-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1

I am having a problem getting past the login screen for "courier 0.53.1 - Administrative Login". I've been over the instructions several times (and spent much time reading the list archives), but I am now stuck.

I am building courier-mta on an openBSD 3.9 box. I have the stock OBSD apache install configured to use SSL only, and it does NOT chroot (that is, the flags for starting httpd are "-DSSL -u") The cgi-test scripts provided with the stock apache server work.

I have modified the default file placement for apache and the contents of httpd.conf from /var/www to /data/www.

You can see the configuration used for gmake (for courier-mta) in the PS to this message.

After reading a number of posts about the permissions & ownership of webadmin, I re-did the install. After gmake install: - -r-sr-xr-x 1 root bin 12976 May 18 14:57 /usr/local/libexec/courier/webmail/webadmin

Then I again moved the file to the cgi directory. Contents of cgi-bin directory (after mv): - -r-sr-xr-x 1 root bin 12976 May 18 14:57 /data/www/cgi-bin/webadmin

I then deleted the password file and re-ran gmake install-webadmin-password (as root), and it re-created the file /etc/courier/webadmin/password, which I verified does contain (in cleartext) the password I created, with ownership of courier:courier and an access mode of 0400.

Pointing my browser at https://server.domain.tld/cgi-bin/webadmin presents the "courier 0.53.1 - Administrative Login" screen, but entering the password yields an error message "ERROR: Invalid password".

the apache logs (access and error) show nothing, other that normal access to the script (i.e.): 24.68.154.141 - - [18/May/2006:15:54:57 -0700] "GET /cgi-bin/webadmin HTTP/1.1" 200 1097 24.68.154.141 - - [18/May/2006:15:55:02 -0700] "POST /cgi-bin/webadmin HTTP/1.1" 302 5 24.68.154.141 - - [18/May/2006:15:55:02 -0700] "GET /cgi-bin/webadmin HTTP/1.1" 200 1097

I am at a loss for what to do next to troubleshoot this. Any suggestions?

Thanks in advance

PS - (configure options for courier, options broken on to lines for readability): ./configure --prefix=/usr/local \ --with-db=gdbm \ --sysconfdir=/etc/courier \ --without-ipv6 \ --enable-unicode \ --localstatedir=/var/run/courier \ --with-random=/dev/urandom \ --with-ispell=/usr/local/bin/aspell \ --enable-https \ --with-certdb=/data/www/conf/ssl \ --enable-mimetypes=/data/www/conf/mime.types

iD8DBQFEbQCuEpgYslVTwzgRAksLAJwOWoz/j+bIrP4hlfIM/51Y7F/EhwCeKXq/ WQ4ikBlwtdXR+7rlaQ24A7M= =7AXV -----END PGP SIGNATURE-----