>>> Setup: SquirrelMail 1.5.1, PHP 5.1.6, UW Imap 2004g built with SSLTYPE= >>> sslunix.nopwd, Apache 2.2.0, Solaris 10/Sparc. SM is configured for >>> "uw" imap server. imap is run from inetd with -1 for max processes >>> (which I suspect means unlimited). >>> >> >> Which connection is used? TLS or STARTTLS? > > Neither. It is using standard port 143 to connect to the imap server. > >> Are you sure about "SSLTYPE=sslunix.nopwd" part? > > Oops. It was built with SSLTYPE=unix to allow plain text passwords. My > bad. > >> >>> Problem 1: Users are occasionally seeing the message "Bad Request: >>> Missing or invalid arguments to LOGIN". This does not happen all >>> the time, and usually trying again later it works ok. (This happened to >>> me for the first time this morning.) >>> >>> Problem 2: SquirrelSpell module is failing when running ispell with >>> the error "I tried to execute '/opt/sfw/bin/ispell -a', but it >>> returned:" >>> - with no additional text. I saw the Wiki comment about >>> forcing SS to use temp files, so I tried that but it didn't make any >>> difference. I tried running the command by hand from the command line >>> and it works fine (and returns a 0 error code). >> >> Test your PHP settings >> (http://www.squirrelmail.org/wiki/TestPHPSettings). >> Show PHP safe_mode, open_basedir, disable_functions settings. If Apache >> is >> chrooted, make sure that /bin/sh is available in chroot jail. If PHP is >> compiled with --enable-sigchild, make sure that you really need this PHP >> compilation option. > > According to the info page, php was built with the following options: > --with-apxs2=/usr/local/apache2/bin/apxs --with-mysql=/usr/local/mysql > --with-mysqli=/usr/local/mysql/bin/mysql_config > --with-openssl=/usr/local/ssl > > Apache is not chrooted. > > The settings you asked about are: > safe_mode = off > open_basedir = no value > disable_functions = no value > > -Bill > Attached two files. global.php.diff.gz is patch for SquirrelMail 1.5.1 functions/global.php. You can't use standard SquirrelMail 1.5.1 with PHP 5.1.2 or later versions. PHP security updates broke SquirrelMail httpOnly cookie implementation. Patch can be applied with 'zcat global.php.diff.gz | patch -p 0' command, if your solaris has zcat and patch utilities. Patch should be applied to standard unmodified SquirrelMail 1.5.1 functions/global.php script. If you already fixed cookie issues, don't apply this patch. spell.php script is used to test spell checking. Save it somewhere next to SquirrelMail scripts, open it in browser and show output. -- Tomas
Attachment:
spell.php
Description: application/php
Attachment:
global.php.diff.gz
Description: GNU Zip compressed data
------------------------------------------------------------------------- Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
-- squirrelmail-users mailing list Posting Guidelines: http://www.squirrelmail.org/wiki/MailingListPostingGuidelines List Address: squirrelmail-users@xxxxxxxxxxxxxxxxxxxxx List Archives: http://news.gmane.org/thread.php?group=gmane.mail.squirrelmail.user List Archives: http://sourceforge.net/mailarchive/forum.php?forum_id=2995 List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-users
