Re: serversifefilter filtercmd pains

Tomas,

Thank you for your assistance.

Tomas Kuliavas wrote:
> 1. Upgrade serversidefilters to 1.5rc1 version.
> http://sourceforge.net/projects/serverfilters/
> 
> 2. Don't use binary bundled with 1.42 version, because that program is
> compiled for Redhat. uids/gids are different on Ubuntu.

Ok, having some problems with that. I have installed a huge number of 
build-environment-related packages temporarily (hardening dictates that 
I remove the build environment before putting the machine in production) 
as follows:

binutils build-essential cpp cpp-4.0 dpkg-dev g++ g++-4.0 gcc gcc-4.0 
libc6-dev libstdc++6-4.0-dev linux-kernel-headers make comerr-dev 
libc-client2002edebian libkadm55 libkrb5-dev libpam0g-dev libssl-dev 
libssl0.9.8 mlock zlib1g-dev libc-client-dev libldap2-dev

But I am still seeing a grisly error in the compile:
gcc -c filtercmd.c  -DSQUIRRELMAILCONFIGFILE='"../../config/config.php"' 
  -DUSELDAP -DLDAPCONFIG='"/etc/serversidefilter_ldap.conf"'
filtercmd.c: In function ‘getuserfromldap’:
filtercmd.c:811: error: ‘struct <anonymous>’ has no member named ‘database’
filtercmd.c:811: error: ‘struct <anonymous>’ has no member named ‘dbtable’
filtercmd.c:825: error: ‘struct <anonymous>’ has no member named ‘homedir’
make: *** [filtercmd.o] Error 1

Re: serversifefilter filtercmd pains

> Tomas,
>
> Thank you for your assistance.
>
> Tomas Kuliavas wrote:
>> 1. Upgrade serversidefilters to 1.5rc1 version.
>> http://sourceforge.net/projects/serverfilters/
>>
>> 2. Don't use binary bundled with 1.42 version, because that program is
>> compiled for Redhat. uids/gids are different on Ubuntu.
>
> Ok, having some problems with that. I have installed a huge number of
> build-environment-related packages temporarily (hardening dictates that
> I remove the build environment before putting the machine in production)
> as follows:
>
> binutils build-essential cpp cpp-4.0 dpkg-dev g++ g++-4.0 gcc gcc-4.0
> libc6-dev libstdc++6-4.0-dev linux-kernel-headers make comerr-dev
> libc-client2002edebian libkadm55 libkrb5-dev libpam0g-dev libssl-dev
> libssl0.9.8 mlock zlib1g-dev libc-client-dev libldap2-dev
>
> But I am still seeing a grisly error in the compile:
> gcc -c filtercmd.c  -DSQUIRRELMAILCONFIGFILE='"../../config/config.php"'
>   -DUSELDAP -DLDAPCONFIG='"/etc/serversidefilter_ldap.conf"'
> filtercmd.c: In function ‘getuserfromldap’:
> filtercmd.c:811: error: ‘struct <anonymous>’ has no member named
> ‘database’
> filtercmd.c:811: error: ‘struct <anonymous>’ has no member named ‘dbtable’
> filtercmd.c:825: error: ‘struct <anonymous>’ has no member named ‘homedir’
> make: *** [filtercmd.o] Error 1

Re: serversifefilter filtercmd pains

Hi again Tomas,

Since my last post I have decided that the serverside filter plugin is 
too immature and insufficiently robust to run suid under my web-server. 
This grew out of some exploration of the LDAP code in the latest release 
candidate, and the discovery that it isn't even partially complete.

I will probably wind up writing my own. Thanks for you help anyway!

Tomas Kuliavas wrote:
> Why do you have LDAP configuration options enabled?

Because all of my user auth, both for real (shell) users and for virtual 
users comes from an LDAP. It would be nice if I could provide procmail 
filtering for *all* of my users.

> Could you provide more information about your setup? Where do you store
> your user information?

In an LDAP. SquirrelMail authenticates indirectly via the Apache 
AuthLDAP mechanism, as do all of my admin tools, my web gallery, my user 
blogs and my wiki. Single-sign-on on the cheap. :)

> Secured PHP installation is not suitable for serversidefilters 1.42 or
> 1.5rc1 plugin. If you want to secure PHP, you will have to turn off exec
> functions used by plugin.

??? My php is whatever comes by default with Ubuntu 6.06. The limit of 
my customization was to turn off 'display errors'.

Re: serversifefilter filtercmd pains

> ??? My php is whatever comes by default with Ubuntu 6.06. The limit of
> my customization was to turn off 'display errors'.

Standard PHP installation provides too many options to PHP programmer. If
admin wants to limit web developer's options, he or she must secure PHP
installation. There are two possible options. First option uses safe_mode
and open_basedir settings. Second one use disable_functions setting.
safe_mode will be removed in PHP6 and places very strict restrictions on
file ownership. display_functions can be configured only globally.

If you run hardened PHP installation, I think you use safe_mode or
disable_functions to restrict PHP program execution
(http://www.php.net/exec) functions.

