xmh-pop-1.0b - mh/xmh with POP/Unix auth. support

xmh-pop-1.0b - mh/xmh with POP/Unix auth. support

Post by Frank Mang » Wed, 13 Sep 1995 04:00:00



--

xmh-pop-1.0b (beta release) is available in ftp://ftp.ceram.fr/system/mail

#### INTRODUCTION

  This package will allow xmh to properly interact with the MH
package when MH has been compiled with POP / UNIX authentication
support. The added functionalities are:

- the ability to prompt the user for a password
- the ability to detect if a forked mh command requires a passwd (as
inc and msgchk do), and to feed the command with the password

#### WHAT ELSE'S NEEDED

- MH-6.8.3 source tree:
  minor changes to the MH package are unfortunately required. See
  README.MH for details.
  The patch is included in this distribution, see instructions below.

  Once the patch has been applied, the MH package must be recompiled
  with POP support, and UNIX authentication; refer to the MH
  documentation for more instructions.

- You will have to patch and recompile xmh. See the file README.XMH
  for a description of the changes to xmh.

mh-6.8.3, popper-1.831, xmh-mitR5, and xmh-pop are available via
anonymous ftp on ftp.ceram.fr in the directory /system/mail:

  ftp://ftp.ceram.fr/system/mail

#### SECURITY

-  The approach used implies storing a x-ored clear text password in
  the memory space of a running program (xmh) for the lifetime of the
  program. If you are unsure about the risks this implies, you probably
  shouldn't use this patch.

-  The patches to MH will generate programs (e.g. inc & msgchk) that
  read passwords from their standard  input. This will allow a silly
  user to store a clear text password in a file or a script so as to
  feed it automatically to the mh programs.

- xmh will feed external programs (e.g. inc) with clear-text
  passwords: better make sure these programs aren't trojan horses. As
  a consequence the way xmh looks for mh binaries has been modified,
  see README.XMH

#### KNOWN PROBLEMS

- We got many many deadlocks with the select in xmh/command.c, which
  never returned even though the MH command did write on stderr. The
  problem disapeared after we replaced vfork by fork in command.c, but
  we are unsure if this was really causing the problem.. there may be
  a bug laying around there

The program succesfully compiled and is being tested for the following
configs:

SunOS 4.1.3_U1 1 / Sun cc -O
SunOS 4.1.3_U1 1 / gcc-2.4.5 -fstrength-reduce -fpcc-struct-return
HP-UX A.09.05    / HP cc +O1 -Aa +DA1.0
HP-UX A.09.05    / gcc-2.4.5 -fstrength-reduce -fpcc-struct-return -O -ansi

  Comments appreciated.

        Frank Mangin                            Tel: (33) 93 65 78 57

 
 
 

xmh-pop-1.0b - mh/xmh with POP/Unix auth. support

Post by Frank Mang » Thu, 14 Sep 1995 04:00:00


--

  .. is available from ftp://ftp.ceram.fr/system/mail/xmh-pop-1.1b.tar.gz

From the distrib:

-------  README -----------------------------

/* THIS PACKAGE HAS SECURITY IMPLICATIONS: read this file carefully
 * before you use it
 */

#### INTRODUCTION

  This package will allow xmh to properly interact with the MH
package when MH has been compiled with POP / UNIX authentication
support. The added functionalities are:

- the ability to prompt the user for a password
- the ability to detect if a forked mh command requires a passwd (as
inc and msgchk do), and to feed the command with the password
----------------------------------------------

------- CHANGES ------------------------------
#### 1.0b

Released 09/12/95

#### 1.1b

- Added -s link flag in xmh Imakefile to strip the binary
- Closed input pipe in _DoCommandToFileOrPipe (caused xmh to run out
  of file descriptors)

Released 09/13/95
-----------------------------------------------

  Comments welcome

        Frank Mangin                            Tel: (33) 93 65 78 57


 
 
 

1. xmh-pop-1.2

  xmh-pop-1.2 is available from
ftp://ftp.ceram.fr/system/mail/xmh-pop-1.2.tar.gz
This version fixes a little bug with external script execution (e.g.
insert-filter),
and is otherwise identical to version 1.2b - just it has been running here for
2 months
now. From the README file:

--------------------------------

#### INTRODUCTION

  This package will allow xmh to properly interact with the MH
package when MH has been compiled with POP / UNIX authentication
support. The added functionalities are:

- the ability to prompt the user for a password
- the ability to detect if a forked mh command requires a passwd (as
inc and msgchk do), and to feed the command with the password

#### WHAT ELSE'S NEEDED

- MH-6.8.3 source tree:
  minor changes to the MH package are unfortunately required. See
  README.MH for details.
  The patch is included in this distribution, see instructions below.

  Once the patch has been applied, the MH package must be recompiled
  with POP support, and UNIX authentication; refer to the MH
  documentation for more instructions.

- You will have to patch and recompile xmh. See the file README.XMH
  for a description of the changes to xmh.

mh-6.8.3, popper-1.831, xmh-mitR5, and xmh-pop are available via
anonymous ftp on ftp.ceram.fr in the directory /system/mail:

  ftp://ftp.ceram.fr/system/mail
-----------------------------------

        Frank Mangin                
        CERAM                            Phone #93 95 45 36

        06902 Sophia-Antipolis CEDEX    
        France

2. LinuxPPC, KVM and pilot USB connection

3. xmh-pop-1.2b

4. change into a process which is started on bootup in the background

5. Help with XMH and MH (was: Re: MH for Linux, *please*!

6. DIP which is latest?

7. xmh as POP mail client?????

8. Milo and AlphaServer 300

9. Perl pop client, xmh, and weird address

10. MH/xmh/exmh or other full featured mail reader.

11. Setting your return path using mh/Xmh ???

12. xmh... where is MH???

13. xmh and mh for Linux