after the 4 others numbers), that give the amount of fetched data (header +
> body) ?"
>
that i couldn't say, question for qualcomm
-Tony
.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-.
Anthony J. Biacco Network Administrator/Engineer
admin at intergrafix dot net Intergrafix Internet Services
"Dream as if you'll live forever, live as if you'll die today"
http://www.asteroid-b612.org http://www.intergrafix.net
.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-.
> >
> > On Thu, 21 Jun 2001, WSO Support wrote:
> >
> > > I have the EXACT same question, thanks for posting it.
> > >
> > > -Chris
> > > WSO
> > >
> > >
> > > At 05:15 PM 6/21/2001 -0700, you wrote:
> > > >one question ...
> > > >
> > > >
> > > >I use qpopper and I want to check the volume of mail data fetched by
> some users by POP3
> > > >
> > > >ok with the statistics option activated et we can check syslog/log file
> (f.e. /var/log/mail)
> > > >and search some records like
> > > >
> > > > Feb 17 00:00:49 mail popper[29402]: Stats: randy 0 0 1 385
> randy.example.org 192.168.2.4
> > > >
> > > >the 2nd number after username is the bytes deleted from server, the 4th
> number after the username is the
> > > >bytes left on server; but why it don't contains some info on true
> bytes sent back to user ?
> > > >
> > > > 1) a user can delete messages without downloading it at all
> > > > 2) a user can fetch the same message more that one time without
> delete it on server
> > > >
> > > >How evaluate correctly the volume of data fetched ?
> > > >
> > > >thanks,
> > > >Vincent Colet
> > >
> > >
> >
> >
>
>
Date: Thu, 21 Jun 2001 20:45:41 +0200
From: Jesus Cea Avion <jcea at argo dot es>
Subject: Re: Fw: log file and volume of data ...
> and my question can be reformulated in "why the statistics after each
> session (enabled with option -t) don't still integrate one additionnal
> field (after the 4 others numbers), that give the amount of fetched
> data (header + body) ?"
I've done trivial patch against current sources:
>>>>>
Index: popper/pop_updt.c
==================================================================
RCS file: /opt/src/cvsroot/qpopper/popper/pop_updt.c,v
retrieving revision 1.1.1.2
retrieving revision 1.1.1.2.14.1
diff -c -u -r1.1.1.2 -r1.1.1.2.14.1
cvs server: conflicting specifications of output style
--- popper/pop_updt.c 2001/04/16 21:44:34 1.1.1.2
+++ popper/pop_updt.c 2001/06/04 06:42:58 1.1.1.2.14.1
@@ -293,10 +293,11 @@
DEBUG_LOG0 ( p, "Checking to see if all messages were deleted" );
if ( p->bStats ) {
- pop_log ( p, POP_PRIORITY, HERE, "Stats: %s %d %ld %d %ld %s %s",
+ pop_log ( p, POP_PRIORITY, HERE, "Stats: %s %d %ld %d %ld %ld %s %s",
p->user, p->msgs_deleted, p->bytes_deleted,
p->msg_count - p->msgs_deleted,
p->drop_size - p->bytes_deleted,
+ ftell(p->output),
p->client, p->ipaddr );
}
<<<<<
--
Jesus Cea Avion _/_/ _/_/_/ _/_/_/
jcea at argo.es http://www.argo dot es/~jcea/ _/_/ _/_/ _/_/ _/_/ _/_/
_/_/ _/_/ _/_/_/_/_/
PGP Key Available at KeyServ _/_/ _/_/ _/_/ _/_/ _/_/
"Things are not so easy" _/_/ _/_/ _/_/ _/_/ _/_/ _/_/
"My name is Dump, Core Dump" _/_/_/ _/_/_/ _/_/ _/_/
"El amor es poner tu felicidad en la felicidad de otro" - Leibniz
Date: Thu, 21 Jun 2001 15:56:27 -0300
From: Luis F V Gomes <lf at ele.puc-rio dot br>
Subject: Qpopper+Kerberos in Solaris 8 for Intel
I am having linking problems compiling qpopper 4.0.2 in a Solaris 8 Intel
machine.
