Subject: INSTRUCTIONS: How to set up Pine for rimap under Solaris 2.4 and NIS+

From: [email-masked] (David Drum)
Date: 24 Mar 1995 22:51:54 GMT

I have figured out how to configure Solaris 2.4 running NIS+ and Pine so that
users may access an imapd server without having to provide their password yet
not compromising the security of the imap server machine.

I hope that these instructions are useful to someone.  Perhaps this will go in
the FAQ.

You may also contact me if you have problems compiling Pine under Solaris.

0) Install /etc/rimapd

1) Reconfigure the Solaris nsswitch.conf
   The OS must know how to treat login requests.  We use NIS passwd entry
   rewriting to ensure the login security of the server machine.  Thus we
   must tell the OS to use NIS-style lookups.

   Edit /etc/nsswitch.conf on the computer running the imapd server.
   Replace the "passwd: [files] [nis] [nisplus]" line with:

passwd: compat
passwd_compat: nisplus

2) Tell the imap server machine about the machines that will be requesting
   remote logins

   Edit /etc/hosts.equiv and add the names of the trusted hosts:

host1.your.domain
...
hostn.your.domain

3) Configure /etc/passwd and /etc/shadow to filter NIS+ password entries
   This is where the security measures are made.  We "rewrite" password
   entries for users not in /etc/passwd, giving them a different shell -
   /etc/rimapd - which allows rlogin, but not shell access.

   Append this line to /etc/passwd:
+:x:-1:-1:::/etc/rimapd

   Append this line to /etc/shadow:
+::-1::::::

And you are done!

I would be happy to field questions about this procedure.

Regards,

David
[email-masked]
--
"That man has a rare gift for obfuscation." -- ST:DS9