Re: (no subject)

I just found something else out.

I went to /var/neomail/checklogin.pl

and changed the exit signal to zero.

And I was given access to neomail.  The software worked perfectly fine, so
I am quite excited at this point.  The modification I made is a slight
little security hole though.

This discovery shows that the only problem remaining is in regards to
authenticating passwords.  I am going to read up on how FreeBSD does it's
passwords over the next hour or so.

On Thu, 19 Jun 2003, Tim Legg wrote:

> Okay, I did the steps for installing MD5-2.02 and it failed on 'make
> test'.  If you want to see the details:
>
> http://www.frybread.stuorg.iastate.edu/MD5.txt
>
> It turns that I found in the ports of FreeBSD,
>
> p5-Digest-MD5-2.22
> p5-MD5-2.02
>
> and I installed them.  And they did the trick
>
> I completed ./setup.pl
>
> http://www.frybread.stuorg.iastate.edu/setup.txt
>
> I browsed to,
>
> http://www.frybread.stuorg.iastate.edu/cgi-bin/neomail.pl
>
> AND IT WORKED,
>
> but the password I enter is incorrect and I am not granted permission to
> the interface.  I also added Tnobody to the bottom of
> /etc/mail/sendmail.cf.  I am certain that the password database is
> /etc/passwd though.
>
> To satisfy your curiousity, I am running postfix and mailman-2.1.2 on this
> system.  Apache is 1.3.27.
>
> Any ideas on where to go next?
>
> >
> >
> > Tim Legg schrieb:
> > >
> > > Hello,
> > >
> > > I have just begun to install neomail on my FreeBSD 5.1 box.
> > >
> > > I will confess that I have never used perl and have no familiarity with
> > > the packages, features or purposes the software posseses at this time.  I
> > > do know that I am running perl v5.6.1
> > >
> > > When running setup.pl ,  I was confronted with the following error:
> > >
> > > Checking for MD5.pm...
> > > Can't locate Digest/MD5.pm in @INC (@INC contains:
> > > /usr/local/lib/perl5/site_perl/5.6.1/mach
> > > /usr/local/lib/perl5/site_perl/5.6.1 /usr/local/lib/perl5/site_perl
> > > /usr/local/lib/perl5/5.6.1/BSDPAN /usr/local/lib/perl5/5.6.1/mach
> > > /usr/local/lib/perl5/5.6.1 .) at /usr/local/lib/perl5/5.6.1/BSDPAN/MD5.pm
> > > line 8.
> > > Compilation failed in require at ./setup.pl line 53.
> > >
> > > I searched the archives and found a similar issue,
> > >
> > > http://sourceforge.net/mailarchive/message.php?msg_id=5272547
> > >
> > > so I traveled to:
> > >
> > > http://search.cpan.org/author/GAAS/MD5-2.02/
> > >
> > > fetched gunziped extracted MD5.pm
> > >
> > > I executed, perl Makefile.pl and ran make.  It seemed to exit
> > > successfully.  setup.pl still produced the same error output.
> >
> > So you didn't make a 'make install' after the 'make' ?
> >
> > >
> > > I copied the file (MD5.pm)into each of the directories where it (setup.pl)
> > > said it was missing, but I still get the same error executing setup.pl
> > >
> >
> > Well, you need to install the perl modules
> > Digest::MD5
> > and MD5
> > If you can't locate them, try http://search.cpan.org/ and type in the
> > module name.
> >
> > http://search.cpan.org/author/GAAS/Digest-MD5-2.24/
> > http://search.cpan.org/author/GAAS/MD5-2.02/
> >
> > The standard procedere for installing is:
> > obtaining the archive, unpack it,
> > perl Makefile.perl
> > make
> > make test
> > make install
> >
> >
> > Torsten
> >
> >
> > -------------------------------------------------------
> > This SF.Net email is sponsored by: INetU
> > Attention Web Developers & Consultants: Become An INetU Hosting Partner.
> > Refer Dedicated Servers. We Manage Them. You Get 10% Monthly Commission!
> > INetU Dedicated Managed Hosting http://www.inetu.net/partner/index.php
> > _______________________________________________
> > NeoMail-users mailing list
> > [email protected]
> > https://lists.sourceforge.net/lists/listinfo/neomail-users
> >
>
>
> -------------------------------------------------------
> This SF.Net email is sponsored by: INetU
> Attention Web Developers & Consultants: Become An INetU Hosting Partner.
> Refer Dedicated Servers. We Manage Them. You Get 10% Monthly Commission!
> INetU Dedicated Managed Hosting http://www.inetu.net/partner/index.php
> _______________________________________________
> NeoMail-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/neomail-users
>


-------------------------------------------------------
This SF.Net email is sponsored by: INetU
Attention Web Developers & Consultants: Become An INetU Hosting Partner.
Refer Dedicated Servers. We Manage Them. You Get 10% Monthly Commission!
INetU Dedicated Managed Hosting http://www.inetu.net/partner/index.php