- Users - KICTANet

Fix suggestion for broken login on Linux Distributions with suhosin patched PHP (e.G. Debian Wheezy)
by Seidel, Michael 05 Aug '14

05 Aug '14

Hi List, I ran into a problem lately and I thought it was best to report my findings. I was upgrading a system Debian Lenny to Wheezy (yeah, I know, it took some time, but it was for internal use anyway) and therefor from vexim to exim4u. So far so good, but after changing the password from CHANGE to something else failed my login. A quick look in the database revealed the issue: The password encryption scheme changed from md5 to sha512, as you can easily see on the encrypted passwords itself: Old: CHANGE : $1$12345678$2lQK5REWxaFyGz.p/dos3/ New: CHANGE : $6$P0s1h8hgqT/K$qGoe/zSh6crG/MsDTlnxmnGGufEVftsB2sPCgfopV6TmoT2XBVgGQ6cAu00GJUY9GHaTO1RsNDJUNwY1MZqQa/ See http://php.net/manual/en/function.crypt.php for those without crypto basic knowledge with additional information on this. The old one was plain MD5 (starting with $1$SALT$...), which you should not use anymore, but better than plain, right guys? ;-))) A real patch for this incoming? I'll be looking at http://axel.sjostedt.no/misc/dev/vexim-customizations/ next. The new one is SHA-512 (Starting with $6$SALT$...), which is way longer (so it needed the - already implemented - var(255) mysql patch mentioned on this list before) and it has a 16 character salt. But login was broken at that point. I found out, that a suhosin patch was added to Debian PHP - to promote more secure passwords, but it broke some older scripts. After some fiddling with the function crypt_password code in ./config/functions.php I'd suggest a code change to: --------------------------- function crypt_password($clear, $salt = '') { global $cryptscheme; if ($cryptscheme == 'sha') { $hash = sha1($clear); $cryptedpass = '{SHA}' . base64_encode(pack('H*', $hash)); } else { if ($salt != '') { if ($cryptscheme == 'sha512') { $salt = substr($salt, 0, 16); } else if ($cryptscheme == 'des') { $salt = substr($salt, 0, 2); } else if ($cryptscheme == 'md5') { $salt = substr($salt, 0, 12); } else { $salt = ''; } $cryptedpass = crypt($clear, $salt); } else { $cryptedpass = crypt($clear); } } return $cryptedpass; } --------------------------- So if somebody ran into that problem again they just have to set /* Set to either "sha", "sha512", "des" or "md5" depending on your crypt() libraries */ $cryptscheme = "sha512"; in ./config/variables.php --------------------------- Some real class to check which encoding to use would be more cool but not necessary IMHO. You need to configure your backend with certain encoding anyways, just think about IMAP/POP services which require a set crypt scheme. BUG: My code piece will result in first login failures if somebody just did not login first to have the password converted from md5 to sha-512 to find out their system changed their encoding but already changed the var in variables.php to sha512. They eventually come here to read about this: So please change it back to default: md5 , login and than change it back to sha512 or copy that sha512 crypt password from above to database. So what does the List say about this? Is this the correct solution? Regards, Michael Seidel System Administrator FAI rent-a-jet AG http://www.fai.ag

1 0

Re: [Exim4U] Blacklisted URL in message
by Terry 26 Jun '14

26 Jun '14

Hi by there own address I meant a gmail one so they noticed the block. They do have there own caching dns server and every thing seems in order. I have disabled the check for them so things are fine now. But it was a bit puzzling -- ------------------------------------ Terry

2 1

Re: [Exim4U] Blacklisted URL in message
by Terry 20 Jun '14

20 Jun '14

They have had there own email blocked yesterday as well when trying to email from a home address. But when I check the logs it seems to be catching legitimate emails as well as it should. I didn't want to disable it as it does a good job but may have to. -- ------------------------------------ Terry

2 1

Blacklisted URL in message
by Terry 19 Jun '14

19 Jun '14

Hi one of our customers complained about not receiving some email and it seems they were blocked due to black listed url but I went and checked and they are not listed. Unless they recently became unlisted ? +++ 1WxHw9-000PUG-3y has not completed +++ 2014-06-18 15:38:09 1WxHw9-000PUG-3y H=mail50.scotnet.co.uk (sys30.scotnet.net) [217.16.223.65] F=<sjones(a)pesol.co.uk> rejected during MIME ACL checks: Blacklisted URL in message. (pritchard-edwards.co.uk) in. See http://lookup.uribl.com. +++ 1Wwpio-000MvZ-TN has not completed +++ 2014-06-17 09:30:31 1Wwpio-000MvZ-TN H=smtp.clearstreamgroup.co.uk (smtp2.clearstreamtechnology.co.uk) [46.17.208.145] F=<rhys.taylor(a)30parkplace.co.uk> rejected during MIME ACL checks: Blacklisted URL in message. (familyarbitrator.com) in. See http://lookup.uribl.com. -- ------------------------------------ Terry

2 1

rate limits
by Terry 14 Apr '14

14 Apr '14

Hi I just wanted to check if I want to rate limit and block authenticated senders with a run away virus can I just pop this in acl_check_rcpt: # Keep authenticated users under control deny authenticated = * ratelimit = 100 / 1d / strict / $authenticated_id log_message = Sender $sender_address Emails sent $sender_rate Your limit is Per day is $sender_rate_limit I did test it on a standard exim install and seemed to work fine. Pretty much straight off the exim manual or does exim4u all ready have some thing in place for this ? Thanks Terry

