The qpopper list archive ending on 21 Jun 2000


Topics covered in this issue include:

  1. Re: 3.1b2 Enable-shy
       Frank Pineau <frank at pineaus dot com>
       Thu, 15 Jun 2000 10:01:13 -0400
  2. Re: I am giving up [OT]
       Ed Concilio <econcilio at goamerica dot net>
       Thu, 15 Jun 2000 10:05:05 -0400
  3. Determining POP3 Versions
       "Adalto Correia Filho" <adaltof at hotmail dot com>
       Thu, 15 Jun 2000 11:07:30 EST
  4. Re: I am giving up [OT]
       "Geoff Wilson" <gwilson at cbnet.ns dot ca>
       Thu, 15 Jun 2000 11:46:01 -0300
  5. Re: Determining POP3 Versions
       "Lisa Casey" <lisa at jellico dot com>
       Thu, 15 Jun 2000 11:25:24 -0400
  6. Re: 3.1b2 Enable-shy
       Randall Gellens <randy at qualcomm dot com>
       Thu, 15 Jun 2000 08:47:21 -0700
  7. Re: 3.1b2 Enable-shy
       Alan Brown <alan at manawatu.gen dot nz>
       Fri, 16 Jun 2000 04:15:43 +1200 (NZST)
  8. Re: error, message does not exist
       Randall Gellens <randy at qualcomm dot com>
       Thu, 15 Jun 2000 10:53:11 -0700
  9. Re: I/O error no such file or directory
       Randall Gellens <randy at qualcomm dot com>
       Thu, 15 Jun 2000 10:57:31 -0700
 10. Re: I am giving up
       Randall Gellens <randy at qualcomm dot com>
       Thu, 15 Jun 2000 11:03:22 -0700
 11. Re: Please help...
       Randall Gellens <randy at qualcomm dot com>
       Thu, 15 Jun 2000 11:07:18 -0700
 12. Re: error, message does not exist
       "Geoff Wilson" <gwilson at cbnet.ns dot ca>
       Thu, 15 Jun 2000 16:22:29 -0300
 13. SERVER_MODE ???
       Steve Bruno <steve.bruno at metro1 dot com>
       Thu, 15 Jun 2000 12:51:26 -0700
 14. Re: SERVER_MODE ??? 
       Ken Hornstein <kenh at cmf.nrl.navy dot mil>
       Thu, 15 Jun 2000 15:58:11 -0400
 15. Re: Determining POP3 Versions
       "Jeremy C. Reed" <reed at wcug.wwu dot edu>
       Thu, 15 Jun 2000 14:07:26 -0700 (PDT)
 16. Re: error, message does not exist
       Qpopper Support <qpopper at qualcomm dot com>
       Thu, 15 Jun 2000 15:38:10 -0700
 17. [Fwd: qpopper time out error]
       Ching Huat Yeo <yeo at donovan dot com>
       Fri, 16 Jun 2000 09:41:55 +0800
 18. Re: SERVER_MODE ??? 
       "Lisa Casey" <lisa at jellico dot com>
       Thu, 15 Jun 2000 22:17:57 -0400
 19. Re: SERVER_MODE ???
       Randall Gellens <randy at qualcomm dot com>
       Thu, 15 Jun 2000 21:05:51 -0700
 20. Re: [Fwd: qpopper time out error]
       Randall Gellens <randy at qualcomm dot com>
       Thu, 15 Jun 2000 21:09:51 -0700
 21. Re: SERVER_MODE ??? 
       Ken Hornstein <kenh at cmf.nrl.navy dot mil>
       Fri, 16 Jun 2000 01:39:07 -0400
 22. Re: SERVER_MODE ???
       Stephen Samuel <samuel at bcgreen dot com>
       Fri, 16 Jun 2000 00:57:46 -0700
 23. Re: SERVER_MODE ???
       "Lisa Casey" <lisa at jellico dot com>
       Fri, 16 Jun 2000 09:49:59 -0400
 24. qpopper cann't log to /var/adm/***
       Hai Xu <hxu at ustc.edu dot cn>
       Fri, 16 Jun 2000 22:16:24 +0800 (CST)
 25. Re: SERVER_MODE ??? 
       Ken Hornstein <kenh at cmf.nrl.navy dot mil>
       Fri, 16 Jun 2000 10:47:52 -0400
 26. Re: SERVER_MODE ??? 
       "Lisa Casey" <lisa at jellico dot com>
       Fri, 16 Jun 2000 11:41:26 -0400
 27. Re: qpopper cann't log to /var/adm/***
       Stephen Samuel <samuel at bcgreen dot com>
       Fri, 16 Jun 2000 12:42:10 -0700
 28. Qualcomm appear to be spamming......
       Alan Brown <alan at manawatu.gen dot nz>
       Sat, 17 Jun 2000 18:47:09 +1200 (NZST)
 29. Re: Qualcomm appear to be spamming......
       Qpopper Support <qpopper at qualcomm dot com>
       Sat, 17 Jun 2000 00:00:08 -0700
 30. Re: Qualcomm appear to be spamming......
       Alan Brown <alan at manawatu.gen dot nz>
       Sat, 17 Jun 2000 19:31:28 +1200 (NZST)
 31. Re: Qualcomm appear to be spamming......
       Qpopper Support <qpopper at qualcomm dot com>
       Sat, 17 Jun 2000 00:54:32 -0700
 32. Re: Qualcomm appear to be spamming......
       Alan Brown <alan at manawatu.gen dot nz>
       Sat, 17 Jun 2000 20:39:03 +1200 (NZST)
 33. POP in an IT environment
       Forrest Aldrich <forrie at forrie dot com>
       Sat, 17 Jun 2000 14:16:30 -0400
 34. Problems with 3.1b2 tarballs
       "Kenneth Porter" <shiva at well dot com>
       Sat, 17 Jun 2000 11:21:15 -0700
 35. 3.1b2 bug: CharManglerInit lacks return statement
       "Kenneth Porter" <shiva at well dot com>
       Sat, 17 Jun 2000 12:56:22 -0700
 36. Compile on NetBSD
       "J.D. Bronson" <jdb at xpec dot com>
       Sat, 17 Jun 2000 15:18:40 -0500
 37. Re: Compile on NetBSD
       "Kenneth Porter" <shiva at well dot com>
       Sat, 17 Jun 2000 16:10:35 -0700
 38. Re: 3.1b2 bug: CharManglerInit lacks return statement
       Qpopper Support <qpopper at qualcomm dot com>
       Sat, 17 Jun 2000 16:44:42 -0700
 39. Re: Compile on NetBSD
       "Kenneth Porter" <shiva at well dot com>
       Sat, 17 Jun 2000 17:47:17 -0700
 40. Re: Compile on NetBSD
       "Kenneth Porter" <shiva at well dot com>
       Sat, 17 Jun 2000 18:02:31 -0700
 41. Re: Qualcomm appear to be spamming......
       Jim Sander <jim at federation.addy dot com>
       Sat, 17 Jun 2000 21:47:01 -0400 (EDT)
 42. Re: 3.1b2 bug: CharManglerInit lacks return statement
       Stephen Samuel <samuel at bcgreen dot com>
       Mon, 19 Jun 2000 02:13:01 -0700
 43. Re: 3.1b2 bug: CharManglerInit lacks return statement - Question
       Magnus Krafft <Magnus.Krafft at hkv.mil dot se>
       Mon, 19 Jun 2000 12:14:51 +0200
 44. I need help
       "Ken Hodges" <ken at rabun dot net>
       Mon, 19 Jun 2000 13:50:10 -0400
 45. Thanks for the help!
       "Ken Hodges" <ken at rabun dot net>
       Tue, 20 Jun 2000 16:15:52 -0400
 46. Re: Thanks for the help!
       Qpopper Support <qpopper at qualcomm dot com>
       Tue, 20 Jun 2000 18:30:36 -0700
 47. popper (pop3) /etc/pam.d/pop3 config file that works
       "James Nelson" <james at digit.bloomnet dot com>
       Tue, 20 Jun 2000 23:00:41 -0500
 48. qpopper compile on Solaris 8
       Super-User <root at server-icaweb-org.icaweb dot org>
       Wed, 21 Jun 2000 10:40:45 -0500 (CDT)
 49. Re: qpopper compile on Solaris 8
       Vinay Bharel <vinay at bharel dot com>
       Wed, 21 Jun 2000 15:47:48 +0000 (GMT)
 50. Re: qpopper compile on Solaris 8
       Brad Groshok <bgroshok at odyssey.on dot ca>
       Wed, 21 Jun 2000 12:02:39 -0400

From: Frank Pineau <frank at pineaus dot com>
Subject: Re: 3.1b2 Enable-shy
Date: Thu, 15 Jun 2000 10:01:13 -0400

On Thu, 15 Jun 2000 06:04:56 -0700, a data storm erupted from "Kenneth Porter"
<shiva at well dot com>: 

>On Wed, 14 Jun 2000 23:36:23 -0400, Frank Pineau wrote:
>
>>Ok, just tried it again and it definitely ignored the option.  When running
>>./configure, it enabled it ("Enabled SHY"), and there were no errors during
>>compile.  Everything looked fine, but my log file is quite definitely showing
>>the version number whenever mail is popped.
>
>Is it possible that it shows up in the log file but not at the client?
>Have you tried manually connecting to port 110 with telnet to see what
>banner it presents?
>


I telnetted in and did not receive the version number in the banner, so that's
fine, I guess.  However, I was still a little surprised at the change.  In 3.0x,
the logfile reports (v?) for the version and now it reports (v3.1b2).  I'm just
trying to make sure that even though it doesn't show in the banner, it's not
accessible anyway.

FP


-- 
<*><*><*><*><*><*><*><*><*><*><*><*><*><*><*><*><*>
Frank Pineau  ------------>

        frank at pineaus.IHATESPAM dot com
          http://www.pineaus.com

Eight out of every five people are math illiterate.
<*><*><*><*><*><*><*><*><*><*><*><*><*><*><*><*><*>
PGP Public Key:
http://www.pineaus.com/frankpineau.asc

No mail from web-based mail systems such as Hotmail
or Yahoo will be accepted.

From: Ed Concilio <econcilio at goamerica dot net>
Date: Thu, 15 Jun 2000 10:05:05 -0400
Subject: Re: I am giving up [OT]

Well said. The problem is not qpopper but the version of the OS. Popper, and later, qpopper has been working for me at my many jobs for many years. I've seen it through its growing pains to mature into its current  adultdjhe form. 

I too  have a few issues with qpopper, minor issues, and I've have trouble compling it a various platforms before, but these are not resonable excusses for abandoning an old and reliable friend. 

Bite the bullet, spend a weekend and upgrade to 2.7. You'll be a lot happier and have fewer security issues.

BTW: my only real issue is sql support. I've hacked my own support into qpopper, sendmail, and procmail using other people code. IMHO, mysql works the best, its free and its not oracle. <A little dig for you dba's>
-----Original Message-----
From: Admin Mailing Lists <mlist at intergrafix dot net>
Date: Thu, 15 Jun 2000 09:22:10 -0400
To: Geoff Wilson <gwilson at cbnet.ns dot ca>
Subject: Re: I am giving up [OT]

On Wed, 14 Jun 2000, Geoff Wilson wrote:

> Well I tried :) I have been using qpopper for years here and it has 
> do it's job well. However I have version now that has security holes 
> in it and the "new" secure one will not compile on my Sun box, 
> looks like time to investigate other pop mail programs. <SIGH> I'm 
> really gonna miss the pop bull feature :)
> 
> Geoff
> 

as Ani DiFranco would say, "maybe i'm just speaking for me"..
but aren't you taking the program for granted just a little bit. it serves
you well for years, it doesn't compile for you once, and you blatantly
threaten that you're gonna look for a new program? that's pretty
unappreciative. i'm sure i dont have to remind you that all
this time it's served you for FREE, WITH tech support from the
qualcomm people on the mailing list (let alone everyone else here)
dont mean to start any war, but just had to speak my mind. emails like
this really annoy me

-Cygnus
.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-.
Anthony J. Biacco                       Network Administrator/Engineer
thelittleprince at asteroid-b612 dot org       Intergrafix Internet Services

    "Dream as if you'll live forever, live as if you'll die today"
http://www.asteroid-b612.org                http://www.intergrafix.net
.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-._.-.

Edward Concilio
GoAmerica Communications Corp.
Senior Systems Admin.
401 Hackensack Ave.
Hackensack, NJ  07601
econcilio at goamerica dot net
econcilio at gomail dot net
http://www.goamerica.net
Tel: (201) 996-1717 x2243
Fax: (201) 996-1772

GoAmerica Communications
Wireless Internet Services

From: "Adalto Correia Filho" <adaltof at hotmail dot com>
Subject: Determining POP3 Versions
Date: Thu, 15 Jun 2000 11:07:30 EST

Dearests,

     How can I determine the POP3 version running on my system? I have only 
the daemon executable... Is there any POP3 command which could be given to 
help figuring this out?

Thanks in advance


________________________________________________________________________
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com


From: "Geoff Wilson" <gwilson at cbnet.ns dot ca>
Subject: Re: I am giving up [OT]
Date: Thu, 15 Jun 2000 11:46:01 -0300

----- Original Message -----
From: "Admin Mailing Lists" <mlist at intergrafix dot net>
To: "Geoff Wilson" <gwilson at cbnet.ns dot ca>
Cc: "Subscribers of Qpopper" <qpopper at lists.pensive dot org>
Sent: Thursday, June 15, 2000 10:22 AM
Subject: Re: I am giving up [OT]


>
> On Wed, 14 Jun 2000, Geoff Wilson wrote:
>
> > Well I tried :) I have been using qpopper for years here and it has
> > do it's job well. However I have version now that has security holes
> > in it and the "new" secure one will not compile on my Sun box,
> > looks like time to investigate other pop mail programs. <SIGH> I'm
> > really gonna miss the pop bull feature :)
> >
> > Geoff
> >
>
> as Ani DiFranco would say, "maybe i'm just speaking for me"..
> but aren't you taking the program for granted just a little bit. it serves
> you well for years, it doesn't compile for you once, and you blatantly
> threaten that you're gonna look for a new program? that's pretty
> unappreciative. i'm sure i dont have to remind you that all
> this time it's served you for FREE, WITH tech support from the
> qualcomm people on the mailing list (let alone everyone else here)
> dont mean to start any war, but just had to speak my mind. emails like
> this really annoy me
>
  And sir, it is attitudes like yours that really annoy me. If you had taken
the time to read the whole thing, you would have noticed that the reason for
the problem was that there is a nasty security issue with the version I was
using, hence the reason for the attempt to upgrade. Apparently, changes in
the code caused later versions it not to compile on the machine I was using
ver 2.52 on and security issues REQUIRED that it be upgraded. Note that I
tried to use the "fixed" versions to no avail. You sir, have no idea of how
much effort was put in to keeping qpopper as the pop mail daemon on that
box. I originally asked for help and received no reply at all until I said I
was giving up. Then there were a number for CONSTRUCTIVE replies from the
good folks here, which indeed helped and so I actually, in the end, did not
HAVE to change the daemon. That makes me very happy because I REALLY did not
wnat to have to use something else because qpopper has served me well on
many boxes over the years and I do appreciate Qualcomm's efforts.

I usually don't bother to reply  to posts such as this because it serves no
constructive purpose and only starts flame wars that waste bandwidth that is
better used constructively. However I just had to speak my mind because non
constructive posts such as this really annoy me.

Geoff



From: "Lisa Casey" <lisa at jellico dot com>
Subject: Re: Determining POP3 Versions
Date: Thu, 15 Jun 2000 11:25:24 -0400

Hi,

Telnet to port 110 on your syatem. Unless you have shy mode enabled it will
report the version immediately.

Lisa Casey, Webmaster
Interstate 2000, Inc.
lisa at jellico dot com
webmaster at jellico dot com

-----Original Message-----
From: Adalto Correia Filho <adaltof at hotmail dot com>
To: Subscribers of Qpopper <qpopper at lists.pensive dot org>
Date: Thursday, June 15, 2000 11:28 AM
Subject: Determining POP3 Versions


>Dearests,
>
>     How can I determine the POP3 version running on my system? I have only
>the daemon executable... Is there any POP3 command which could be given to
>help figuring this out?
>
>Thanks in advance
>
>
>________________________________________________________________________
>Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com
>
>
>




Date: Thu, 15 Jun 2000 08:47:21 -0700
From: Randall Gellens <randy at qualcomm dot com>
Subject: Re: 3.1b2 Enable-shy

At 11:36 PM -0400 6/14/00, Frank Pineau wrote:

>  Ok, just tried it again and it definitely ignored the option.  When running
>  ./configure, it enabled it ("Enabled SHY"), and there were no errors during
>  compile.  Everything looked fine, but my log file is quite 
> definitely showing
>  the version number whenever mail is popped.

Yes, that's a bug fix.  The log should always show the version 
number.  The idea behind SHY is to hide the version number from 
random people poking around the net, in the belief that if you are 
running a version with a known vulnerability but they don't know 
that, they won't try and attack you.  (You can also make a good case 
that you're better off without enabling SHY, since then, if you're 
not running a known-vulnerable version (and you shouldn't be), 
they'll see that and won't bother trying the attack.)



Date: Fri, 16 Jun 2000 04:15:43 +1200 (NZST)
From: Alan Brown <alan at manawatu.gen dot nz>
Subject: Re: 3.1b2 Enable-shy

On Thu, 15 Jun 2000, Randall Gellens wrote:

> that, they won't try and attack you.  (You can also make a good case 
> that you're better off without enabling SHY, since then, if you're 
> not running a known-vulnerable version (and you shouldn't be), 
> they'll see that and won't bother trying the attack.)

Perhaps anyone trying the attack should be trapped in a fake response
sequence....

-- 
How secure are hosts in _your_ network? Http://www.orbs.org/admins.html
ORBS - it's not just for filters.


Date: Thu, 15 Jun 2000 10:53:11 -0700
From: Randall Gellens <randy at qualcomm dot com>
Subject: Re: error, message does not exist

At 9:06 AM -0400 6/15/00, Admin Mailing Lists wrote:

>  Can anyone explain what the last log line means..i mean, it's pretty
>  straight-forward. but, why would it come up, and is there a way i can fix
>  it or could it be a glitch in the code?
>
>  Thanx.
>
>  Sat Jun  3 06:54:45 2000 [4542] (v3.0.1) STAT request from "gyro" at
>  (gyro at WILBA010-0022.splitrock dot net) 64.196.124.22 : 0 message(s)
>  Sat Jun  3 06:54:45 2000
>  Sat Jun  3 06:54:46 2000 [4542] gyro at WILBA010-0022.splitrock.net
>  (64.196.124.22): -ERR Message 1 does not exist.

Looks to me like the client issued a command such as RETR 1 or some 
such.  Since there are no messages, there is no message 1.
-- 
Randall Gellens
Opinions are personal;    facts are suspect;    I speak for myself only
-------------- Randomly-selected tag: ---------------
What is mind?  No matter. 
What is matter?  Never mind. 
		--Thomas Hewitt Key, 1799-1875 

Date: Thu, 15 Jun 2000 10:57:31 -0700
From: Randall Gellens <randy at qualcomm dot com>
Subject: Re: I/O error no such file or directory

At 5:34 PM -0500 6/14/00, Jerry O'Brien wrote:

>  What do these qpopper messages mean?  (version 3.0) I get them from a few
>  Windoze clients running OE.
>
>  -ERR POP EOF or I/O error: No such file or directory (2) [popper.c:560]

'EOF or I/O error' almost always means EOF.  That is, the network 
connection with the client dropped.  This could be a rude client that 
disconnected without issuing QUIT and waiting for the "+OK" response, 
or it could be a poor dial-up connection that failed, or any network 
problem.

At the point where this message is issued, Qpopper no longer knows if 
it was an EOF or an actual I/O error, and so it reports the error 
number just in case it really is an I/O error (which it almost never 
is).  When it is just an EOF, this error is meaningless.

>  -ERR [SYS/TEMP] maillock error 4: '/var/spool/mail/lmsully'
>  [pop_dropcopy.c:1411]

Maillock error 4 means the lock is in use by another process. 
Perhaps another popper session is cleaning up, or maybe the delivery 
agent is adding new mail to the spool.
-- 
Randall Gellens
Opinions are personal;    facts are suspect;    I speak for myself only
-------------- Randomly-selected tag: ---------------
Any nitwit can understand computers.  Many do.  -- Ted Nelson

Date: Thu, 15 Jun 2000 11:03:22 -0700
From: Randall Gellens <randy at qualcomm dot com>
Subject: Re: I am giving up

At 7:09 PM -0500 6/14/00, Jorge Kobeh wrote:

>  I've had trouble with the new version
>  but the old one works great with my system, I'm using BSD/OS 4.01.

Try 3.1b2, which has fixes for BSD/OS (and other OSes).
-- 
Randall Gellens
Opinions are personal;    facts are suspect;    I speak for myself only
-------------- Randomly-selected tag: ---------------
In the beginning was the word...and it was the wrong length.  
                 --Bob Barton (Burroughs computer architect)

Date: Thu, 15 Jun 2000 11:07:18 -0700
From: Randall Gellens <randy at qualcomm dot com>
Subject: Re: Please help...

At 9:17 AM -0400 6/15/00, <psmith at cti dot ca> wrote:

>  -ERR POP EOF or I/O Error: 2 (No such file or directory); 0 (Success)

'EOF or I/O error' almost always means EOF.  That is, the network 
connection with the client dropped.  This could be a rude client that 
disconnected without issuing QUIT and waiting for the "+OK" response, 
or it could be a poor dial-up connection that failed, or any network 
problem.

At the point where this message is issued, Qpopper no longer knows if 
it was an EOF or an actual I/O error, and so it reports the error 
number just in case it really is an I/O error (which it almost never 
is).  When it is just an EOF, this error is meaningless.


>  -ERR Message 3 out of range.

This indicates a client tried to access a message which does not 
exist.  For example, sending 'retr 3' when there are only two 
messages.

-- 
Randall Gellens
Opinions are personal;    facts are suspect;    I speak for myself only
-------------- Randomly-selected tag: ---------------
Some days you feel like Schrodinger's cat.   --M. S. Hutchenreuther

From: "Geoff Wilson" <gwilson at cbnet.ns dot ca>
Subject: Re: error, message does not exist
Date: Thu, 15 Jun 2000 16:22:29 -0300

----- Original Message -----
From: "Randall Gellens" <randy at qualcomm dot com>
To: "Admin Mailing Lists" <mlist at intergrafix dot net>; "Subscribers of Qpopper"
<qpopper at lists.pensive dot org>
Sent: Thursday, June 15, 2000 2:53 PM
Subject: Re: error, message does not exist


> At 9:06 AM -0400 6/15/00, Admin Mailing Lists wrote:
>
> >  Can anyone explain what the last log line means..i mean, it's pretty
> >  straight-forward. but, why would it come up, and is there a way i can
fix
> >  it or could it be a glitch in the code?
> >
> >  Thanx.
> >
> >  Sat Jun  3 06:54:45 2000 [4542] (v3.0.1) STAT request from "gyro" at
> >  (gyro at WILBA010-0022.splitrock dot net) 64.196.124.22 : 0 message(s)
> >  Sat Jun  3 06:54:45 2000
> >  Sat Jun  3 06:54:46 2000 [4542] gyro at WILBA010-0022.splitrock.net
> >  (64.196.124.22): -ERR Message 1 does not exist.
>
> Looks to me like the client issued a command such as RETR 1 or some
> such.  Since there are no messages, there is no message 1.

Hmmmm... yes I just had a similar experience. Telnetting to the pop port and
signing on shows a user that has 1 message and (-1) hidden. A list command
shows nothing and a RETR 1 results in a log saying the same thing, that the
message 1 does not exist. Since the mailbox was 0 length. I deleted it and
recreated it using touch the set the proper permissions. The result was the
same sequence of messages :( On the users side the client hangs trying to
download a message that does not exsist.

Geoff



Date: Thu, 15 Jun 2000 12:51:26 -0700
From: Steve Bruno <steve.bruno at metro1 dot com>
Subject: SERVER_MODE ???

Maybe I'm a bit dense, but could someone clarify the explanation of
SERVER_MODE.  I think it sounds like the right solution for me, but
nowhere have I seen any disadvantages spelled out.  What, if any ill
effects could SERVER_MODE cause?
-- 
Steve Bruno                              Phone: (503) 524-1267
Webmaster/UNIX System Administration     Fax:   (503) 643-9600
Metro One Telecommunications             Cell:  (503) 757-7250

Subject: Re: SERVER_MODE ???
Date: Thu, 15 Jun 2000 15:58:11 -0400
From: Ken Hornstein <kenh at cmf.nrl.navy dot mil>

>Maybe I'm a bit dense, but could someone clarify the explanation of
>SERVER_MODE.  I think it sounds like the right solution for me, but
>nowhere have I seen any disadvantages spelled out.  What, if any ill
>effects could SERVER_MODE cause?

The disadvantage to SERVER_MODE is that it assumes nothing else is modifying
your spool file (except delivery agents, which are only allowed to append).
If you have people using POP and reading their mail with mailx, then it's
not for you.  Otherwise ... probably a reasonable choice.

--Ken

Date: Thu, 15 Jun 2000 14:07:26 -0700 (PDT)
From: "Jeremy C. Reed" <reed at wcug.wwu dot edu>
Subject: Re: Determining POP3 Versions

On Thu, 15 Jun 2000, Adalto Correia Filho wrote:

>      How can I determine the POP3 version running on my system? I have only 
> the daemon executable... Is there any POP3 command which could be given to 
> help figuring this out?

If telneting to port 110 of the POP3 server doesn't help, you may try the
strings command on the executable, like:
  strings /usr/local/sbin/pop3d | more

  Jeremy C. Reed
  http://www.reedmedia.net
  http://bsd.reedmedia.net


Date: Thu, 15 Jun 2000 15:38:10 -0700
From: Qpopper Support <qpopper at qualcomm dot com>
Subject: Re: error, message does not exist

At 4:22 PM -0300 6/15/00, Geoff Wilson wrote:

>  Telnetting to the pop port and
>  signing on shows a user that has 1 message and (-1) hidden. A list command
>  shows nothing and a RETR 1 results in a log saying the same thing, that the
>  message 1 does not exist. Since the mailbox was 0 length. I deleted it and
>  recreated it using touch the set the proper permissions. The result was the
>  same sequence of messages :( On the users side the client hangs trying to
>  download a message that does not exsist.

You can reproduce this using 3.0.1?  There was a bug in an early 
3.0 beta that could cause Qpopper when compiled with 
--enable-uw-kluge to get confused about how many messages existed 
and how many were hidden, but that was fixed long before 3.0 final 
came out.  I've never heard of it happening on any version after 
3.0.

If you can reproduce it, please send the steps (and a trace file if 
you can) to <qpopper at qualcomm dot com>.

Date: Fri, 16 Jun 2000 09:41:55 +0800
From: Ching Huat Yeo <yeo at donovan dot com>
Subject: [Fwd: qpopper time out error]

Hello,

I have successfully installed the qpopper into my
linux box, and when telnet localhost 110, i can see
+OK QPOP (version 3.1b1) at hostname starting.

Below is the detail on what i do when i got the error
message at the end, after i type "retr 2" i can see
the messages being retrieved, but then it just hanged
there, and after a while, the timeout error come out,
do anyone can help me on this, will appreciate your
help, thanks!

#telnet hostname 110
..
+OK QPOP (version 3.1b1) at hostname starting.
user username
+OK Password required for username
pass password
+OK username has 2 visible messages (0 hidden) in 2315
octets.

retr 2

.
-ERR POP timeout
+OK Pop server at virgo signing off.
Connection closed by foreign host.


Regards,
Ching Yeo

From: "Lisa Casey" <lisa at jellico dot com>
Subject: Re: SERVER_MODE ???
Date: Thu, 15 Jun 2000 22:17:57 -0400

Hi,


> If you have people using POP and reading their mail with mailx, then it's
> not for you.  Otherwise ... probably a reasonable choice.

I'm a wee bit ignorant here --  mailx: is that a mail program like pine? Are
you referring to people who POP mail and also read it online with a shell
account?

Thanks,

Lisa Casey
Interstate 2000, Inc.
lisa at jellico dot com





Date: Thu, 15 Jun 2000 21:05:51 -0700
From: Randall Gellens <randy at qualcomm dot com>
Subject: Re: SERVER_MODE ???

At 10:17 PM -0400 6/15/00, Lisa Casey wrote:

>  Hi,
>
>
>>  If you have people using POP and reading their mail with mailx, then it's
>>  not for you.  Otherwise ... probably a reasonable choice.
>
>  I'm a wee bit ignorant here --  mailx: is that a mail program like pine? Are
>  you referring to people who POP mail and also read it online with a shell
>  account?

That's right -- server mode should not be used if people have shell 
accounts and get their mail that way.  It should only be used if 
people only get their mail via POP.
-- 
Randall Gellens
Opinions are personal;    facts are suspect;    I speak for myself only
-------------- Randomly-selected tag: ---------------
Algol was a great improvement on most of its successors.  
                                          --C.A.R Hoare

Date: Thu, 15 Jun 2000 21:09:51 -0700
From: Randall Gellens <randy at qualcomm dot com>
Subject: Re: [Fwd: qpopper time out error]

At 9:41 AM +0800 6/16/00, Ching Huat Yeo wrote:

>  after i type "retr 2" i can see
>  the messages being retrieved, but then it just hanged
>  there, and after a while, the timeout error come out,

After Qpopper sends the message it sends a line with just a ".", 
which indicates the end of the message.  You can then enter a new 
command (such as QUIT).  If you don't enter anything, Qpopper 
eventually times out.
-- 
Randall Gellens
Opinions are personal;    facts are suspect;    I speak for myself only
-------------- Randomly-selected tag: ---------------
Finagle's Second Law: 
	No matter what the anticipated result, there will always be 
	someone eager to (a) misinterpret it, (b) fake it, or (c) 
	believe it happened according to his own pet theory. 

Subject: Re: SERVER_MODE ???
Date: Fri, 16 Jun 2000 01:39:07 -0400
From: Ken Hornstein <kenh at cmf.nrl.navy dot mil>

>> If you have people using POP and reading their mail with mailx, then it's
>> not for you.  Otherwise ... probably a reasonable choice.
>
>I'm a wee bit ignorant here --  mailx: is that a mail program like pine? Are
>you referring to people who POP mail and also read it online with a shell
>account?

Wow, I guess I now know what Billy Crystal was talking about in his one
comedy routine where his daughter asked him, "Dad, was Paul McCartney
in a group before Wings?".

"Let me tell you about that old time mail reader, mailx ... vi and
emacs were in their heydey, people still thought Unix had a chance
in the desktop market, and "pico" was just a gleam in Marc Crispin's
eye ..."

(To answer your question: "yes, that's what I'm referring to").

--Ken

Date: Fri, 16 Jun 2000 00:57:46 -0700
From: Stephen Samuel <samuel at bcgreen dot com>
Subject: Re: SERVER_MODE ???

Ken Hornstein wrote:

> >I'm a wee bit ignorant here --  mailx: is that a mail program like pine? Are
> >you referring to people who POP mail and also read it online with a shell
> >account?

> Wow, I guess I now know what Billy Crystal was talking about in his one
> comedy routine where his daughter asked him, "Dad, was Paul McCartney
> in a group before Wings?".

Giggle. Right there with you... I remember both.

Actually, AFIK, Server_mode is OK, as long as people are using one
OR the other -- exclusively. (i.e. If you ONLY use mailx/Mail, pine,
elm, etc.; you're OK. Similarly if you ONLY use POP. The problem 
comes if there's even a SLIGHT possibility of a user starting a POP 
session while they editing the mail file via some other program
(or vice versa).

If that happens and server_mode is enabled, you've got race conditions
that just BEG for lost/mangled mail.

-- 
Stephen Samuel +1(604)876-0426                samuel at bcgreen dot com
		   http://www.bcgreen.com/~samuel/
The question, for this world, is not "will I die?". 
It is, rather, "how will I live?".

From: "Lisa Casey" <lisa at jellico dot com>
Subject: Re: SERVER_MODE ???
Date: Fri, 16 Jun 2000 09:49:59 -0400

Hi,


>Wow, I guess I now know what Billy Crystal was talking about in
> his one comedy routine where his daughter asked him, "Dad,
> was Paul McCartney in a group before Wings?".


You know, I really resent that. Excuse me for not being familiar with mailx.
I'm very familiar with Pine, Elm, and (unfortunately!) with vi. I pretty
much figured from what you said that mailx was a mail reader along the lines
of Pine, Elm, etc. but wasn't 100% positive so I thought I'ld ask. You make
me sorry that I spoke up with my question. I imagine there are other readers
of the qpopper list that have questions they'ld like to ask but after seeing
replies like this come through the list they may not. Which is a shame. We
can't all be unix guru's (as you obviously think you are). Think about it --
is this list just for folks who have already mastered their OS or is it a
list that welcomes the questions of newcomers who would like to know as much
as you do one day? Because your reply (and others like yours) may be
squelching some of those folks.

I grew up with the Beatles, btw, but I didn't grow up with Unix. That
doesn't mean, however, that I can't eventually become as good with it as
anyone else.

>(To answer your question: "yes, that's what I'm referring to").


Thank you. That was all the reply that was necessary.

Lisa Casey, Webmaster
Interstate 2000, Inc.
lisa at jellico dot com
webmaster at jellico dot com





Date: Fri, 16 Jun 2000 22:16:24 +0800 (CST)
From: Hai Xu <hxu at ustc.edu dot cn>
Subject: qpopper cann't log to /var/adm/***

Hi,

I set qpopper and TCPwrapper on solaris7 box. I configure popper
as:

./configure --enable-specialauth  \
     --enable-home-dir-mail=Mailbox \
     --enable-debugging \
     --with-log-facility=LLOCAL1 \
     --enable-log-login

copy popper/popper to /usr/sbin/popper and set inetd.conf as:

pop3    stream  tcp     nowait  root    /usr/sbin/tcpd popper -s

/etc/syslog.conf was set as:
local1.notice                   /var/adm/pop3log

When I use outlook to got mail from server. It didn't create file
/var/adm/pop3log. What's up?

BTW:Install Guide of qpopper tell to add line to inetd.conf as:
pop3    stream  tcp     nowait  root    /usr/sbin/popper  qpopper -s

I am not sure whether 'qpopper' is a typing error. I think it should
me 'popper'.

Hazy



Subject: Re: SERVER_MODE ???
Date: Fri, 16 Jun 2000 10:47:52 -0400
From: Ken Hornstein <kenh at cmf.nrl.navy dot mil>

>>Wow, I guess I now know what Billy Crystal was talking about in
>> his one comedy routine where his daughter asked him, "Dad,
>> was Paul McCartney in a group before Wings?".
>
>You know, I really resent that. Excuse me for not being familiar with mailx.
>I'm very familiar with Pine, Elm, and (unfortunately!) with vi. I pretty
>much figured from what you said that mailx was a mail reader along the lines
>of Pine, Elm, etc. but wasn't 100% positive so I thought I'ld ask. You make

Well, my apologies if I offended you.  Please don't take it in the
vein of me poking fun at any lack of knowledge on your part ... it
was more them realization that maybe I was getting a bit old; just
as Billy Crystal came to the realization that his daughter postdated
the Beatles, so I realized that there were people who had never
even _heard_ of the traditional MUA called mailx ... back then it
was all we had (trust me, you weren't missing much).  When Elm came
out, we thought it was the greatest thing since Ethernet.  And there's
nothing _wrong_ with not having heard of mailx; nowadays I doubt any
new users to Unix would ever use it.

"You young whippersnappers have it easy; back in my day, I had to walk
10 miles to a DEC VT52 terminal, through driving snow, uphill BOTH WAYS,
just to connect at 1200 baud to a VAX 11/750 running BSD 4.1.  We read
our email by using 'cat' on the spool file, and we sent email by telneting
to the SMTP port, AND WE LIKED IT!"

>me sorry that I spoke up with my question. I imagine there are other readers
>of the qpopper list that have questions they'ld like to ask but after seeing
>replies like this come through the list they may not. Which is a shame. We
>can't all be unix guru's (as you obviously think you are). Think about it --
>is this list just for folks who have already mastered their OS or is it a
>list that welcomes the questions of newcomers who would like to know as much
>as you do one day? Because your reply (and others like yours) may be
>squelching some of those folks.

I hope everyone understands that my note was all in good fun, and there
was no elitism intended.  Perhaps my sense of humor isn't for everyone.
I certainly remember my days when I was a beginner, and I felt that I
wouldn't have been offended back then if I had received such a reply to
a question I had asked, but maybe I would have.  Please consider my
previous note in the manner in which it was intended, and not in the
way that it might have come across.

--Ken

From: "Lisa Casey" <lisa at jellico dot com>
Subject: Re: SERVER_MODE ???
Date: Fri, 16 Jun 2000 11:41:26 -0400

Hi Ken,

>"You young whippersnappers have it easy; back in my day, I had to walk
>10 miles to a DEC VT52 terminal, through driving snow, uphill BOTH WAYS,
>just to connect at 1200 baud to a VAX 11/750 running BSD 4.1.  We read
>our email by using 'cat' on the spool file, and we sent email by telneting
>to the SMTP port, AND WE LIKED IT!"
>


ROFL!  Apology accepted. Perhaps I was a bit hasty in jumping to take
offense.

Lisa Casey





Date: Fri, 16 Jun 2000 12:42:10 -0700
From: Stephen Samuel <samuel at bcgreen dot com>
Subject: Re: qpopper cann't log to /var/adm/***

If I remember correctly, Solaris syslogd will not create the log
file if it doesn't already exist.  Try touching /var/adm/pop3log
and the sigHUP syslogd and see if that solves your problem.

Hai Xu wrote:
> 
> /etc/syslog.conf was set as:
> local1.notice                   /var/adm/pop3log
only normal pop messages are logged at notice level.
   (shouldn't that be local0.notice??)
debug messages are logged at local0.debug (or mail.debug).

