On 11/3/06, Martin Schweizer <schweizer.martin@xxxxxxxxx> wrote: > Hello Paul > > Sorry for the delay but I was very busy! Inline you find my comments. > > 2006/10/23, Paul Lesniewski <paul@xxxxxxxxxxxxxxxx>: > > On 10/20/06, Martin Schweizer <schweizer.martin@xxxxxxxxx> wrote: > > > Hello > > > > > > I use the following system: > > > > > > - FreeBSD 6.1 > > > - Sendmail > > > - Cyrus Imap > > > - Squirrelmail 1.48 (incl. plugin Change SASL Password ) > > > > > > As described in the Readme and in chgsaslpasswd.c > > > file (from the plugin directory) I set the following: > > > > > > > > > chgsaslpasswd.c > > > ******************* > > > ... > > > #define UID 60 > > > ... > > > > > > (UID 60 is the user cyrus) > > > > > > > > > chgsaslpasswd (compiled version) > > > *************************************** > > > - chmod to 4550 > > > - chown to cyrus:www > > > > > > (www is the apache group) > > > > > > -r-sr-x--- 1 cyrus www 5167 20 Okt 11:52 chgsaslpasswd > > > > > > > > > /usr/local/etc/sasldb2.db > > > *************************** > > > -rw-r--r-- 1 root cyrus 24576 20 Okt 11:46 sasldb2.db > > > > > > > > > With the above rights it will not work (these are the defaults). If I > > > set these to > > > > > > -rw-r--rw- 1 root cyrus 24576 20 Okt 11:46 sasldb2.db > > > > > > then it works (but is security hole). > > > > Well, if chgsaslpasswd is supposed to suid to cyrus, then rw-r--r-- > > root:cyrus should NOT have ability to change passwords, as expected. > > Why didn't you try rw-rw-r-- (664)? I dunno who else needs to see > > this file, but if you can get away with it, rw-rw---- (660) is even > > more secure. > > I'm very confused because it's not running. Here my details: > > In chgsaslpasswd.c I defined as > #define UID 60 > #define CMD "/usr/local/bin/sudo -u root /usr/local/sbin/saslpasswd2 > (in sudoers is root defined as allowed all, I also tested this string > as a normal shell user and it works) > > or > #define UID 60 > #define CMD "/usr/local/sbin/saslpasswd2" > > both is not working. > > sasldb2.db is not working with > -rw-rw---- 1 root cyrus 24K 3 Nov 16:53 sasldb2.db > > it's working only with -rw-rw--w- but the strange issue is that the > group cyrus has the members > > acsvfbsd04# pw show group cyrus > cyrus:*:60:cyrus,www Why is www in cyrus group??? > and httpd is running as user www (and group www). > > As which user does chgsaslpasswd running? The rights are > -rwxr-xr-x 1 root wheel 3,3K 3 Nov 17:30 chgsaslpasswd (I will > set the rights discribed in the Readme later). Umm, of course it doesn't work if you do this *later*. Please follow the README and INSTALL instructions in FULL before posting. > PS: I'm not a c programmer but what does chgsaslpasswd? I see only > some definitions (at the begin) and some compares (at the end). > > Regards, > Martin > -- > Martin Schweizer > schweizer.martin@xxxxxxxxx > Fax: +1 619 3300587 > Tel.: +1 619 3300597 (VoIP) > ------------------------------------------------------------------------- Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642 -- squirrelmail-users mailing list Posting Guidelines: http://www.squirrelmail.org/wiki/MailingListPostingGuidelines List Address: squirrelmail-users@xxxxxxxxxxxxxxxxxxxxx List Archives: http://news.gmane.org/thread.php?group=gmane.mail.squirrelmail.user List Archives: http://sourceforge.net/mailarchive/forum.php?forum_id=2995 List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-users
