[juneau-lug] Re: SPAM filtering...



> -----Original Message-----
> From: juneau-lug-bounce@xxxxxxxxxxxxx 
> [mailto:juneau-lug-bounce@xxxxxxxxxxxxx] On Behalf Of Kevin Miller
> Sent: Thursday, February 27, 2003 10:39 AM
> To: 'juneau-lug@xxxxxxxxxxxxx'
> Subject: [juneau-lug] Re: SPAM filtering...
> 
> 
> 
> We get a fair amount of mail over 10 mb so it would be a 
> problem to me. Also, I looked into updating sendmail 
> yesterday.  The default install after updates/security 
> patches is 8.12.3.  Current is 8.12.7.  One of the readmes 
> says to create a user & group called smmsp so that sendmail 
> no longer has to run as root.  It recommends using id #25 but 
> that's already taken by default on SuSE systems.  Don't know 
> if that's just a "convention" since sendmail listens on 25, 
> creating a semi-logical identity relationship or if it's 
> something used by the system at some deeper level.  They 
> didn't say what to do if it was already taken however so I 
> presume that it's not that critical. 

I would guess not - although it is possible to hard code user and group
ID numbers into a process instead of using the name.  What user does
SuSE have using ID 25?  I'm at work and all I have is OpenBSD to look
at, and user 25 is:  smmsp, Sendmail Message Submission Program.  I have
Postfix installed, so it must be an OpenBSD default account.

> What stumped me though, 
> is what to do w/the password.  Is SOP to leave it blank and 
> assign a nul shell to the account?  If not, how does sendmail 
> know how to log in?
> 

Sendmail won't ever actually log in.  It will just start and assign
itself the user and group id of smmsp.  IIRC you put an asterisk in
/etc/passwd, but do not put a password in /etc/shadow (using passwd).
Don't leave it blank!  Again, I only have OpenBSD available here, so I
can't check.

Myron knows more about the password/login stuff.

Cheers,

James


------------------------------------
This is the Juneau-LUG mailing list.
To unsubscribe, send an e-mail to juneau-lug-request@xxxxxxxxxxxxx with the 
word unsubscribe in the subject header.

Other related posts: