Re: Secure Relaying -- a start

[will trillich <will@serensoft.com>]

On Sun, Feb 02, 2003 at 02:14:28PM +0000, Ed Lawson wrote:
> >will trillich wrote:
> >
> >>
> >>yep. try uncommenting one of them (if it happens to refer to
> >>/etc/exim/passwd then you need to set that up properly to
> >>match)
> >>
> One more question...or two or three.

i know how you feel. :)

> Can the /etc/exim/passwd file be created with htpassd?  That
> would seem the easiest way and whst I used.  What permissions
> are required on the passwd file?  

note: i am not an expert. an expert, according to my dad, is a
sonofabitch fifty miles from home. i'm home, so i certainly
don't qualify.

htpasswd it probably fine for this purpose.

> I now have Exim looking to authenticate before relaying and I
> have a passwd file created by htpassed which is readable only
> by root...but still not go.  Permission problem?  

i made the password file "chmod 600" and then of course it
couldn't read it at all, since i make the file as root. to fix
that i did "chown mail.mail" and it's been happy ever since.
your situation may be the same. try it out.

(if you add group 'mail' to your personal username, you might
make it chmod 640 with chown youruser.mail -- but there may be
security issues there i'm not aware of.)

now if you get PAM to cooperate, let me know.

	plain:
		driver = plaintext
		public_name = BASIC
		# $3 =~ s/:/::/g
		# if pam($2:$3) {yes} else {no}
		server_condition = ${if pam{$2:${sg{$3}{:}{::}}}{yes}{no}}
		server_set_id = $2

when i do the interactive tests, it works like a champ; when i
try it from a remote client, nothing doing. still working on
it...

-- 
I use Debian/GNU Linux version 3.0;
Linux server 2.4.20-k6 #1 Mon Jan 13 23:49:14 EST 2003 i586 unknown
 
DEBIAN NEWBIE TIP #133 from nate <debian-user@aphroland.org>
:
Looking to MOVE A PARTITION TO A NEW DISK DRIVE?
1) install the new disk, partition & format it as you like
2) mount the disk somewhere on the root filesystem (I use /usr.new)
3) go to single user mode ('telinit 1')
4) cd /usr ; cp -a * /usr.new/
5) cd / ; mv usr usr.old ; mkdir /usr
5) edit /etc/fstab to reflect the new location
   (/usr.old) and new partition (/usr)
6) go back to runlevel 2 (logout, or 'telinit 2'
   or whatever runlevel you use)
7) run the system for a few days and make sure everything
   is good, once this is done erase /usr.old if you want.

Also see http://newbieDoc.sourceForge.net/ ...