> When I use outlook to got mail from server. It didn't create file
> /var/adm/pop3log. What's up?
If I remember correctly, Solaris syslogd will not create the log
file if it doesn't already exist.  Try touching /var/adm/pop3log
and the sigHUP syslogd and see if that solves your problem.

> BTW:Install Guide of qpopper tell to add line to inetd.conf as:
> pop3    stream  tcp     nowait  root    /usr/sbin/popper  qpopper -s
 add a '-d' to enable the debugging (configure just causes the code to
 be compiled in
> I am not sure whether 'qpopper' is a typing error. I think it should
> me 'popper'.

Whatever you want.  I don't think that qpopper really cares This just
sets what goes into $0 (ARGV[0])  (and gets logged in syslog messages).

-- 
Stephen Samuel +1(604)876-0426                samuel at bcgreen dot com
		   http://www.bcgreen.com/~samuel/
The question, for this world, is not "will I die?". 
It is, rather, "how will I live?".

Date: Sat, 17 Jun 2000 18:47:09 +1200 (NZST)
From: Alan Brown <alan at manawatu.gen dot nz>
Subject: Qualcomm appear to be spamming......

Would someone @ qualcomm please explain why one of my _administrative_
addresses has been hit with a message about upgrading Eudora? I don't
even use the damned thing and can't as long as there's no Linux/X
version.

---------- Forwarded message ----------
Return-Path: <e-news at qualcomm dot com>
Delivered-To: <system at manawatu.gen dot nz>
Received: from saltine.qualcomm.com (saltine.qualcomm.com [129.46.241.192])
	by mailhost.manawatu.net.nz (8.10.1/8.9.3) with ESMTP id
    e5H5u4s27793
	for <system at manawatu.gen dot nz>; Sat, 17 Jun 2000 17:56:04 +1200
Received: from saltine.qualcomm.com (129.46.241.119) by
    saltine.qualcomm.com (Worldmail 1.3.167); 16 Jun 2000 22:29:57 -0700
Message-ID: <3945692D00008BB9 at saltine.qualcomm dot com> (added by
    saltine.qualcomm.com)
Mime-Version: 1.0
X-List: 34801.150000
Date: Fri, 16 Jun 2000 22:33:41 -0700
To: "Eudora User"@mailhost.manawatu.net.nz
From: Eudora News <e-news at qualcomm dot com>
Subject: Upgrade your email software to Eudora 4.3



Date: Sat, 17 Jun 2000 00:00:08 -0700
From: Qpopper Support <qpopper at qualcomm dot com>
Subject: Re: Qualcomm appear to be spamming......

At 6:47 PM +1200 6/17/00, Alan Brown wrote:

>  Would someone @ qualcomm please explain why one of my _administrative_
>  addresses has been hit with a message about upgrading Eudora? I don't
>  even use the damned thing and can't as long as there's no Linux/X
>  version.

As far as I know, the Eudora upgrade letter was sent to people who 
registered Eudora light (possibly many years ago) and who indicated 
that it was OK to send them occasional mail.  Since such mail is sent 
so infrequently, people often forget all about it.  I think there is 
a link to click on at the bottom of the email which will remove the 
address from the list.

>
>  ---------- Forwarded message ----------
>  Return-Path: <e-news at qualcomm dot com>
>  Delivered-To: <system at manawatu.gen dot nz>
>  Received: from saltine.qualcomm.com (saltine.qualcomm.com [129.46.241.192])
>  	by mailhost.manawatu.net.nz (8.10.1/8.9.3) with ESMTP id
>      e5H5u4s27793
>  	for <system at manawatu.gen dot nz>; Sat, 17 Jun 2000 17:56:04 +1200
>  Received: from saltine.qualcomm.com (129.46.241.119) by
>      saltine.qualcomm.com (Worldmail 1.3.167); 16 Jun 2000 22:29:57 -0700
>  Message-ID: <3945692D00008BB9 at saltine.qualcomm dot com> (added by
>      saltine.qualcomm.com)
>  Mime-Version: 1.0
>  X-List: 34801.150000
>  Date: Fri, 16 Jun 2000 22:33:41 -0700
>  To: "Eudora User"@mailhost.manawatu.net.nz
>  From: Eudora News <e-news at qualcomm dot com>
>  Subject: Upgrade your email software to Eudora 4.3


Date: Sat, 17 Jun 2000 19:31:28 +1200 (NZST)
From: Alan Brown <alan at manawatu.gen dot nz>
Subject: Re: Qualcomm appear to be spamming......

On Sat, 17 Jun 2000, Qpopper Support wrote:

> As far as I know, the Eudora upgrade letter was sent to people who 
> registered Eudora light (possibly many years ago) and who indicated 
> that it was OK to send them occasional mail.

If I'd registered it, that would have gone to my personal address.

AB


Date: Sat, 17 Jun 2000 00:54:32 -0700
From: Qpopper Support <qpopper at qualcomm dot com>
Subject: Re: Qualcomm appear to be spamming......

At 7:31 PM +1200 6/17/00, Alan Brown wrote:

>  On Sat, 17 Jun 2000, Qpopper Support wrote:
>
>>  As far as I know, the Eudora upgrade letter was sent to people who
>>  registered Eudora light (possibly many years ago) and who indicated
>>  that it was OK to send them occasional mail.
>
>  If I'd registered it, that would have gone to my personal address.

Is it possible that someone else registered it at any point in the 
past?  This could have been a long time ago (Eudora Light has been 
around for a while).



Date: Sat, 17 Jun 2000 20:39:03 +1200 (NZST)
From: Alan Brown <alan at manawatu.gen dot nz>
Subject: Re: Qualcomm appear to be spamming......

On Sat, 17 Jun 2000, Qpopper Support wrote:

> Is it possible that someone else registered it at any point in the 
> past?  This could have been a long time ago (Eudora Light has been 
> around for a while).

Unlikely. The domain has been held by me since 1992.

AB
-- 
How secure are hosts in _your_ network? Http://www.orbs.org/admins.html
ORBS - it's not just for filters.


Date: Sat, 17 Jun 2000 14:16:30 -0400
From: Forrest Aldrich <forrie at forrie dot com>
Subject: POP in an IT environment

I have a situation where I work, where we (Engineering) control the email 
gateways.  We have a separate IT department now, and it makes more sense 
for them to be controlling POP for a bulk of the employees; however, we use 
DRAC and the POP accounts are on one of the gateways (for remote access).

The problem I'm faced with is how to give control over to IT, in a 
controlled fashion whereby they don't have access to the gateway, and still 
support the external access and pop-before-smtp relaying mechanism (DRAC 
supports this via rpc).   We could hack up some web interface for them to 
control POP and use pam_myql... but that's a bigger project.

Some things I thought about were to bind a different IP address to an 
interface on the gateway, and then do some packet forwarding magic which 
would actually bring people to another machine.   There are potential 
complications with this, though.

Anyways, I think more experienced users out there will understand what I'm 
dealing with.  I'd be very interested in what other people have worked out 
to solve similar problems.

Thanks in advance.



From: "Kenneth Porter" <shiva at well dot com>
Date: Sat, 17 Jun 2000 11:21:15 -0700
Subject: Problems with 3.1b2 tarballs

I tried downloading the 3.1b2 tarballs in both .Z and .gz formats and
both have a corrupt file in popper/pop_pass.c at line 925:

        pam_end ( pamh, 0 );
        sleep   ( SLEEP_SECOND^A
        return  ( pop_msg ( p, POP_FAILURE, HERE, GP_ERRSTRING, 
                            p->user, errmsg, erc ) );

(The "^A" is really a control-A.)

Perhaps I'm the first to try building this with PAM support?

