Subject: Re: IMAPD on SCO Open Server 3.2v4.2

From: Mark Crispin <[email-masked]>
Date: Wed, 9 Aug 1995 21:25:55 -0700

I am very confused by this report.

imapd does not use the root password; in fact, it is impossible to log
into imapd as root or any other UID 0 user name.

In order for imapd to process logins, it must be run by inetd with the
following access:
	1) it must be able to read passwords (whether from /etc/passwd
	   or from a shadow password file)
	2) it must be able to execute the setuid() and setgid() calls.

This usually means that imapd needs to be run as root by inetd.  imapd
will discard its root access as part of the login process, so there is no
security problem by doing this.

On 9 Aug 1995, Ferry Winarta wrote:
> I try to use pc pine to connect to our mail server (using pine 3.91), via
> imap2 port.
>
> It only works by using root password.
>
> We are using C2 security features from SCO. This will run imapd with
> NOLUID (set in /etc/inetd.conf).
>
> Is there anybody ever set this up, or have any idea for me to be tried.
>
> Thanks and Best Regards
>
> ferryw
>
> NB: I've posted the same subjects yesterday, but I couldn't find it
> today.

-- Mark --

DoD #0105, R90/6 pilot, FAX: (206) 685-4045  ICBM: N 47 39'35" W 122 18'39"
Science does not emerge from voting, party politics, or public debate.

---

From: Ferry Winarta <[email-masked]>
Date: 9 Aug 1995 22:57:06 GMT

Thanks and Best Regards

ferryw

---

From: [email-masked] (Gunther Anderson)
Date: 10 Aug 1995 19:42:10 GMT

Ferry Winarta ([email-masked]) wrote:

: I try to use pc pine to connect to our mail server (using pine 3.91), via
: imap2 port.

: It only works by using root password.

: We are using C2 security features from SCO. This will run imapd with
: NOLUID (set in /etc/inetd.conf).

I believe that C2 uses Shadow passwords.  As far as I've ever seen, Pine 
won't use Shadow passwords on SCO.  This may not be the problem, but it 
seems likely to me.  Try telnetting into the IMAP port and having the 
dialog by hand, so you can see the errors directly.

Gunther Anderson