Re: [bug-anubis] [INFO] User identification problems with Anubis v 4.0

[Sergey Poznyakoff]

Daniel S. Haischt <address@hidden> wrote:

> OK - This was my misinterpretation. I thought if the
> ACCOUNT field is NULL the AUTHID field will be used
> as the system's user name.

That is right. Notice, however, that NULL *is not* a literal
string "NULL" (according to your latest mail that was what's
been stored in your database). Instead, NULL (no quotes) is a
special value in SQL language specifying 'an empty field'.

>  > [41162] GNU Anubis is running...
>  > [41162] Connection from 192.168.120.239:1794
>  > [41255] IDENT: connected to 192.168.120.239:113
> SERVER >>> 1794, 24 : USERID : UNIX : haischt(36)
>  > [41255] IDENT: resolved remote user to  haischt.
>  > [41255] UID:65534 (nobody), GID:65534, EUID:65534, EGID:65534
>  > [41255] Getting remote host information...

You have a TRANSLATION section and it was not able to translate the
user name. I'd suggest you to try commenting out the TRANSLATION section
first.
 
>  > [18712] Reading user configuration file .anubisrc...
> [18712] Wrong permissions on .anubisrc. Set 0600.
> If using 'mode transparent' I am not getting this error
> message. Additonally the ~/.anubisrc won't be recognized
> even if the file has 0600 permissions.

What do you get in your logs in this case?
 
> Another question about transparent vs. auth mode. If
> using 'ssl yes', should Anubis always present a SSl
> certificate to the MUA - No matter whether transparent
> or auth mode is currently used?

It does not present any certificates by default. The MUA has to request
them explicitely using STARTTLS command. If the MUA is SSL-capable, it
will do so once it realizes that the remote party is able to handle
SSL channels. Notice, however, that most MUAs require enabling this
feature in their config files.

> And finally a question about storing configuration
> files in the database. Actually this is kind of
> a feature request. Would it be possible to store
> the complete contents of a anubisrc file in a
> database field (e.g. a BLOB field)?

We were thinking about this possibility. However it has not been
evaluated yet.

Regards,
Sergey