If you want to see what attacker can do in your PHP installation, search
for r57shell PHP script and test it in your setup.

P.S. You don't need devel tools on main server. You can compile programs
on other host and later copy them to hardened installation. Main problem -
you must learn how to create own Debian packages.

--

-- 
Tomas

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys -- and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
--

Expire 1.3

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys -- and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV

--
squirrelmail-plugins mailing list
Posting Guidelines: http://www.squirrelmail.org/wiki/MailingListPostingGuidelines
List Address: squirrelmail-plugins <at> lists.sourceforge.net
List Archives: http://news.gmane.org/thread.php?group=gmane.mail.squirrelmail.plugins
List Archives: http://sourceforge.net/mailarchive/forum.php?forum_id=3931
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-plugins

Re: Expire 1.3

> Does anyone know the way to get expire 1.3 to work on the Windows
> platform since we don't have cronjobs?
>
Hi,
the batch processing for expire is based on a linux environment. All used
scripts were written as shell-scripts (which may be converted to .cmd or .bat
scripts). The problem is, there are some extra shell commands used (e.g. "sed"
or "find") for which I does not know any Windows equivalents.

If you find any solution, please let me know and I'll add it to the next
release of exire.

Live long and prosper
Florian
Squirrelmail patch forum
http://www.qv90.de/sqm

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys -- and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
--
squirrelmail-plugins mailing list
Posting Guidelines: http://www.squirrelmail.org/wiki/MailingListPostingGuidelines
List Address: squirrelmail-plugins <at> lists.sourceforge.net
List Archives: http://news.gmane.org/thread.php?group=gmane.mail.squirrelmail.plugins
List Archives: http://sourceforge.net/mailarchive/forum.php?forum_id=3931
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-plugins

Re: Expire 1.3

> Does anyone know the way to get expire 1.3 to work on the Windows
> platform since we don't have cronjobs?
>
>
>
> Can I schedule the mail-expire script through windows scheduler? What
> kind of a script is it? I tried running it with perl and it wouldn't run
> so I take it that it was not written in perl.
>
> Any ideas would be greatly appreciated.

First idea - proon plugin
http://www.squirrelmail.org/plugin_view.php?id=251

Second idea - Windows has task sheduler.

Third idea - mail-expire is shell script. Theoretically it can be replaced
with script that works on windows and is suitable for your mail setup.

--

-- 
Tomas

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys -- and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
--
squirrelmail-plugins mailing list
Posting Guidelines: http://www.squirrelmail.org/wiki/MailingListPostingGuidelines
List Address: squirrelmail-plugins <at> lists.sourceforge.net
List Archives: http://news.gmane.org/thread.php?group=gmane.mail.squirrelmail.plugins
List Archives: http://sourceforge.net/mailarchive/forum.php?forum_id=3931
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-plugins

Re: Expire 1.3

I had looked at using Proon, but my use for squirrelmail and hmailserver
is more of a backup server where the users normally do not log in unless
their mail server is down.  That is why I was looking at Expire.  I can
only do REAL basic scripts so unless I can find someone to convert
Expired's script to one I can run under windows I will have to use Proon
and setup a macro to login to the account to clear the mail.  The
problem with that is if the user changes the password.

Ya, I know with routing you can setup hmailserver with routing so that
the mail is not stored permanently on the server, but the user wants his
mail to be current in the backup server with mail from not just after
the power outage but before as well.   So if I don't purge the real old
mail the mail account would grow way to large.   

That is basically what I am trying to do.  You wouldn't know of a way to
do it with hmailserver do you?

Thanks

-----Original Message-----
From: squirrelmail-plugins-bounces <at> lists.sourceforge.net
[mailto:squirrelmail-plugins-bounces <at> lists.sourceforge.net] On Behalf Of
Tomas Kuliavas
Sent: Monday, October 02, 2006 12:07 PM
To: squirrelmail-plugins <at> lists.sourceforge.net
Expire 1.3

> Does anyone know the way to get expire 1.3 to work on the Windows
> platform since we don't have cronjobs?
>
>
>
> Can I schedule the mail-expire script through windows scheduler? What
> kind of a script is it? I tried running it with perl and it wouldn't
run
> so I take it that it was not written in perl.
>
> Any ideas would be greatly appreciated.

First idea - proon plugin
http://www.squirrelmail.org/plugin_view.php?id=251

Second idea - Windows has task sheduler.

Third idea - mail-expire is shell script. Theoretically it can be
replaced
with script that works on windows and is suitable for your mail setup.

--

-- 
Tomas

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys -- and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
--
squirrelmail-plugins mailing list
Posting Guidelines: http://www.squirrelmail.org/wiki/MailingListPostingGuidelines
List Address: squirrelmail-plugins <at> lists.sourceforge.net
List Archives: http://news.gmane.org/thread.php?group=gmane.mail.squirrelmail.plugins
List Archives: http://sourceforge.net/mailarchive/forum.php?forum_id=3931
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-plugins

Re: Expire 1.3

http://www.hmailserver.com/documentation/v4.2/?page=com_objects

Theoretically mail-expire for hmailserver can be coded in any scripting
engine that can use Windows COM and get expire settings from database or
flat SquirrelMail configuration files. PHP for Windows can do that. Maybe
other Windows scripting engines can do that too.

