SuSE 8.0 sendmail 8.12.2 cannot declare trusted users
Hi, I want to declare user 'me' as a trusted user to use the -f option and to supress the X-Authentification-Warning. I tried to set this: a) in /etc/mail/linux.mc with FEATURE(use_ct_file) define(`confCT_FILE', `/etc/mail/trusted-users') result: still receiving the X-Authentification-Warning for user 'me' b) added user 'me' in /etc/sendmail.ct ##################### # Trusted users # ##################### # this is equivalent to setting class "t" Troot Tdaemon Tuucp Tme Tdaemon wwwrun root uucp daemon mail me result: still receiving the X-Authentification-Warning for user 'me' I checked the cf/README file and sendmail 2nd Edition, also the SuSE packages-docs but cannot find an awnser. Thanks in advance Oliver -- ... don't touch the bang-bang fruit
On Tue, 2002-06-18 at 05:35, Oliver Fuchs wrote:
result: still receiving the X-Authentification-Warning for user 'me'
Let me guess, you try to run SuSEconfig after changing linux.mc and things didn't work. I found out the hard way that with the version of SuSEconfig I am using it will not update the sendmail.cf file if only linux.mc is changed. The solution is to change sometime in /etc/rc.config.d/sendmail.rc.config run SuSEconfig, changing back to the correct value and rerun SuSEconfig again. YMMV Charles -- "Oh, I've seen copies [of Linux Journal] around the terminal room at The Labs." (By Dennis Ritchie)
On Tue, 18 Jun 2002, Charles Philip Chan wrote: Hi Charles
Let me guess, you try to run SuSEconfig after changing linux.mc and things didn't work.
No I did not ... additionally I set in YAST-etc mail_create_config to no
I found out the hard way that with the version of SuSEconfig I am using it will not update the sendmail.cf file if only linux.mc is changed. The solution is to change sometime in /etc/rc.config.d/sendmail.rc.config run SuSEconfig, changing back to the correct value and rerun SuSEconfig again. YMMV
In SuSE Pro 8.0 the sendmail configuration file is placed in /etc/syconfig/sendmail: SENDMAIL_SMARTHOST="mail.foo.bar" SENDMAIL_LOCALHOST="" SENDMAIL_RELAY="" SENDMAIL_LUSER="root" SENDMAIL_ARGS="-L sendmail -Am -bd -om" SENDMAIL_CLIENT_ARGS="-L sendmail-client -Ac -q30m" SENDMAIL_EXPENSIVE="yes" SENDMAIL_NOCANONIFY="yes" NODNS="no" DIALUP="no" SENDMAIL_GENERICS_DOMAIN="linux.local" MASQUERADE_DOMAINS="linux.local" SMTP_AUTH_MECHANISMS="" SMTP_AUTH_SERVER="" STARTTLS="" SENDMAIL_DB_FOLD="yes" So ... no parameter given here to set trusted user ... I tried the following scenarios: 1) m4 linux.mc Edit the linux.mc file with features: FEATURE(use_ct_file) define('confCT_FILE', `/etc/mail/trusted-users') Run m4 /etc/mail/linux.mc > /etc/sendmail.cf ... result in the sendmail.cf file is: ##################### # Trusted users # ##################### # this is equivalent to setting class "t" Ft/etc/mail/trusted-users Troot Tdaemon Tuucp Tmdom wwwrun root uucp daemon mail The trusted-users file includes me as trusted user ... I restart sendmail with 'rcsendmail restart' and send a test file with 'sendmail -f bubu@asd.or me' and still receive the X-Authority message ... 2) Add Tme in sendmail.cf I add the following line in sendmail.cf: Tme Restart sendmail again and send a test file ... same result ... so, where is trusted user set in SuSE Pro 8.0? The last idea left is that sendmail is not using the sendmail.cf file in /etc? Oliver -- ... don't touch the bang-bang fruit
On Tue, 2002-06-18 at 18:39, Oliver Fuchs wrote:
Restart sendmail again and send a test file ... same result ... so, where is trusted user set in SuSE Pro 8.0? The last idea left is that sendmail is not using the sendmail.cf file in /etc?
It look like the trusted user file only gives permission of sending mail as another user and *not* to disable the warning. Try changing this line: dnl define(`confPRIVACY_FLAGS', `authwarnings,needmailhelo,novrfy,noexpn,noetrn,noverb')dnl to define(`confPRIVACY_FLAGS', `needmailhelo,novrfy,noexpn,noetrn,noverb')dnl Charles -- "By golly, I'm beginning to think Linux really *is* the best thing since sliced bread." (By Vance Petree, Virginia Power)
On Tue, 18 Jun 2002, Charles Philip Chan wrote:
It look like the trusted user file only gives permission of sending mail as another user and *not* to disable the warning.
Seems so ... but the trusted user feature defines clearly: use_ct_file Read the file /etc/mail/trusted-users file to get the names of users that will be ``trusted'', that is, able to set their envelope from address using -f without generating a WARNING MESSAGE. The actual filename can be overridden by redefining confCT_FILE.
Try changing this line:
dnl define(`confPRIVACY_FLAGS', `authwarnings,needmailhelo,novrfy,noexpn,noetrn,noverb')dnl
to
define(`confPRIVACY_FLAGS', `needmailhelo,novrfy,noexpn,noetrn,noverb')dnl
From sendmail 2nd Edition I get: If the PrivacyOptions option is declared with authwarnings, V8 sendmail inserts a special header line for possible security concerns [...] A user or program's user identity used the -f command-line switche to change identity of the sender to other (and user was NOT listed with T configuration command)
In my scenario the option PRIVACY_FLAGS was not set ... but regarding Robert Paulsen (Thu, 9 May 2002) the problem is: " The file /etc/mail/submit.cf does not contain the last line above. If I copy that line into /etc/mail/submit.cf, I no longer get the Authentication-Warnings." So SuSEconfig generates a /etc/mail/submit.cf file ... changing here the T class leads to the desired result ... I always thought the logic is: create from linux.mc and /etc/sysconfig/sendmail a valid /etc/mail/submit.cf file and copy it to /etc/sendmail.cf ... but the truth is that sendmail is using the submit.cf file as configuration file ... this is flustering and deranging ... maybe even wrong!!!! Oliver -- ... don't touch the bang-bang fruit
I found out what the problem is ... this sendmail-version is running as MTA (mail transmission agent) and MSP (mail submission program) ... so I had to configure the submit.mc file with FEATURE(`use_ct_file') ... now it is working ... thanks everybody. Oliver -- ... don't touch the bang-bang fruit
participants (2)
-
Charles Philip Chan
-
Oliver Fuchs