I downloaded MIT's Kerberos 5 vs 1.2.2 but when I do
make
after
./configure --enable-servermode --enable-apop --enable-popuid=root
--with-kerberos5=/usr/local/krb5-1.2.2/src
I got the following error messages about lots of undefined symbols
gcc pop_dele.o pop_dropcopy.o pop_get_command.o pop_get_subcommand.o
pop_init
.o pop_last.o pop_list.o pop_log.o pop_lower.o pop_msg.o pop_parse.o
pop_pass.
o pop_quit.o pop_rset.o pop_send.o pop_stat.o pop_updt.o pop_user.o
pop_xtnd.o
pop_xmit.o popper.o pop_bull.o xtnd_xlst.o pop_uidl.o
mktemp.o pop_rpop.o pop
_apop.o md5.o pop_auth.o pop_pope.o pop_extend.o scram.o hmac.o base64.o
pop_ut
il.o get_sub_opt.o msg_ptr.o drac.o pop_config.o
pop_tls.o pop_tls_openssl.o p
op_tls_sslplus.o sslplus_utils.o main.o pop_cache.o genpath.o -o popper
../mman
gle/libmangle.a \
-I../common ../common/libcommon.a \
-lnsl -lsocket -lresolv -lmail -L/usr/local/krb5-1.2.2/src/lib -
lkrb5util -lkrb5 -ldes425 -lcom_err -R/usr/local/krb5-1.2.2/src/lib -lge
n -lposix4 -lcrypt
Undefined first referenced
symbol in file
krb_mk_priv /usr/local/krb5-1.2.2/src/lib/libkrb5
util.a(compat_recv.o)
krb5_c_encrypt_length /usr/local/krb5-1.2.2/src/lib/libkrb5
.a(enc_helper.o)
krb5_c_random_make_octets /usr/local/krb5-1.2.2/src/lib/libkrb5
.a(gen_seqnum.o)
krb5_c_decrypt /usr/local/krb5-1.2.2/src/lib/libkrb5
.a(kdc_rep_dc.o)
krb5_c_block_size /usr/local/krb5-1.2.2/src/lib/libkrb5
.a(auth_con.o)
krb5_c_string_to_key /usr/local/krb5-1.2.2/src/lib/libkrb5
.a(preauth2.o)
krb5_c_random_seed /usr/local/krb5-1.2.2/src/lib/libkrb5
.a(init_ctx.o)
krb5_c_encrypt /usr/local/krb5-1.2.2/src/lib/libkrb5
.a(enc_helper.o)
krb5_string_to_enctype /usr/local/krb5-1.2.2/src/lib/libkrb5
.a(init_ctx.o)
krb_net_write /usr/local/krb5-1.2.2/src/lib/libkrb5
util.a(compat_recv.o)
krb_net_read /usr/local/krb5-1.2.2/src/lib/libkrb5
util.a(compat_recv.o)
valid_enctype /usr/local/krb5-1.2.2/src/lib/libkrb5
.a(init_ctx.o)
mit_des_key_sched /usr/local/krb5-1.2.2/src/lib/libdes4
25.a(key_sched.o)
krb_rd_req /usr/local/krb5-1.2.2/src/lib/libkrb5
util.a(compat_recv.o)
krb5_encrypt_data /usr/local/krb5-1.2.2/src/lib/libkrb5
.a(preauth.o)
krb5_c_enctype_compare /usr/local/krb5-1.2.2/src/lib/libkrb5
.a(ktf_g_ent.o)
ld: fatal: Symbol referencing errors. No output written to popper
collect2: ld returned 1 exit status
*** Error code 1
make: Fatal error: Command failed for target `popper'
Current working directory /usr/local/qpopper4.0.2/popper
*** Error code 1
make: Fatal error: Command failed for target `popper_server'
The compiler is gcc version 2.95.2 19991024 (release)
I also downloaded Kerberos 5 from Sun but it does not contain the required
*.h and *.lib.
Has anyone already compiled qpopper with Kerberos 5 feature?
Thanks in advance.
Luis F. V. Gomes
Network Administrator
From: "Kenneth Porter" <shiva at well dot com>
Date: Thu, 21 Jun 2001 13:33:04 -0700 (PDT)
Subject: Re: Qpopper+Kerberos in Solaris 8 for Intel
On Thu, 21 Jun 2001 15:56:27 -0300, Luis F V Gomes wrote:
>Undefined first referenced
> symbol in file
>krb_mk_priv /usr/local/krb5-1.2.2/src/lib/libkrb5
>util.a(compat_recv.o)
>krb5_c_encrypt_length /usr/local/krb5-1.2.2/src/lib/libkrb5
>.a(enc_helper.o)
All of your missing symbols are referenced *from* the krb5 library.
That suggests that krb5 might be built wrong. Which of the krb5
libraries provide those symbols?
