atom feed38 messages in net.sourceforge.lists.courier-usersRe: [courier-users] Re: giving makeus...
FromSent OnAttachments
Ben RosengartJul 5, 2002 4:02 pm 
Sam VarshavchikJul 5, 2002 5:02 pm 
Ben RosengartJul 5, 2002 8:51 pm 
Sam VarshavchikJul 5, 2002 8:59 pm 
Ben RosengartJul 16, 2002 8:19 am 
Sam VarshavchikJul 16, 2002 2:04 pm 
Ben RosengartJul 17, 2002 1:17 pm 
Gordon MessmerJul 17, 2002 1:40 pm 
Sam VarshavchikJul 17, 2002 2:55 pm 
Ben RosengartJul 17, 2002 3:41 pm 
Ben RosengartJul 17, 2002 3:53 pm 
Sam VarshavchikJul 17, 2002 4:11 pm 
Ben RosengartJul 18, 2002 6:35 am 
Ben RosengartJul 18, 2002 9:32 am 
Jesse KeatingJul 18, 2002 9:48 am 
Ben RosengartJul 18, 2002 11:05 am 
Jesse KeatingJul 18, 2002 11:12 am 
Sam VarshavchikJul 18, 2002 11:30 am 
Ben RosengartJul 18, 2002 12:19 pm 
Ben RosengartJul 18, 2002 12:36 pm 
David MillerJul 18, 2002 1:14 pm 
Gordon MessmerJul 18, 2002 1:32 pm 
Juha SaarinenJul 18, 2002 1:39 pm 
Ben RosengartJul 18, 2002 1:49 pm 
Ben RosengartJul 18, 2002 1:52 pm 
Ben RosengartJul 18, 2002 1:54 pm 
Jesse KeatingJul 18, 2002 1:58 pm 
Sam VarshavchikJul 18, 2002 2:03 pm 
Bowie BaileyJul 18, 2002 2:05 pm 
Juha SaarinenJul 18, 2002 2:08 pm 
Ben RosengartJul 18, 2002 2:29 pm 
Ben RosengartJul 18, 2002 2:33 pm 
Ben RosengartJul 18, 2002 2:37 pm 
Sam VarshavchikJul 18, 2002 4:56 pm 
Alessandro VeselyJul 18, 2002 11:00 pm 
Ben RosengartJul 19, 2002 1:27 pm 
Todd LyonsJul 20, 2002 11:29 am 
Ben RosengartJul 22, 2002 7:43 pm 
Subject:Re: [courier-users] Re: giving makeuserdb a little flexibility
From:Ben Rosengart (br@panix.com)
Date:Jul 22, 2002 7:43:40 pm
List:net.sourceforge.lists.courier-users

On Thu, Jul 18, 2002 at 03:34:03PM -0400, Ben Rosengart wrote:

Host A does not run courier. It's a configuration management host. It stores the userdb source files somewhere, and writes B's userdb data files to /export/B, and C's to /export/C.

I think I realized where the confusion stems from. You think I'm running makeuserdb on hosts B and C. If I did that, then there would not be a problem. But I have been proceeding all this time on the assumption that makeuserdb would be running on host A.

The problem with running makeuserdb on hosts B and C is that it costs me an ssh every time I change a database on host A. On the other hand, the locking of the database is more likely to work correctly. I have to think about this more.

This still leads to miserable hacks, as I knew it would. Courier runs inside a chroot; makeuserdb must run outside the chroot, unless I put perl inside the chroot, which would be giving an attacker an awful lot. So maketestuser and imapd *still* end up seeing different paths to the userdb. As a last resort, I am now running "sed 's/wrong path/right path/g' < maketestuser | perl" instead of maketestuser.

Microsoft has argued that open source is bad for business, but you have to ask, "Whose business? Theirs, or yours?" --Tim O'Reilly