[cobalt-developers] Hello...I'm new here and could use some help...

[Jerry Pape <jpape@xxxxxxxx>]

Hello all,

While testing my new Raq3i, I discovered that my clients cannot
use CAPA (built-in password changing) in the Eudora mail client.

This is an important feature, because I don't grant UI access to
my users and I do require APOP.

I discovered that the version of qpopper 2.xx doesn't support this.
Also found that the version of qpopper 2.xx that comes with the 3i
according to quallcomm has some security holes in it. With suff. 
movtivation to attempt my first violation of the Cobalt warranty I 
did the following:

1) cp /usr/sbin/in.qpopper /usr/sbin/old.in.qpopper
2) cp /usr/sbin/popauth /usr/sbin/old.popauth

3)   ./configure --enable-specialauth 
--enable-bulletins=/var/spool/mail/bulletins --enable-log-login 
--enable-apop=/etc/pop.auth --with-popuid=admin

4)  make
cd popper/
cp popper /usr/sbin/in.qpopper
cp popauth /usr/sbin/popauth

5) set owner/group ids and perms to match "old." files

6) tried accessing mail got "auth" error

7) tried reentering the passwds in UI and reenabling APOP

8) tried accessing mail again got "auth" error

9) mv /etc/pop.auth old.pop.auth

10) popauth -init

11) popauth -user jpape
pass:
pass:

12) tried accessing mail->success

13) attempted similar access for fictitious test client->no success

14) looks like qpopper 3.02 works fine, but popauth is not working
with the UI and I will have to build popauth entries from the command line
which defeats the whole purpose of enabling CAPA via qpopper 3.02 in the
first place.

15) As I have only replaced executables with executables of the same path,name,
ownership and permissions, I can only assume that the problem lies with
my configuration specs for building qpopper and popauth or there is
some underlying mystery in cobalt UI.

16) In a worst case scenario, I assume that I can simply:
a) mv old.in.qpopper in.qpopper
b) mv old.popauth popauth
c) mv old.pop.auth pop.auth

and all will be well?

17) Any clues ASAP would be most appreciated.

JP
--
--------------
|  Jerry Pape
|  jpape@xxxxxxxx
--------------