2 1

Re: [Exim4U] New Exim4u installation
by Kenny Pepiton 07 Mar '14

07 Mar '14

There should be a matching error_log entry in /var/log/httpd/error_log - Kenny -------- Original message -------- From: "Mark D. Weaver" <mweaver(a)compinfosystems.com> Date:03/07/2014 5:56 AM (GMT-08:00) To: Exim4U General Discussion <users(a)exim4u.org> Subject: Re: [Exim4U] New Exim4u installation On 7 March 2014 04:19, Mark D. Weaver <mweaver(a)compinfosystems.com> wrote: Hi All, I'm brand new to Exim. I'm working on replacing my aging CentOS 5.10 web/mail server running Sendmail with a CentOS 6.4 server running Exim. I've installed the Exim4u web management but I'm having trouble getting the management part working. I've got Exim working just fine, but when I try and add a domain via the web interface I see in the apache access log that when submitting the domain information apache is tossing a 500 error. Any ideas? Yes. What is the content of the error 500? This is the only information I'm getting so far which is coming from Apache. 10.10.3.110 - - [07/Mar/2014:03:54:53 -0500] "POST /exim4u/siteaddsubmit.php HTTP/1.1" 500 - "http://1701d/exim4u/siteadd.php?type=local" _______________________________________________ users mailing list users(a)exim4u.org https://exim4u.org/mailman/listinfo/users

1 0

New Exim4u installation
by Mark D. Weaver 07 Mar '14

07 Mar '14

Hi All, I'm brand new to Exim. I'm working on replacing my aging CentOS 5.10 web/mail server running Sendmail with a CentOS 6.4 server running Exim. I've installed the Exim4u web management but I'm having trouble getting the management part working. I've got Exim working just fine, but when I try and add a domain via the web interface I see in the apache access log that when submitting the domain information apache is tossing a 500 error. Any ideas? _____________________ Mark Weaver Computer Information Systems & Services, Inc. Phone: (717) 774-2002 Cell : (717) 512-9718 FAX : (717) 774-4802 mweaver(a)compinfosystems.com http://www.compinfosystems.com

2 2

PHP Fatal error: Class 'DB' not found
by Kebba Foon 18 Feb '14

18 Feb '14

Dear all, Was installing the exim4u in a new server but encounter the below error: PHP Fatal error: require_once(): Failed opening required 'DB.php' (include_path='.:/usr/share/php:/usr/share/pear') in /var/www/exim4u/config/variables.php on line 3 The php version am using is PHP 5.4.4-14+deb7u7, it looks like the DB.php is no more in the /usr/share/php. i have another previous installation which is running php version 5.3.3. Debian or PHP5 must have change something and miss things up, i might try to work on a fix later on just too busy right now. Thanks Kebba

2 1

Re: [Exim4U] Permission denied
by Terry 07 Feb '14

07 Feb '14

> Hi I am missing some real obvious here but I just can't see what when I > create a domain it does not pick up the mailroot as it should. > Even if I amend the maildir in the db then send a test to > postmaster at test2.com it still tries to deliver to > /test2.com/postmaster/Maildir > > > ls -al /usr/home/exim4u/mail/ > total 8 > drw-r--r-- 2 exim4u exim4u 512 Feb 6 00:18 . > drw-r--r-- 3 exim4u exim4u 512 Feb 6 00:18 > > id exim4u > uid=1002(exim4u) gid=1002(exim4u) groups=1002(exim4u) > > > mysql_setup/mysql.sql > uid smallint(5) unsigned NOT NULL default '1002', > gid smallint(5) unsigned NOT NULL default '1002', > > > variables.php > $uid = shell_exec('id -u exim4u'); > $gid = shell_exec('id -g exim4u'); > $mailroot = "/home/exim4u/mail/"; > > > mysql> SELECT `maildir`, `uid`, `gid` FROM `domains` WHERE `domain` LIKE > 'test2.com' ; > +------------+------+------+ > | maildir | uid | gid | > +------------+------+------+ > | /test2.com | 1002 | 1002 | > +------------+------+------+ > 1 row in set (0.00 sec) > >The "real obvious" is that you forgot to update the records in `users` >table. >Regards, >Rimas Turned out to be simple permissions error on the base of the home directory All sorted now thanks for the help and you were right about the users table which got me looking in the right direction Thanks Terry

1 0

Permission denied
by Terry (1stKMH) 06 Feb '14

06 Feb '14

Hi I am missing some real obvious here but I just can't see what when I create a domain it does not pick up the mailroot as it should. Even if I amend the maildir in the db then send a test to postmaster(a)test2.com it still tries to deliver to /test2.com/postmaster/Maildir ls -al /usr/home/exim4u/mail/ total 8 drw-r--r-- 2 exim4u exim4u 512 Feb 6 00:18 . drw-r--r-- 3 exim4u exim4u 512 Feb 6 00:18 id exim4u uid=1002(exim4u) gid=1002(exim4u) groups=1002(exim4u) mysql_setup/mysql.sql uid smallint(5) unsigned NOT NULL default '1002', gid smallint(5) unsigned NOT NULL default '1002', variables.php $uid = shell_exec('id -u exim4u'); $gid = shell_exec('id -g exim4u'); $mailroot = "/home/exim4u/mail/"; mysql> SELECT `maildir`, `uid`, `gid` FROM `domains` WHERE `domain` LIKE 'test2.com' ; +------------+------+------+ | maildir | uid | gid | +------------+------+------+ | /test2.com | 1002 | 1002 | +------------+------+------+ 1 row in set (0.00 sec) 2014-02-06 17:24:35 1WBSgl-000MjW-3V == /test2.com/postmaster/Maildir <postmaster(a)test2.com> R=virtual_domains T=virtual_delivery defer (13): Permission denied: cannot create /test2.com/postmaster/Maildir Any pointers welcome Thanks -- ------------------------------------ Terry

2 1