4 messages in net.sourceforge.lists.courier-users[courier-users] compiling authlib & s...
FromSent OnAttachments
Jürgen HerzFeb 21, 2006 3:51 pm 
Sam VarshavchikFeb 21, 2006 4:14 pm 
Michelle KonzackFeb 24, 2006 8:04 am 
Jürgen HerzFeb 26, 2006 3:31 pm 
Actions with this message:
Paste this link in email or IM:
Paste this link in email or IM:
Atom feed for this thread
Paste this URL into your reader:
Subject:[courier-users] compiling authlib & security questionActions...
From:Jürgen Herz (jhe@myrealbox.com)
Date:Feb 21, 2006 3:51:44 pm
List:net.sourceforge.lists.courier-users

Hello together,

I'm about to install maildrop standalone in an environment with virtual users which I want to manage in an OpenLDAP directory.

Since the Debian packages of maildrop (1.5.3) aren't compiled with LDAP support, I downloaded and compiled maildrop (2.0.2) and then discovered I now additionally need courier authlib.

Two questions because of this: 1. Configure throws "Cannot find either the gdbm or the db library". I know the FAQ entry about it, but don't see why I need them for authlib when configured with --without-authuserdb. Is this an overchecking configure script or are they really necessary also in this case?

2. INSTALL in maildrop says something about the need to either invoke maildrop as root user or make authlib's socket world readable. And then "if the permissions on the socket directory are changed, anyone on the system can connect and obtain any account's password!" Does that mean authlib has direct readaccess to the password on the directory? I thought it would only authenticate against it, say, provide username and password and receive ok or failed. But as it looks to me authlib would have some privileged access, which in order must be read from some configure file laying around.

Regards, Jürgen