Ken
mailto:shiva at well dot com
http://www.sewingwitch.com/ken/
http://www.harrybrowne2000.org/



From: "Kenneth Porter" <shiva at well dot com>
Date: Sat, 17 Jun 2000 12:56:22 -0700
Subject: 3.1b2 bug: CharManglerInit lacks return statement

In 3.1b2, CharManglerInit is supposed to return a pointer to a CHMangle
struct, but there's no return statement in the function. I found this
while cleaning up all the warnings. The return value is used in two
places, so I'd expect crashes downstream of this.

Ken
mailto:shiva at well dot com
http://www.sewingwitch.com/ken/
http://www.harrybrowne2000.org/



Date: Sat, 17 Jun 2000 15:18:40 -0500
From: "J.D. Bronson" <jdb at xpec dot com>
Subject: Compile on NetBSD

I am trying to compile Qpopper (latest) on NetBSD with APOP support.

Here is the error: Any way to fix this easily?

pop_user.c: In function `pop_user':
pop_user.c:233: warning: dereferencing `void *' pointer
pop_user.c:233: void value not ignored as it ought to be
pop_user.c:235: warning: dereferencing `void *' pointer
pop_user.c:235: void value not ignored as it ought to be
*** Error code 1

( i do have BSD DBM installed )




-- 
J.D. Bronson // jeff at xpec.com // http://www.xpec dot com/jeff
Aurora Health Care // Information Systems // Telecom Site Manager
Milwaukee Wisconsin USA // Office: 414.978.8282 // Fax: 414.328.8282

From: "Kenneth Porter" <shiva at well dot com>
Date: Sat, 17 Jun 2000 16:10:35 -0700
Subject: Re: Compile on NetBSD

On Sat, 17 Jun 2000 15:18:40 -0500, J.D. Bronson wrote:

>I am trying to compile Qpopper (latest) on NetBSD with APOP support.
>
>Here is the error: Any way to fix this easily?
>
>pop_user.c: In function `pop_user':
>pop_user.c:233: warning: dereferencing `void *' pointer

Looks like "latest" means 3.0.2. (You should specify the version
number, as it can be ambigous to those of us who "ride the edge". ;-)
This is fixed in 3.1b2. The pointer is properly cast to (char*) before
being dereferenced in the latest beta.

Ken
mailto:shiva at well dot com
http://www.sewingwitch.com/ken/
http://www.harrybrowne2000.org/



Date: Sat, 17 Jun 2000 16:44:42 -0700
From: Qpopper Support <qpopper at qualcomm dot com>
Subject: Re: 3.1b2 bug: CharManglerInit lacks return statement

At 12:56 PM -0700 6/17/00, Kenneth Porter wrote:

>  In 3.1b2, CharManglerInit is supposed to return a pointer to a CHMangle
>  struct, but there's no return statement in the function. I found this
>  while cleaning up all the warnings. The return value is used in two
>  places, so I'd expect crashes downstream of this.
>
>  Ken
>  mailto:shiva at well dot com
>  http://www.sewingwitch.com/ken/
>  http://www.harrybrowne2000.org/

It does appear that the return is missing.  The file hasn't changed 
since February, so it's not a new problem.



From: "Kenneth Porter" <shiva at well dot com>
Date: Sat, 17 Jun 2000 17:47:17 -0700
Subject: Re: Compile on NetBSD

On Sat, 17 Jun 2000 19:08:16 -0500, J.D. Bronson wrote:

>% popauth
>Changing only APOP password for jeff.
>New password:
>Password unchanged.

Ok, I've confirmed that one can't enter *new* users. It does work to
set the password for a user already in the database from a previous
version. Looks like this is now confirmed for 3.1b2 for Solaris,
NetBSD, and Linux (me).

Ken
mailto:shiva at well dot com
http://www.sewingwitch.com/ken/
http://www.harrybrowne2000.org/



From: "Kenneth Porter" <shiva at well dot com>
Date: Sat, 17 Jun 2000 18:02:31 -0700
Subject: Re: Compile on NetBSD

On Sat, 17 Jun 2000 17:47:17 -0700, Kenneth Porter wrote:

>Ok, I've confirmed that one can't enter *new* users. It does work to
>set the password for a user already in the database from a previous
>version. Looks like this is now confirmed for 3.1b2 for Solaris,
>NetBSD, and Linux (me).

Found it. The problem code in popauth.c is:

            strncpy ( buf, 
                      getpass ( passtype ? "New pass phrase:"
                                         : "New password:" ), 
                      sizeof ( buf ) );
            buf [ sizeof(buf) -1 ] = '\0';
            i = strlen ( buf );
            if ( i == 0 || strncmp ( buf, obuf, i ) != 0 ) {
                fprintf ( stderr, passtype ? "Pass phrase unchanged.\n"
                                           : "Password unchanged.\n" );
                exit (1);
            }

The "strncmp() != 0" is backwards, and should be "== 0". The 3.0.2 code
uses "!strncmp()".

Ken
mailto:shiva at well dot com
http://www.sewingwitch.com/ken/
http://www.harrybrowne2000.org/



Date: Sat, 17 Jun 2000 21:47:01 -0400 (EDT)
From: Jim Sander <jim at federation.addy dot com>
Subject: Re: Qualcomm appear to be spamming......

   Any reason that this exchange was put out on the QPopper list? This
list is about qpopper, not Eudora. I am sure there are plenty of nice
people at qualcomm ready to answer email, so spamming a list is hardly
necessary. The replies from the support staff don't help any either- let's
not waste any more time with this, please!

-=Jim=-



Date: Mon, 19 Jun 2000 02:13:01 -0700
From: Stephen Samuel <samuel at bcgreen dot com>
Subject: Re: 3.1b2 bug: CharManglerInit lacks return statement

Qpopper Support wrote:
> 
> At 12:56 PM -0700 6/17/00, Kenneth Porter wrote:
> 
> >  In 3.1b2, CharManglerInit is supposed to return a pointer to a CHMangle
> >  struct, but there's no return statement in the function. I found this
> >  while cleaning up all the warnings. The return value is used in two
> >  places, so I'd expect crashes downstream of this.
....
> It does appear that the return is missing.  The file hasn't changed
> since February, so it's not a new problem.

It's also in 3.0.2.

As I remember, C is supposed to return (in the absence of an
explicit return) the value of the last expression executed in the 
function.  In this case that would be the enum in the last assign.
Of course, I don't trust such default return values, so I could be
wrong.

In any case, I have absolutely no idea as to why this hasn't blown up 
a long time ago.
-- 
Stephen Samuel +1(604)876-0426                samuel at bcgreen dot com
		   http://www.bcgreen.com/~samuel/
The question, for this world, is not "will I die?". 
It is, rather, "how will I live?".

Date: Mon, 19 Jun 2000 12:14:51 +0200
From: Magnus Krafft <Magnus.Krafft at hkv.mil dot se>
Subject: Re: 3.1b2 bug: CharManglerInit lacks return statement - Question

Hi!

Just curious... It was many years ago I dabbled in C but I remember some of this and wonder if I understand it correctly.

>It's also in 3.0.2.
>
>As I remember, C is supposed to return (in the absence of an
>explicit return) the value of the last expression executed in the
>function.  In this case that would be the enum in the last assign.
>Of course, I don't trust such default return values, so I could be
>wrong.

The value of the last expression... Is that like TRUE/FALSE wich is alway generated for all expressions like  "expression_value = (X < Y)"?

If not - how about functions returning values not declared "int" as is the default return value of a function?


Best Regards,
Magnus Krafft

From: "Ken Hodges" <ken at rabun dot net>
Subject: I need help
Date: Mon, 19 Jun 2000 13:50:10 -0400

I have been using a WinNT Sendmail mail server for quite some years, but I'm
getting tired of all of the "Blue screens of death" in the middle of the
night on it.
I want to switch over to a linux mailserver, and have purchased the
commercial version of sendmail.

I still need a pop3 program, and I have downloaded and installed qpopper
following the directions to the "T".

