Re: The Village Idiot Rides again!

Rumor has it that Charles Cazabon may have mentioned these words:
>Yes, and yes.  The server is split into two parts; the first part runs as root
>to do authentication and switch user IDs, the second part runs as the
>logged-in user.

So it doesn't need a user of it's own to run under... OK. Altho people 
could re-use one of the qmail logging IDs, that would _assume_ they're 
running qmail [for now, that'd prolly be accurate -- but who knows about 
the future...] so it's prolly best that bikini still have it's own logging 
ID for security.

> > 2) The docs say to create a mailstore in the /tmp/bikini/... directory -
> > but the server says it finds the mailstore relative to the user's home
> > directory -- no user I know of has a $HOME in /tmp...
>
>The docs and the code are out of sync, and the code is incomplete.  Before I
>finished the authentication, you could only usefully use the anonymous mode.
>When I added authentication, I broke the anonymous portion (which used the
>/tmp/bikini/... mailstore).

OK, so I'll work on the docs to mention that one needs a working 
checkpassword implementation, and if it's different than the DJB supplied 
one, the startup script will need to be modified.

> > Connected to mail.30below.com (127.0.0.1).
> > Escape character is '^]'.
> > AUTH LOGIN em1lcmNoAABpZG93YW5uYQ==
> > +cGFzc3dvcmQ6
>
>You never got a response after this?  You should have got either a "K" or an
>"E" response, I think.  I haven't played with AUTH LOGIN much; I've been using
>AUTH PLAIN.  Does that make a difference?  What gets logged by the server if
>you crank the debugging level up?

Well, this is what I get with AUTH PLAIN:  =-=-=-=-=

[root@mail root]# telnet localhost 5555
Trying 127.0.0.1...
Connected to mail.30below.com (127.0.0.1).
Escape character is '^]'.
CAPS
+ AUTH=ANONYMOUS
+ AUTH=PLAIN
+ AUTH=LOGIN
+ MESSAGE-SIZE 0
K ok
AUTH PLAIN em1lcmNoAABpZG93YW5uYQ==
K ['PLAIN', 'em1lcmNoAABpZG93YW5uYQ==']
Connection closed by foreign host.

=-=-=-=-=-=

It looks like K gets me in, and then dies...

... and the logs tell me why:

2003-03-27 10:23:47.624599500 exec()ing /usr/local/bin/zchkpasswd.pl with 
args ['/usr/local/bin/zchk
passwd.pl', '/bin/true']
2003-03-27 10:23:49.688719500 do_check returned "0" type <type 'int'>
2003-03-27 10:23:49.688724500 auth uid 500 gid 16 name "Roger Merchberger - 
SysAdmin" homedir /home/
zmerch
2003-03-27 10:23:49.688726500 server.py pid 32671 uid 500 euid 500: 
starting in ./Mail with inbox in
box
2003-03-27 10:23:49.712613500   Configuration error (user inbox inbox missing)
2003-03-27 10:23:49.712631500 tcpserver: end 32671 status 256

=-=-=-=-=

I'll update the documentation to reflect that the inboxen need to be made 
in each user's homedir -- would it be wise to change the default mail 
directory for bikini to be - ./BMail or somesuch, that way there's no 
clashing with Mutt? If so, lemme know

Have you done any testing with a virtual pop mail setup yet, or is that 
still uncharted territory? In this particular case it shouldn't matter, as 
my ID is not virtual.

I'll spark up a bit more logging, and see what happens...

>Thanks for your work on this -- I've been unable to devote as much time to
>this as I'd like, so my progress is (noticably) slow.

Boy, don't I know that feeling!!! :-O

>I'll apply your doc patches.

Thanks... I'll have more prolly Monday, when I get back in town (3-day 
weekend out-of-town for Job #2...)

Laterz,
Roger "Merch" Merchberger

--
Roger "Merch" Merchberger -- sysadmin, Iceberg Computers
[email protected]

What do you do when Life gives you lemons,
and you don't *like* lemonade?????????????