You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@spamassassin.apache.org by bu...@bugzilla.spamassassin.org on 2005/01/27 22:52:20 UTC
[Bug 4109] New: spamc/spamd don't provide authentication via PF_UNIX sockets
http://bugzilla.spamassassin.org/show_bug.cgi?id=4109
Summary: spamc/spamd don't provide authentication via PF_UNIX
sockets
Product: Spamassassin
Version: 3.0.2
Platform: Other
OS/Version: other
Status: NEW
Severity: enhancement
Priority: P5
Component: spamc/spamd
AssignedTo: dev@spamassassin.apache.org
ReportedBy: Enrik.Berkhan@akk.org
spamc/spamd allow for user authentication via RFC1413 ident within a trusted
cluster. There is currently no similar mechanism for local access via PF_UNIX
sockets.
Many UN*X-like OSs have mechanisms to identify the user connecting via PF_UNIX
socket. I've written a small patch for spamd that enables authentication via
sockopt(SO_PEERCRED) (see attachment). The patch mixes the SO_PEERCRED stuff
with another enhancement: --trusted-user <username> allows to specify a trusted
user that is permitted to set any other userid via spamd's User: header iff he
can be identified correctly before. Sorry for mixing the two, but it's still
small enough to understand, I think ;-)
The benefits from the two patches for me are
1) allows to run spamc from e.g. exim under its own trusted user id while
allowing to use -u ${local_part} to get individual user prefs and still use
--auth-ident
2) allows to run 1) without tcp/ident overhead when used locally
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
[Bug 4109] spamc/spamd don't provide authentication via PF_UNIX sockets
Posted by bu...@bugzilla.spamassassin.org.
http://bugzilla.spamassassin.org/show_bug.cgi?id=4109
Bob@Menschel.net changed:
What |Removed |Added
----------------------------------------------------------------------------
Target Milestone|Undefined |3.2.0
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
[Bug 4109] spamc/spamd don't provide authentication via PF_UNIX sockets
Posted by bu...@bugzilla.spamassassin.org.
http://bugzilla.spamassassin.org/show_bug.cgi?id=4109
Enrik.Berkhan@akk.org changed:
What |Removed |Added
----------------------------------------------------------------------------
Attachment #2631 is|0 |1
obsolete| |
------- Additional Comments From Enrik.Berkhan@akk.org 2005-06-08 04:01 -------
Created an attachment (id=2929)
--> (http://bugzilla.spamassassin.org/attachment.cgi?id=2929&action=view)
Patch for 3.0.3
Same patch as before for 3.0.3
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
[Bug 4109] spamc/spamd don't provide authentication via PF_UNIX sockets
Posted by bu...@bugzilla.spamassassin.org.
http://issues.apache.org/SpamAssassin/show_bug.cgi?id=4109
jm@jmason.org changed:
What |Removed |Added
----------------------------------------------------------------------------
Target Milestone|3.2.0 |3.3.0
------- Additional Comments From jm@jmason.org 2006-12-12 12:40 -------
moving RFEs and low-priority stuff to 3.3.0 target
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
[Bug 4109] spamc/spamd don't provide authentication via PF_UNIX sockets
Posted by bu...@bugzilla.spamassassin.org.
http://bugzilla.spamassassin.org/show_bug.cgi?id=4109
------- Additional Comments From Enrik.Berkhan@akk.org 2005-01-27 13:55 -------
Created an attachment (id=2631)
--> (http://bugzilla.spamassassin.org/attachment.cgi?id=2631&action=view)
Patch enabling the features mentioned in the original report.
Currently, the code is linux-specific wrt SO_PEERCRED. Note especially the
"struct ucred" unpacking. This is most probably not implemented portably.
There exist other mechanisms for PF_UNIX identification, e.g. for Solaris,
IIRC.
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.
[Bug 4109] spamc/spamd don't provide authentication via PF_UNIX sockets
Posted by bu...@bugzilla.spamassassin.org.
http://issues.apache.org/SpamAssassin/show_bug.cgi?id=4109
------- Additional Comments From jm@jmason.org 2006-12-05 06:44 -------
unlikely to happen in 3.2.0, due to the unportability
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.