It still is giving me errors on authenticating telling me the password is
incorrect even after enabling the specialauth feature. I cannot find any
other documentation on this problem, even after searching for hours for a
solution.

Does anyone here want to make a few bucks by setting this up for me ?

Please respond by sending e-mail to ken at rabun dot net or by calling 706-782-9239

Thanks in advance,
Ken



From: "Ken Hodges" <ken at rabun dot net>
Subject: Thanks for the help!
Date: Tue, 20 Jun 2000 16:15:52 -0400

Thanks for the help getting my qpopper up and running!

Just for reference, it seems that there is a problem with redhat 6.0 or 6.2
and qpopper3.0.2 in that it will not authenticate. From what I can gather,
it appears that in order to make the latest release work with redhat, one
has to do some modifying to the PAM files, which is not documented anywhere.
I was able to get an older version of qpopper (2.5.3) running on this
machine,  and everything seems lovely.  Since this one works, I think I'll
just use it and worry about the security risks later.

Once again, I wanted to say thanks for all of the e-mails and phone calls to
get me up and running.

Ken






Date: Tue, 20 Jun 2000 18:30:36 -0700
From: Qpopper Support <qpopper at qualcomm dot com>
Subject: Re: Thanks for the help!

At 4:15 PM -0400 6/20/00, Ken Hodges wrote:

>  Just for reference, it seems that there is a problem with redhat 6.0 or 6.2
>  and qpopper3.0.2 in that it will not authenticate. From what I can gather,
>  it appears that in order to make the latest release work with redhat, one
>  has to do some modifying to the PAM files, which is not documented anywhere.
>  I was able to get an older version of qpopper (2.5.3) running on this
>  machine,  and everything seems lovely.  Since this one works, I think I'll
>  just use it and worry about the security risks later.

You can always use 3.x without PAM enabled, that should work the 
same as 2.x, without the security vulnerability.  Just don't add 
'--enable-PAM' when you run ./configure.

Have you tried with tracing enabled?

 From whom have you heard that pam files need to be changed?

Are you using PAM files that you obtained from some other source? 
The Qpopper FAQ lists suggested entries for PAM files and Qpopper 
at <http://www.eudora.com/qpopper/faq.html#PAM>.

From: "James Nelson" <james at digit.bloomnet dot com>
Subject: popper (pop3) /etc/pam.d/pop3 config file that works
Date: Tue, 20 Jun 2000 23:00:41 -0500

Ok Ok........  I give..........  I can't stand watching this flood of
mail go by anymore.

Here is one that works with shadow password and MD5 enabled on RedHat
Linux 6.2

/etc/pam.d$ cat pop3
#%PAM-1.0
auth       required     /lib/security/pam_pwdb.so shadow nullok
# auth       required     /lib/security/pam_pwdb.so nullok
account    required     /lib/security/pam_pwdb.so
password   required     /lib/security/pam_cracklib.so
password   required     /lib/security/pam_pwdb.so nullok use_authtok
md5 shadow
# password   required     /lib/security/pam_pwdb.so nullok use_authtok
md5
session    required     /lib/security/pam_pwdb.so

cheers.

James


----- Original Message -----
From: "Qpopper Support" <qpopper at qualcomm dot com>
To: "Subscribers of Qpopper" <qpopper at lists.pensive dot org>
Cc: <qpopper at qualcomm dot com>
Sent: Tuesday, June 20, 2000 8:30 PM
Subject: Re: Thanks for the help!


| At 4:15 PM -0400 6/20/00, Ken Hodges wrote:
|
| >  Just for reference, it seems that there is a problem with redhat
6.0 or 6.2
| >  and qpopper3.0.2 in that it will not authenticate. From what I
can gather,
| >  it appears that in order to make the latest release work with
redhat, one
| >  has to do some modifying to the PAM files, which is not
documented anywhere.
| >  I was able to get an older version of qpopper (2.5.3) running on
this
| >  machine,  and everything seems lovely.  Since this one works, I
think I'll
| >  just use it and worry about the security risks later.
|
| You can always use 3.x without PAM enabled, that should work the
| same as 2.x, without the security vulnerability.  Just don't add
| '--enable-PAM' when you run ./configure.
|
| Have you tried with tracing enabled?
|
|  From whom have you heard that pam files need to be changed?
|
| Are you using PAM files that you obtained from some other source?
| The Qpopper FAQ lists suggested entries for PAM files and Qpopper
| at <http://www.eudora.com/qpopper/faq.html#PAM>.
|


Date: Wed, 21 Jun 2000 10:40:45 -0500 (CDT)
From: Super-User <root at server-icaweb-org.icaweb dot org>
Subject: qpopper compile on Solaris 8

Hello everyone.

I am new to mail administration and UNIX in general.  I am trying to compile 
and run qpopper.  I am Solaris 8 on Sparcstation.

Whenever I run ./configure, I get

creating cache ./config.cache
checking whether make sets ${MAKE}... ./configure: make: not found
no
checking for gcc... no
checking for cc... no
configure: error: no acceptable cc found in $PATH

I tried to go through the config file and change the make directory to the
full path but I couldn't find where to do that.  Can anyone give me some idea?  

Your help is much appreciated.

Sincerely,
Greg Strange


Date: Wed, 21 Jun 2000 15:47:48 +0000 (GMT)
From: Vinay Bharel <vinay at bharel dot com>
Subject: Re: qpopper compile on Solaris 8

Put the directory where make is installed in your path.

in Bash,

PATH=$PATH:/opt/blah/blah
export $PATH

---
Vinay Bharel
vinay at bharel dot com
http://www.bharel.com

On Wed, 21 Jun 2000, Super-User wrote:

> Hello everyone.
> 
> I am new to mail administration and UNIX in general.  I am trying to compile 
> and run qpopper.  I am Solaris 8 on Sparcstation.
> 
> Whenever I run ./configure, I get
> 
> creating cache ./config.cache
> checking whether make sets ${MAKE}... ./configure: make: not found
> no
> checking for gcc... no
> checking for cc... no
> configure: error: no acceptable cc found in $PATH
> 
> I tried to go through the config file and change the make directory to the
> full path but I couldn't find where to do that.  Can anyone give me some idea?  
> 
> Your help is much appreciated.
> 
> Sincerely,
> Greg Strange
> 


Date: Wed, 21 Jun 2000 12:02:39 -0400
From: Brad Groshok <bgroshok at odyssey.on dot ca>
Subject: Re: qpopper compile on Solaris 8

Hi Greg:
You need to install a compiler
gcc for example

go to http://www.sunfreeware.com/

and download
ftp://nce.sun.ca/pub/freeware/sparc/8/gcc-2.95.2-sol8-sparc-local.gz

Then do:
gzip -d gcc-2.95.2-sol8-sparc-local.gz
pkgadd -d gcc-2.95.2-sol8-sparc-local

Then try to compile popper

Brad


At 10:40 AM 6/21/00 -0500, you wrote:
>Hello everyone.
>
>I am new to mail administration and UNIX in general.  I am trying to compile
>and run qpopper.  I am Solaris 8 on Sparcstation.
>
>Whenever I run ./configure, I get
>
>creating cache ./config.cache
>checking whether make sets ${MAKE}... ./configure: make: not found
>no
>checking for gcc... no
>checking for cc... no
>configure: error: no acceptable cc found in $PATH
>
>I tried to go through the config file and change the make directory to the
>full path but I couldn't find where to do that.  Can anyone give me some 
>idea?
>
>Your help is much appreciated.
>
>Sincerely,
>Greg Strange

     _/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/
    _/ Regards: Brad Groshok (bgroshok at odyssey.on dot ca)             _/
   _/ President Odyssey Network Inc. http://www.odyssey.on.ca    _/
  _/ London Ontario Canada PH:(519)660-8883 Fax:(519)660-6111   _/
_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/