Ken
mailto:shiva at well dot com
http://www.sewingwitch.com/ken/
[If answering a mailing list posting, please don't cc me your reply. I'll take my answer on the list.]
From: "Kenneth Porter" <shiva at well dot com>
Date: Thu, 21 Jun 2001 13:37:38 -0700 (PDT)
Subject: Re: problem w/ Solaris 8, PAM, and qpoppper 4.0.3
On Thu, 21 Jun 2001 11:52:45 -0400 (EDT), Michael Puskar wrote:
>I have tried getting qpopper to work with PAM on a Solaris 8 box. I
>configured with ./configure --with-pam=pop3 and the compile goes fine. I
>make install. I edit /etc/pam.conf. I edit inetd.conf to allow pop3 and
>restart inetd.
>
>The pam.conf is :
>
>pop3 auth required /usr/lib/security/$ISA/pam_krb5.so.1
>Jun 20 18:09:45.783 2001 [19952] mp1 at i4.nyu.edu (128.122.108.192): -ERR
>[AUTH] PAM authentication failed for user "mp1": Authentication failed (9)
>Jun 20 18:09:45.784 2001 [19952] [AUTH] Failed attempted login to mp1 from host (i4.nyu.edu)
Have you successfully used Kerberos with anything besides qpopper? This
looks like Kerberos is rejecting the login.
You might also try using an ordinary Unix password config in PAM just
to see if the problem is with PAM or with Kerberos. (Ie. first try
something simple to isolate where the problem is.)
Ken
mailto:shiva at well dot com
http://www.sewingwitch.com/ken/
[If answering a mailing list posting, please don't cc me your reply. I'll take my answer on the list.]
Date: Thu, 21 Jun 2001 18:37:39 -0400 (EDT)
From: Michael Puskar <puskar at i4.nyu dot edu>
Subject: Re: problem w/ Solaris 8, PAM, and qpoppper 4.0.3
On Thu, 21 Jun 2001, Kenneth Porter wrote:
> On Thu, 21 Jun 2001 11:52:45 -0400 (EDT), Michael Puskar wrote:
>
> >I have tried getting qpopper to work with PAM on a Solaris 8 box. I
> >configured with ./configure --with-pam=pop3 and the compile goes fine. I
> >make install. I edit /etc/pam.conf. I edit inetd.conf to allow pop3 and
> >restart inetd.
> >
> >The pam.conf is :
> >
> >pop3 auth required /usr/lib/security/$ISA/pam_krb5.so.1
>
> >Jun 20 18:09:45.783 2001 [19952] mp1 at i4.nyu.edu (128.122.108.192): -ERR
> >[AUTH] PAM authentication failed for user "mp1": Authentication failed (9)
> >Jun 20 18:09:45.784 2001 [19952] [AUTH] Failed attempted login to mp1 from host (i4.nyu.edu)
>
> Have you successfully used Kerberos with anything besides qpopper? This
> looks like Kerberos is rejecting the login.
>
> You might also try using an ordinary Unix password config in PAM just
> to see if the problem is with PAM or with Kerberos. (Ie. first try
> something simple to isolate where the problem is.)
I have succesfully logged in with the straight Unix password, just a
straight configure, make, make install. That works fine. The kerb stuff
should be fine, as that is what we use for the login via ssh/telnet.
I turned on debugging, which yielded this:
Jun 21 16:20:26.772 2001 [20499] Trace and Debug destination is file
"/tmp/pop.log" [pop_init.c:8
55]
Jun 21 16:20:26.772 2001
Jun 21 16:20:26.773 2001 [20499] Will generate stats records (-s)
[pop_init.c:825]
Jun 21 16:20:26.773 2001
Jun 21 16:20:26.774 2001 [20499] (v4.0.3) Servicing request from
"i4.nyu.edu" at 128.122.108.192
[pop_init.c:1153]
Jun 21 16:20:26.774 2001
Jun 21 16:20:26.775 2001 [20499] before TLS; tls_support==0 [popper.c:172]
Jun 21 16:20:26.775 2001
Jun 21 16:20:26.775 2001 [20499] Skipped TLS Init [popper.c:196]
Jun 21 16:20:26.775 2001
Jun 21 16:20:26.775 2001 [20499] (v4.0.3) Intro [popper.c:238]
Jun 21 16:20:26.775 2001
Jun 21 16:20:26.775 2001 [20499] +OK Qpopper (version 4.0.3) at i4.nyu.edu
starting. [popper.c:
251]
Jun 21 16:20:26.775 2001
Jun 21 16:20:26.775 2001 [20499] Qpopper ready for input from (null) at
i4.nyu.edu [128.122.108.1
92] [popper.c:285]
Jun 21 16:20:26.775 2001
Jun 21 16:20:33.401 2001 [20499] Received (8): "USER mp1"
[pop_get_command.c:105]
Jun 21 16:20:33.401 2001
Jun 21 16:20:33.402 2001 [20499] home (12): '/home1/m/mp1'
[pop_user.c:215]
Jun 21 16:20:33.402 2001
Jun 21 16:20:33.402 2001 [20499] +OK Password required for mp1.
