Re: Checkpassword 0.90 + Redhat 9.0

asdf <[email protected]> wrote:
> The problem is, I've got this working on another mail server where
> it's being run as qmaild.

I don't believe you do.  Given the way checkpassword is written, if
what you describe were possible, the system would be entirely
insecure; the kernel would allow any user to run code as any other
user.  I think it's much more likely that you've misunderstood how the
other system is set up.

Only qmail-smtpd is supposed to run as qmaild.  qmail-popup is
supposed to run as root; checkpassword will change its uid to match
the user who authenticated, and will run qmail-pop3d as that user.


paul