Hello Paul Sorry for the delay but I was very busy! Inline you find my comments. 2006/10/23, Paul Lesniewski <paul@xxxxxxxxxxxxxxxx>: > On 10/20/06, Martin Schweizer <schweizer.martin@xxxxxxxxx> wrote: > > Hello > > > > I use the following system: > > > > - FreeBSD 6.1 > > - Sendmail > > - Cyrus Imap > > - Squirrelmail 1.48 (incl. plugin Change SASL Password ) > > > > As described in the Readme and in chgsaslpasswd.c > > file (from the plugin directory) I set the following: > > > > > > chgsaslpasswd.c > > ******************* > > ... > > #define UID 60 > > ... > > > > (UID 60 is the user cyrus) > > > > > > chgsaslpasswd (compiled version) > > *************************************** > > - chmod to 4550 > > - chown to cyrus:www > > > > (www is the apache group) > > > > -r-sr-x--- 1 cyrus www 5167 20 Okt 11:52 chgsaslpasswd > > > > > > /usr/local/etc/sasldb2.db > > *************************** > > -rw-r--r-- 1 root cyrus 24576 20 Okt 11:46 sasldb2.db > > > > > > With the above rights it will not work (these are the defaults). If I > > set these to > > > > -rw-r--rw- 1 root cyrus 24576 20 Okt 11:46 sasldb2.db > > > > then it works (but is security hole). > > Well, if chgsaslpasswd is supposed to suid to cyrus, then rw-r--r-- > root:cyrus should NOT have ability to change passwords, as expected. > Why didn't you try rw-rw-r-- (664)? I dunno who else needs to see > this file, but if you can get away with it, rw-rw---- (660) is even > more secure. I'm very confused because it's not running. Here my details: In chgsaslpasswd.c I defined as #define UID 60 #define CMD "/usr/local/bin/sudo -u root /usr/local/sbin/saslpasswd2 (in sudoers is root defined as allowed all, I also tested this string as a normal shell user and it works) or #define UID 60 #define CMD "/usr/local/sbin/saslpasswd2" both is not working. sasldb2.db is not working with -rw-rw---- 1 root cyrus 24K 3 Nov 16:53 sasldb2.db it's working only with -rw-rw--w- but the strange issue is that the group cyrus has the members acsvfbsd04# pw show group cyrus cyrus:*:60:cyrus,www and httpd is running as user www (and group www). As which user does chgsaslpasswd running? The rights are -rwxr-xr-x 1 root wheel 3,3K 3 Nov 17:30 chgsaslpasswd (I will set the rights discribed in the Readme later). PS: I'm not a c programmer but what does chgsaslpasswd? I see only some definitions (at the begin) and some compares (at the end). Regards, Martin -- Martin Schweizer schweizer.martin@xxxxxxxxx Fax: +1 619 3300587 Tel.: +1 619 3300597 (VoIP) ------------------------------------------------------------------------- Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642 -- squirrelmail-users mailing list Posting Guidelines: http://www.squirrelmail.org/wiki/MailingListPostingGuidelines List Address: squirrelmail-users@xxxxxxxxxxxxxxxxxxxxx List Archives: http://news.gmane.org/thread.php?group=gmane.mail.squirrelmail.user List Archives: http://sourceforge.net/mailarchive/forum.php?forum_id=2995 List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-users
