Re: [cobalt-users] raq3 catch-all alias problems

[Chris Adams <cmadams@xxxxxxxxxx>]

Once upon a time, Duncan Laurie <duncan@xxxxxxxxxx> said:
> I was asked by our support department not to provide patches in this
> form and subsequently removed it from the ftp site.  The problem is
> that it was an unsupported patch but it came from my cobalt.com email
> address and was available on the cobalt ftp site--giving the
> impression that it was something official.  Support was not aware
> of its existence, but they still got asked about it and were expected
> by customers to support it.

I can understand that, but the problem was discovered over two months
ago, and still has no publicly available solution!  Neither does the FP
security hole.  There is a need to make sure that solutions are stable,
but solutions need to be released in a timely manner (especially when
they relate to security problems).

> Not wanting to cause them any more undue stress and headaches at my
> expense I decided it would be best to remove it from official sources.
> But unfortunately that was my only copy as well... I tried regenerating
> it from CVS but there are other fixes that have since been made in
> these areas and I couldn't remember exactly what I had changed...
> The fixes were all rolled into the next raq3 update (3.0) which should
> be entering testing someday soon...

It hasn't even entered testing yet?  So we are talking at least a month
away, right?  Why couldn't an update have been released?

> In any event, I'm glad a list member had a copy and got it to you.
> I will use an unaffiliated email account to subscribe to your unofficial
> mailing list when its ready so as to avoid confusing the issue any
> further.

There shouldn't even be a need for a separate mailing list.

> Oh, and I remember someone wrote a script to regenerate the 
> /etc/virtusertable file from the existing userbase, w/o having to
> use the UI and click "save" on each person's alias settings page.
> You might want to see if you can find that as well... (should be in
> the archives, somewhere)

See http://hiwaay.net/~cmadams/files/misc/ for my script.
-- 
Chris Adams <cmadams@xxxxxxxxxx>
Systems and Network Administrator - HiWAAY Information Services
I don't speak for anybody but myself - that's enough trouble.