Some user on hmailserver forum was thinking about writing email client
that uses COM API instead of IMAP. So API is powerful enough.

Please note that I've said "theoretically".

> I had looked at using Proon, but my use for squirrelmail and hmailserver
> is more of a backup server where the users normally do not log in unless
> their mail server is down.  That is why I was looking at Expire.  I can
> only do REAL basic scripts so unless I can find someone to convert
> Expired's script to one I can run under windows I will have to use Proon
> and setup a macro to login to the account to clear the mail.  The
> problem with that is if the user changes the password.
>
> Ya, I know with routing you can setup hmailserver with routing so that
> the mail is not stored permanently on the server, but the user wants his
> mail to be current in the backup server with mail from not just after
> the power outage but before as well.   So if I don't purge the real old
> mail the mail account would grow way to large.
>
> That is basically what I am trying to do.  You wouldn't know of a way to
> do it with hmailserver do you?
>
> Thanks
>
>
>
> -----Original Message-----
> From: squirrelmail-plugins-bounces <at> lists.sourceforge.net
> [mailto:squirrelmail-plugins-bounces <at> lists.sourceforge.net] On Behalf Of
> Tomas Kuliavas
> Sent: Monday, October 02, 2006 12:07 PM
> To: squirrelmail-plugins <at> lists.sourceforge.net
> Expire 1.3
>
>> Does anyone know the way to get expire 1.3 to work on the Windows
>> platform since we don't have cronjobs?
>>
>>
>>
>> Can I schedule the mail-expire script through windows scheduler? What
>> kind of a script is it? I tried running it with perl and it wouldn't
> run
>> so I take it that it was not written in perl.
>>
>> Any ideas would be greatly appreciated.
>
> First idea - proon plugin
> http://www.squirrelmail.org/plugin_view.php?id=251
>
> Second idea - Windows has task sheduler.
>
> Third idea - mail-expire is shell script. Theoretically it can be
> replaced
> with script that works on windows and is suitable for your mail setup.
>
> --
> Tomas
>
> -------------------------------------------------------------------------
> Take Surveys. Earn Cash. Influence the Future of IT
> Join SourceForge.net's Techsay panel and you'll get the chance to share
> your
> opinions on IT & business topics through brief surveys -- and earn cash
> http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
> --
> squirrelmail-plugins mailing list
> Posting Guidelines:
> http://www.squirrelmail.org/wiki/MailingListPostingGuidelines
> List Address: squirrelmail-plugins <at> lists.sourceforge.net
> List Archives:
> http://news.gmane.org/thread.php?group=gmane.mail.squirrelmail.plugins
> List Archives: http://sourceforge.net/mailarchive/forum.php?forum_id=3931
> List Info:
> https://lists.sourceforge.net/lists/listinfo/squirrelmail-plugins
>

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys -- and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
--
squirrelmail-plugins mailing list
Posting Guidelines: http://www.squirrelmail.org/wiki/MailingListPostingGuidelines
List Address: squirrelmail-plugins <at> lists.sourceforge.net
List Archives: http://news.gmane.org/thread.php?group=gmane.mail.squirrelmail.plugins
List Archives: http://sourceforge.net/mailarchive/forum.php?forum_id=3931
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-plugins

Vacation_local not creating .vacation.db - a solution

Hi, 

The problem I encountered was that vacation messages didn't work on our
system (using vacation_local plugin on squirrelmail, more about our setup
later). After searching google and squirrelmail plugin archives for an
explanation, I found that we need a .vacation.db file to be created in the
users directory, that was not created by the vacation_local plugin.
Searching the plugin archives I found that a lot of people experienced the
same sort of problem, but I couldn't find any solution to it, except talk
about an unpublished 'beta' release somewhere that could fix it.
I decided to 'fix' it myself. It's a quick hack, and works for us on our
system, no guarantee that it works on all systems....
Another 'bug' I found was that the .vacation.db file was only being deleted
if no other .forward was entered. As soon as a 'normal' .forward was present
(as entered through vacation_local plugin), the .vacation.db file was not
deleted anymore. Also 'fixed' in my 'fix'.

Our system:
Linux Suse 10.0
Squirrelmail 1.4.2
Vacation Local plugin 2.0-1.4
Postfix MTA 2.2.5-5
Courier-imap 3.0.8-3

Fix: modifications to the vac_init.php file, see attachment for modified
file. Do a diff with original to see the differences.

Regards
Caspar Bes 

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys -- and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV

--
squirrelmail-plugins mailing list
Posting Guidelines: http://www.squirrelmail.org/wiki/MailingListPostingGuidelines
List Address: squirrelmail-plugins <at> lists.sourceforge.net
List Archives: http://news.gmane.org/thread.php?group=gmane.mail.squirrelmail.plugins
List Archives: http://sourceforge.net/mailarchive/forum.php?forum_id=3931
List Info: https://lists.sourceforge.net/lists/listinfo/squirrelmail-plugins