Re: [bug-anubis] [INFO] User identification problems with Anubis v 4.0

[Daniel S. Haischt]

Hello

Sergey Poznyakoff schrieb:
> The `ACCOUNT' field for the user `haischt' contains NULL.

OK - This was my misinterpretation. I thought if the
ACCOUNT field is NULL the AUTHID field will be used
as the system's user name. Additionally I thought
if the CONFIG field is NULL '~/.anubisrc' will be
used as a default value (which was not the case) ...

Anyway now it works!

Can you still help to sort out why identification via
identd does not work?

ident mail session transcript:

> [41162] GNU Anubis is running...
> [41162] Connection from 192.168.120.239:1794
> [41255] IDENT: connected to 192.168.120.239:113
SERVER >>> 1794, 24 : USERID : UNIX : haischt(36)
> [41255] IDENT: resolved remote user to  haischt.
> [41255] UID:65534 (nobody), GID:65534, EUID:65534, EGID:65534
> [41255] Getting remote host information...

For example if using 'mode auth' I am getting the
following error message ...

> [18712] Reading user configuration file .anubisrc...
[18712] Wrong permissions on .anubisrc. Set 0600.

If using 'mode transparent' I am not getting this error
message. Additonally the ~/.anubisrc won't be recognized
even if the file has 0600 permissions.

Another question about transparent vs. auth mode. If
using 'ssl yes', should Anubis always present a SSl
certificate to the MUA - No matter whether transparent
or auth mode is currently used?

If using transparent mode, Anubis does not present
a SSL certificate to my Thunderbrid mail client ...

And finally a question about storing configuration
files in the database. Actually this is kind of
a feature request. Would it be possible to store
the complete contents of a anubisrc file in a
database field (e.g. a BLOB field)?

--
Mit freundlichen Gruessen / With kind regards

Daniel S. Haischt   | phone:    +49 -7032-992909
Grabenstrasse 11    |           +49 -700-DHAISCHT
                    | fax:      +49 -7032-992910
D-71083 Herrenberg  | fax2mail: +49 -7032-7999738
GERMANY             | cell:     +49 -172-7668936

SIP:   sip:address@hidden:5060
email: address@hidden
web:   http://www.daniel.stefan.haischt.name/

#
# A sample system configuration file. Copy this file to `/etc/anubisrc'.
# To protect your passwords in this configuration file, use the 0600
# (u=rw,g=,o=) permissions, otherwise GNU Anubis won't accept this file.
# Hash-marked comments (#) and white lines are ignored.
#

#
# The "CONTROL" section.
# A system configuration file.
#

---BEGIN CONTROL---
bind anubis.abyssworld.de:24
remote-mta smtp.abyssworld.de:25
mode transparent
termlevel debug
loglevel all
logfile "anubis.log"
tracefile yes
# local-mta FILE-NAME [ARGS]
# termlevel NORMAL-VERBOSE-DEBUG-SILENT
# tracefile YES-OR-NO
# esmtp-auth USERNAME:PASSWORD
# socks-proxy HOST[:PORT]
# socks-v4 YES-OR-NO
# socks-auth USERNAME:PASSWORD
ssl yes
# ssl-oneway YES-OR-NO
ssl-cert /usr/local/etc/anubis/anubis.crt
ssl-key /usr/local/etc/anubis/anubis.key
ssl-cafile /usr/local/etc/anubis/root-ca.crt
allow-local-mta no
drop-unknown-user yes
user-notprivileged anubis
control-priority system
rule-priority system
---END---

---BEGIN AUTH---
smtp-greeting-message ESMTP Anubis (3.9.69)
smtp-help-message help message
# sasl-password-db file:/usr/local/etc/anubisdb.txt
sasl-password-db mysql://mail:address@hidden/mail
sasl-allowed-mech NTLM GSSAPI DIGEST-MD5 CRAM-MD5
---END---

#
# The "TRANSLATION" section.
# A system configuration file only.
#

---BEGIN TRANSLATION---
#translate address@hidden into USERNAME
translate address@hidden into haischt
translate address@hidden into haischt
---END---