[pop_user.c:426]
Jun 21 16:20:33.402 2001
Jun 21 16:20:33.402 2001 [20499] user returned 1; CurrentState now auth2
[popper.c:329]
Jun 21 16:20:33.402 2001
Jun 21 16:20:33.402 2001 [20499] Qpopper ready for input from mp1 at
i4.nyu.edu [128.122.108.192]
[popper.c:285]
Jun 21 16:20:33.402 2001
Jun 21 16:20:37.799 2001 [20499] Received: "pass xxxxxxxxx"
[pop_get_command.c:96]
Jun 21 16:20:37.799 2001
Jun 21 16:20:37.800 2001 [20499] pam_start (service name pop3) returned 0;
gp_errcode=0 [pop_pass
.c:451]
Jun 21 16:20:37.800 2001
Jun 21 16:20:37.811 2001 [20499] pam_authenticate returned 9; gp_errcode=0
[pop_pass.c:473]
Jun 21 16:20:37.811 2001
Jun 21 16:20:47.809 2001 [20499] mp1 at i4.nyu.edu (128.122.108.192): -ERR
[AUTH] PAM authenticat
ion failed for user "mp1": Authentication failed (9) [pop_pass.c:479]
Jun 21 16:20:47.809 2001
Jun 21 16:20:47.810 2001 [20499] [AUTH] Failed attempted login to mp1 from
host (i4.nyu.edu) 128.
122.108.192 [pop_pass.c:1379]
Jun 21 16:20:47.810 2001
Jun 21 16:20:57.815 2001 [20499] pass returned 0; CurrentState now halt
[popper.c:329]
Jun 21 16:20:57.815 2001
Jun 21 16:20:57.815 2001 [20499] +OK Pop server at i4.nyu.edu signing off.
[popper.c:351]
Jun 21 16:20:57.815 2001
Jun 21 16:20:57.815 2001 [20499] (v4.0.3) Ending request from "mp1" at
(i4.nyu.edu) 128.122.108.1
92 [popper.c:369]
Jun 21 16:20:57.815 2001
So the problem seems to be somewhere in PAM. I have been looking for what
the error number 9 means, but with no luck.
It is my understanding that the authentication plugins for PAM are
invisible to the application that is calling the PAM functions, so either
the authenticaiton works or doesn't work, regardless of who is asking for
it.
Thanks for your help :)
Michael
>
> Ken
> mailto:shiva at well dot com
> http://www.sewingwitch.com/ken/
> [If answering a mailing list posting, please don't cc me your reply. I'll take my answer on the list.]
>
>
From: "Kenneth Porter" <shiva at well dot com>
Date: Thu, 21 Jun 2001 16:29:31 -0700
Subject: Re: problem w/ Solaris 8, PAM, and qpoppper 4.0.3
On Thu, 21 Jun 2001 18:37:39 -0400 (EDT), Michael Puskar wrote:
>Jun 21 16:20:37.811 2001 [20499] pam_authenticate returned 9; gp_errcode=0
>[pop_pass.c:473]
>
>So the problem seems to be somewhere in PAM. I have been looking for what
>the error number 9 means, but with no luck.
Looking at PAM header files in /usr/include/security, it looks like 9
just means authentication failure.
I looked at some of the PAM module documentation (I only have it for
krb4, not 5), you can enable debug in the PAM config for that module,
which might indicate why the module is reporting failure.
Do you see anything in Kerberos' logs? (I don't use Kerberos, but I
would expect its server would at least report the attempt.)
Ken
mailto:shiva at well dot com
http://www.sewingwitch.com/ken/
[If answering a mailing list posting, please don't cc me your reply. I'll take my answer on the list.]
Last updated on 21 Jun 2001 by Pensive Mailing List Admin